Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa
File:                     d7e9b37d-5903-3091-b9b8-584129d58d11.roa (raw, json)
Hash identifier:          TiGI78uyPneyuThRGL2v0goDnJ5kkMfK94zkjdpn8vo=
Subject key identifier:   A6:1B:4F:22:31:54:68:B2:BA:15:7C:9B:F7:F1:E6:D7:59:45:F0:A3
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584937D93BB268A5584306707600
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     10835
IP address blocks:        65.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3b:b2:68:a5:58:43:06:70:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=c6121cf0-04bc-4dd9-992b-e607acac48f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:06:d8:f5:3b:71:9c:8b:72:bd:4b:00:72:
                    7e:63:b8:47:b9:ed:59:7f:c6:b8:21:18:51:6f:e2:
                    9b:e1:87:cf:23:bf:25:d7:40:98:b0:f6:e9:f6:33:
                    57:bf:fd:4d:2b:b3:74:f2:b5:1f:1b:51:b1:66:d5:
                    9a:9f:70:15:e8:cb:8c:3a:20:ec:d1:35:97:8e:02:
                    78:67:36:81:88:5e:6d:e6:a3:2b:1e:54:19:4b:c5:
                    bf:d4:35:bc:90:5b:46:b4:42:58:43:f3:9a:50:66:
                    b8:2c:c8:48:c1:ad:78:8b:cf:95:4a:3a:36:1d:16:
                    d4:b1:7b:ff:1c:d9:c8:ce:72:e9:91:4d:52:49:20:
                    e1:b9:b1:70:73:88:99:34:6d:d3:e2:1c:01:3e:53:
                    c2:37:e1:73:4c:ed:14:82:f3:65:6a:f9:62:f8:c5:
                    93:f4:5c:c0:ae:0a:0f:b8:7e:47:81:32:9c:79:d6:
                    11:15:8f:3e:41:df:05:17:0a:7f:ab:08:28:b3:5e:
                    aa:32:57:fd:3f:bf:17:59:fa:78:c7:59:af:70:84:
                    c6:88:27:66:a7:85:21:53:80:94:e0:60:d1:ca:5c:
                    b4:2d:26:85:b7:bd:07:f3:10:52:af:17:e1:72:51:
                    d4:58:70:68:eb:77:0a:20:7b:67:3e:3c:b7:ad:76:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1B:4F:22:31:54:68:B2:BA:15:7C:9B:F7:F1:E6:D7:59:45:F0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:07:d2:e0:80:a9:16:ff:14:8f:7d:7d:eb:a9:b1:44:52:16:
         70:70:f4:4d:e8:1f:b6:73:8e:7a:77:41:2b:ab:02:ee:26:57:
         30:06:63:bf:7e:54:65:f6:cf:56:2a:09:91:30:0f:40:64:8b:
         6f:80:51:18:3b:78:c1:88:5a:2e:c4:63:7a:19:5c:53:43:40:
         f6:25:bc:53:ab:04:23:93:77:23:3e:3f:e1:cc:0e:84:51:36:
         70:6f:d4:b4:ce:07:3a:74:34:17:10:1a:46:ca:4e:d7:cf:e4:
         93:26:9f:51:7c:d8:61:16:c9:3d:24:cb:39:96:bc:ae:e2:d7:
         66:ca:af:6d:b0:e1:e0:af:5b:cf:28:a4:90:c6:77:8d:96:f8:
         78:86:b8:d7:45:53:f3:2c:1a:e4:24:0b:aa:75:e5:e9:73:fb:
         e8:cc:cd:35:72:6f:5b:f6:c2:7d:8c:33:b6:09:8e:43:b9:a9:
         6a:b4:8a:65:dd:43:bc:5b:51:e5:40:3b:c6:9b:60:e0:3f:9c:
         3f:c0:04:7a:2d:bb:55:32:92:da:8a:b1:39:c7:2f:93:65:12:
         f0:bd:c8:ea:ed:5c:37:56:5c:18:1f:8b:d5:bd:b9:37:b9:99:
         20:5c:42:67:f9:a6:cc:5e:23:ce:9f:3e:eb:ce:70:53:91:ce:
         ec:ce:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:11 2025 by rpki-client