Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/83e013ce-1cff-3a38-a817-8f8314bc2e79.roa
File:                     83e013ce-1cff-3a38-a817-8f8314bc2e79.roa (raw, json)
Hash identifier:          u4S8xXNq90nkETkgTNcH6haTqmEoBpqYgCMcijUxqtQ=
Subject key identifier:   04:BB:25:91:72:AD:52:37:0E:37:65:F6:EF:77:9C:13:9B:85:BC:C0
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F43285849350E972748E912222C58A680
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/83e013ce-1cff-3a38-a817-8f8314bc2e79.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     26677
IP address blocks:        199.212.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:97:27:48:e9:12:22:2c:58:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=7fa3d904-437b-4aee-834c-49caff1fc06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:6b:91:37:3c:ab:e3:e5:63:f4:e9:c2:5c:
                    a1:90:40:e7:28:24:d7:a3:aa:a6:78:ba:f6:26:d1:
                    b7:d8:91:80:0b:3d:c5:83:b9:cf:05:3c:60:aa:ce:
                    b5:7f:00:f9:61:7e:a0:57:76:d3:4d:15:c0:28:1f:
                    5e:cc:14:f5:13:fa:a7:ed:4e:c9:eb:4f:e1:5b:79:
                    4d:0a:53:e2:8a:d5:a6:30:2c:a8:46:10:1c:90:6c:
                    ce:c6:22:63:f6:41:96:ea:db:97:ff:11:e7:fb:82:
                    45:5b:83:a2:04:65:60:ad:f8:d2:cd:42:3a:c2:6f:
                    1e:e8:74:66:c7:53:da:9b:91:b3:52:39:97:24:b7:
                    82:27:85:38:b1:d2:c2:8e:87:95:1d:b0:b9:47:47:
                    fc:e6:cb:62:c8:ab:58:c7:e9:1e:20:79:00:68:5e:
                    9d:1a:df:eb:3d:f1:12:75:00:b7:06:7a:d9:84:c1:
                    c1:36:d4:46:be:5f:4f:45:e2:08:e9:44:c5:1f:72:
                    2b:d5:46:ab:03:69:d9:b5:26:f2:73:45:9d:ae:ce:
                    30:f8:1b:92:ef:e0:99:b4:a8:fd:69:14:82:38:16:
                    3e:45:fb:98:26:e4:84:29:72:e0:14:d2:31:b6:83:
                    2b:e0:3b:df:d7:90:c3:48:2f:6b:e1:f1:00:fb:7f:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BB:25:91:72:AD:52:37:0E:37:65:F6:EF:77:9C:13:9B:85:BC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/83e013ce-1cff-3a38-a817-8f8314bc2e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:33:e8:bc:5f:f6:16:fc:92:7a:27:aa:67:cd:c7:2c:ff:c0:
         0c:8e:18:2a:a6:4b:51:72:ca:44:3e:10:e9:f9:f7:24:42:48:
         f0:28:e8:ae:ab:f2:d0:d7:e1:f0:1b:c4:28:e8:86:f6:0c:65:
         3c:62:40:3b:54:99:a7:e1:b0:45:f6:49:c5:81:e2:db:72:e0:
         f5:93:d1:1e:e1:5b:30:2a:13:d4:e0:13:87:b8:15:dc:25:7b:
         c0:00:88:53:17:07:71:6f:de:30:25:7b:5e:56:d0:3d:58:88:
         d0:30:15:35:ea:ac:7d:38:48:d9:d6:c4:5b:ef:43:da:39:61:
         e9:0a:e4:0c:1e:8a:83:24:df:7b:fc:0a:a9:8a:94:7c:23:3e:
         c2:a7:d2:8e:4a:95:ff:70:7a:39:6d:1f:f4:26:87:34:fb:10:
         0b:45:40:75:56:40:ae:57:e6:c6:3b:80:12:49:90:df:a8:f3:
         6c:e3:64:2b:40:c9:b3:69:50:2b:6d:3b:a2:b0:2d:a0:8a:82:
         52:61:dd:3c:18:9a:7f:2a:83:a0:59:50:d4:15:29:5f:10:2e:
         5a:d7:5f:b1:15:fe:3a:fa:ce:a2:9c:ea:31:57:79:14:c6:7f:
         65:27:8a:e5:93:60:b5:84:9c:0a:a8:f3:c6:ac:9b:29:67:6c:
         35:7d:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:33 2025 by rpki-client