Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa
File:                     194f605c-f45e-385a-9de9-b8b69c6bd841.roa (raw, json)
Hash identifier:          8P8aCx+rAZTDp4fAwdLAb7ueUFnKnb7zAr7jkHtMeNM=
Subject key identifier:   BB:06:7E:70:C8:19:39:FC:59:86:19:0B:E0:4B:1F:4F:20:B3:07:C4
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F43285849350E975FA45C98FAE6132300
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     65224
IP address blocks:        199.212.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:97:5f:a4:5c:98:fa:e6:13:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=d571c5ff-1c51-4cc3-ba85-b4b0fb8548e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:88:93:e0:41:3b:81:fd:06:16:38:85:20:
                    1b:19:c8:0f:c3:e4:8e:d9:5b:c1:3c:bd:53:44:a7:
                    12:d5:62:ee:ee:08:a9:13:8d:3a:a7:0e:ff:f8:fd:
                    fe:3e:48:ea:9b:cb:89:ea:e0:e2:08:82:41:85:58:
                    81:27:3f:09:74:19:38:94:94:8c:9c:91:10:c4:24:
                    a8:21:fa:f0:f0:2b:94:0a:29:1a:a5:0a:e3:04:be:
                    10:16:9f:68:55:c6:de:2e:8b:14:45:45:f8:6c:c7:
                    8a:26:33:bd:09:3f:e0:e2:4e:35:9d:64:fc:7f:f6:
                    16:7c:aa:b7:45:e1:93:2c:dc:02:70:35:06:9d:bd:
                    33:56:55:af:e0:e9:9f:81:d1:89:0f:21:19:5b:06:
                    9c:13:68:52:6a:4b:8f:db:51:f9:f8:87:2f:e5:44:
                    da:9f:0a:f3:5c:d0:40:39:63:23:0f:86:34:59:7d:
                    2c:59:b3:54:70:ac:85:23:f9:7b:99:ec:03:dc:fc:
                    36:0b:44:46:c7:ff:ad:67:e4:93:f3:57:55:0b:0e:
                    a7:79:9c:40:84:62:46:28:56:65:1b:64:0d:0f:11:
                    f7:3b:44:47:6c:7a:c7:4b:7e:2b:f1:94:4b:29:95:
                    28:37:4f:e9:6d:66:89:30:45:2b:d4:b4:a7:5f:cc:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:7E:70:C8:19:39:FC:59:86:19:0B:E0:4B:1F:4F:20:B3:07:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:95:6c:92:3e:c1:a6:f5:4d:04:2a:ca:99:af:72:5b:5d:
         6f:d4:28:c3:bd:37:5a:ec:9f:9d:17:cc:6e:a8:94:16:6e:98:
         1a:af:c2:21:9a:ac:4c:f9:e1:07:5e:c1:7f:c8:f5:ce:89:c7:
         43:7f:47:6c:b5:ac:da:65:92:64:75:0f:10:84:3d:9c:67:8e:
         76:38:8b:ca:fa:63:d5:6b:72:47:74:6d:ef:4d:76:27:11:3b:
         5a:88:dd:13:ac:91:2e:11:e5:aa:3b:7f:15:06:97:4c:b9:b3:
         1d:60:ad:1c:ad:94:7f:d4:89:09:79:3b:7b:a3:2a:b9:ae:73:
         ff:0e:25:d3:5f:c5:7d:d5:3e:26:a9:ec:3f:9d:5e:31:c1:e9:
         fc:58:68:78:ad:b2:18:0a:25:93:c5:b6:51:63:fe:bb:e2:76:
         02:15:fa:da:7d:ef:64:7c:0c:61:ac:e6:ca:d7:b4:de:a3:d8:
         f9:cd:39:a4:a1:79:56:da:6e:6b:a0:da:de:3b:91:aa:de:af:
         e3:c9:38:1e:76:96:3a:60:8d:fe:0f:f1:60:0d:fb:7b:c2:d4:
         4f:d3:d7:a4:21:91:15:22:8f:38:f7:d9:66:7c:30:ee:3a:5a:
         3d:12:f5:83:10:9b:95:02:9f:1d:f7:61:7e:31:bb:7b:b6:9d:
         1f:9c:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:29 2025 by rpki-client