Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/93828e8b-d8e8-3b95-b5a3-b4247b37309c.roa
File:                     93828e8b-d8e8-3b95-b5a3-b4247b37309c.roa (raw, json)
Hash identifier:          ysNkVNO+C5eUp42KCigrZOp15ZMPD/GONIWdKO4Eb90=
Subject key identifier:   C1:65:88:5B:5F:48:7E:B5:A1:AC:C1:5B:66:17:25:A4:AD:09:CA:15
Certificate issuer:       /CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
Certificate serial:       010D0C9F4328584905B6B86CF157EEAD6F4AD1A0
Authority key identifier: D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/93828e8b-d8e8-3b95-b5a3-b4247b37309c.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        199.91.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b8:6c:f1:57:ee:ad:6f:4a:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=210de4e5-73ab-4c95-bf9f-bcfd39fe484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:9c:d3:81:66:47:ba:21:a6:ef:f5:2e:d7:
                    7d:cb:02:4d:c0:9c:27:46:a0:f8:f4:b0:52:ab:0e:
                    44:fd:fe:4b:80:03:f2:49:b4:88:34:ab:05:f5:49:
                    77:11:83:30:5a:40:a6:01:d7:4a:e8:74:dc:99:48:
                    60:f9:84:18:2b:e8:ff:30:0f:36:17:73:7c:e8:cc:
                    86:55:86:61:ec:1d:b9:95:f2:8d:a8:d3:57:df:29:
                    fd:40:ef:a6:00:fa:67:ca:b4:c9:07:f9:5c:0c:3b:
                    63:4c:e5:0b:b3:be:c6:ed:31:c6:fd:a5:09:4c:80:
                    db:49:89:22:b9:38:b3:a2:19:8e:1d:02:dd:7d:57:
                    fb:de:bd:bd:76:58:30:77:fc:c3:c9:9c:bc:40:1e:
                    f5:7e:30:11:75:8f:37:73:d1:13:f8:d0:85:d2:5c:
                    ad:ac:c0:94:5a:85:60:4b:a1:56:04:76:28:d4:b4:
                    aa:c0:14:da:94:32:7b:f3:9d:fb:5a:dc:10:61:dc:
                    dd:b7:94:c1:9a:90:c6:2e:8c:12:f4:a3:46:49:79:
                    0b:b8:b0:39:f0:b3:35:1b:60:9d:8f:c7:72:e6:1a:
                    c4:50:4c:f0:1a:a0:a3:9e:2b:e5:21:3f:a5:66:64:
                    84:ad:ac:a3:e2:de:30:e0:5c:a9:88:5a:e4:4c:a4:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:88:5B:5F:48:7E:B5:A1:AC:C1:5B:66:17:25:A4:AD:09:CA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/93828e8b-d8e8-3b95-b5a3-b4247b37309c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.crl

            X509v3 Authority Key Identifier:
                keyid:D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:8b:8e:0e:ce:67:bf:5d:ec:18:d6:a4:4e:b6:9c:89:50:
         e9:f4:61:4f:06:5c:a4:6f:4f:65:e2:55:8a:68:ed:d2:85:cd:
         de:9c:49:11:2a:1c:36:35:fd:38:9d:91:1c:ca:9f:cb:e4:c2:
         3b:1e:7b:be:d5:80:68:33:9c:d2:68:9f:57:25:05:67:33:b3:
         8c:a8:81:bf:7b:7c:90:42:23:99:6f:24:26:f7:d7:f3:87:bb:
         b1:a8:c3:c1:30:7b:8e:66:32:bf:57:0d:2a:e6:c0:14:c6:31:
         4b:a8:16:d4:d5:4d:70:21:1e:9a:ff:78:cb:72:56:69:88:61:
         47:aa:ad:05:da:95:d9:4c:5a:ec:14:87:c5:60:3c:9b:ab:46:
         c6:5c:51:40:77:b7:0f:ad:b7:a3:c9:48:d2:da:67:a6:9a:95:
         e4:b0:4c:8b:dd:79:04:5b:4e:7c:7b:bc:f3:e7:2b:0c:8b:f2:
         43:00:3e:f7:ea:08:ee:2a:4e:bb:f7:15:6e:9b:05:c5:4f:97:
         ac:d4:3d:5b:9f:34:b5:df:90:11:ae:f2:36:f5:c6:8a:13:ca:
         a9:30:cc:d9:25:15:9a:07:a2:5b:c1:fe:a3:67:44:c6:41:50:
         11:6e:c2:26:16:90:bf:b7:b8:9a:45:01:2c:87:9b:30:a9:ee:
         4f:b9:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:54 2025 by rpki-client