Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa
File:                     25745d9d-a262-31c5-9f54-eb1bbc09604e.roa (raw, json)
Hash identifier:          eJjGm9ZNv9Cg6xZOpPm8WDYtYm+JXwfr9MtA1Ki56bY=
Subject key identifier:   0D:0F:8A:62:70:37:9B:BE:DC:65:F9:9D:45:79:3C:C3:6D:30:48:21
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F43285848CAE20E67DB32BC450402E300
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa
Signing time:             Thu 06 Feb 2025 12:15:39 +0000
ROA not before:           Thu 06 Feb 2025 12:15:39 +0000
ROA not after:            Wed 07 May 2025 11:15:39 +0000
asID:                     6994
IP address blocks:        216.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ca:e2:0e:67:db:32:bc:45:04:02:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Feb  6 12:15:39 2025 GMT
            Not After : May  7 11:15:39 2025 GMT
        Subject: CN=a2e2e06f-bbc4-4f96-a13f-7404ca5f1925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:ea:5b:24:e3:63:bf:6d:80:93:84:0d:28:
                    36:05:22:38:89:41:87:e1:d0:25:58:7f:0e:b3:73:
                    df:5f:72:94:97:8a:78:ca:3f:81:a2:3e:67:66:c8:
                    1c:b5:f5:aa:4a:0f:ae:dc:e9:9c:ca:fb:9e:ef:90:
                    6f:27:41:6a:6f:45:6c:12:d1:0f:68:cc:0c:9a:11:
                    2e:c9:00:4f:13:25:54:f3:14:3e:dd:9b:e7:d3:c6:
                    49:56:56:56:e2:0a:92:19:de:92:64:a8:50:5d:91:
                    86:ff:e5:82:91:c1:ac:5e:93:87:2b:a2:84:a0:3c:
                    97:53:a7:a9:b5:43:50:9c:f3:5d:bf:30:e1:1a:fd:
                    8d:9f:18:01:6c:6c:73:4e:9a:08:17:7f:29:fa:9f:
                    b4:d1:52:f4:db:86:74:1d:d8:98:7e:f2:49:61:57:
                    12:38:bf:a2:91:30:a7:77:0f:f3:bc:ad:75:f8:4f:
                    4b:b8:37:e9:57:08:b9:fb:da:d7:dd:78:90:f6:85:
                    77:83:1d:5d:aa:d3:e1:88:9e:32:fd:f7:87:a5:fe:
                    0e:d1:05:9f:2c:c0:53:d5:d0:a7:cd:fc:7f:0d:6c:
                    28:0c:34:55:6d:7a:8d:03:4f:ad:74:22:4b:e0:02:
                    88:c2:a0:58:c1:f9:8f:1a:8b:97:e0:d5:e5:6a:29:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0F:8A:62:70:37:9B:BE:DC:65:F9:9D:45:79:3C:C3:6D:30:48:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:34:b6:91:31:de:06:eb:31:03:eb:b6:13:26:0a:e1:68:cb:
         3b:bc:26:b3:8e:f4:66:b0:cc:fa:6d:1e:05:b3:da:8e:9c:76:
         6a:13:ad:b5:82:4e:52:b8:bf:a7:8a:be:72:39:03:62:17:64:
         d0:26:ed:e3:04:78:d0:2c:a3:8a:8f:d0:d0:f6:94:82:96:da:
         c8:77:27:88:16:88:39:69:43:1a:0f:e8:6a:b7:64:85:f2:2e:
         60:4e:39:06:42:a5:12:b4:32:6c:e0:8d:7c:86:fd:6b:ba:7f:
         fc:c3:a0:51:a4:8b:31:8a:95:42:99:b1:aa:4c:3e:56:3c:f5:
         30:79:cf:d7:0e:d2:e2:ad:c9:c7:3a:b1:67:96:83:ad:26:f1:
         f0:81:1a:70:d9:7d:84:8c:f2:05:99:6b:de:ee:53:52:3c:ff:
         2c:51:74:28:94:f1:b9:3a:7e:8a:2d:8d:0f:57:89:d2:15:33:
         b2:d6:ae:4f:53:74:01:07:e3:29:7d:c8:ca:57:20:30:c4:88:
         6f:9e:71:a1:a3:26:b2:fe:02:cf:ab:95:96:3c:d1:18:22:d4:
         79:27:35:8a:87:00:30:80:cf:a7:80:cb:e7:a2:45:5f:03:10:
         7b:d9:ef:f4:c9:b5:76:36:3d:4e:15:a7:70:ec:24:cc:f1:17:
         8f:01:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 10:46:46 2025 by rpki-client