Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/0a4d9cb9-b5d0-37db-81ac-651ddb49c8ff.roa
File:                     0a4d9cb9-b5d0-37db-81ac-651ddb49c8ff.roa (raw, json)
Hash identifier:          NGGluPI7QgJv7rJvF0deygmv6gJN6Def6zY8t3BTiPw=
Subject key identifier:   99:85:90:76:C0:E6:28:CA:DB:0A:FD:C8:50:87:F8:3F:E4:DD:19:FB
Certificate issuer:       /CN=554d5371-2bc4-4645-9f6e-22976d2fc4a6
Certificate serial:       010D0C9F432858495ABEC62DD55576D1DAD649C0
Authority key identifier: 53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/0a4d9cb9-b5d0-37db-81ac-651ddb49c8ff.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     12132
IP address blocks:        199.231.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c6:2d:d5:55:76:d1:da:d6:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554d5371-2bc4-4645-9f6e-22976d2fc4a6
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=1db96d73-1c78-406e-bbd4-cc4df15a76fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:8f:5a:ac:85:95:88:55:b3:1c:2e:b1:4a:
                    e4:32:e7:fc:18:3e:ba:81:dd:8c:dc:c4:94:b7:45:
                    9c:b0:e2:a1:33:ca:98:26:c4:f6:54:3a:2f:75:ac:
                    0f:d0:30:ed:8e:2f:24:d3:6a:8f:f7:08:d7:93:91:
                    e8:1b:f2:1d:37:f2:7a:4d:0f:c5:c2:e7:66:6c:c8:
                    8e:16:1a:85:a7:fa:85:49:e0:d0:39:84:30:b6:fb:
                    86:85:1a:06:6c:fb:77:c6:60:09:a4:37:84:51:0e:
                    3e:fd:7f:97:fc:4b:be:c6:70:40:2e:00:6a:51:6a:
                    dd:1b:a6:0d:ee:72:02:8d:a1:81:fa:d1:ad:b0:0b:
                    2e:99:55:a5:54:95:20:1e:5e:ca:de:c7:dd:28:52:
                    38:7c:06:3a:f5:09:0b:aa:10:cd:ba:4d:1e:16:ed:
                    ab:23:70:0b:ea:f7:e4:69:aa:4e:8e:d3:b6:4a:a7:
                    0d:29:1b:3c:99:c8:ae:75:2e:27:b5:04:ac:58:85:
                    00:84:09:ac:7e:f9:69:81:0f:d2:0c:b6:3d:9a:c8:
                    ac:4b:71:bd:ac:2c:16:40:d3:3c:61:2c:fc:3a:c8:
                    a2:db:9d:d6:84:11:10:5f:1b:ba:60:dd:83:d8:f4:
                    57:34:5f:54:ef:76:b0:fe:06:ff:a7:d3:7d:fb:c1:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:90:76:C0:E6:28:CA:DB:0A:FD:C8:50:87:F8:3F:E4:DD:19:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/0a4d9cb9-b5d0-37db-81ac-651ddb49c8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.crl

            X509v3 Authority Key Identifier:
                keyid:53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:74:fd:9f:ca:d2:68:c4:a1:5d:ba:3d:4a:c7:94:bd:7f:
         e1:aa:2f:d7:9f:29:4f:27:42:eb:22:f9:86:66:d7:85:8a:20:
         fd:55:12:4e:97:de:f7:db:66:82:df:4c:f2:da:e4:63:02:dd:
         82:96:2e:c7:4e:37:eb:7a:66:f5:b2:02:fc:72:e8:67:af:22:
         1b:f5:49:e6:82:5e:b5:4a:fb:bc:c7:9b:a7:ef:ab:44:d9:ab:
         d2:37:9d:81:c9:e9:db:a2:77:d8:62:0f:ba:2f:cd:31:81:a0:
         61:88:18:d6:9b:56:d6:bf:c4:75:42:e1:01:5e:06:be:4d:fa:
         1d:d7:a3:3f:7a:5c:14:e4:f3:86:ee:d4:7e:ae:bf:ad:36:0f:
         12:7b:7e:a1:eb:a9:b2:a3:f2:a3:3a:79:13:58:f3:9b:30:9c:
         c7:07:8c:66:7d:e9:0e:29:b8:2c:f2:b2:95:f4:3e:d3:d1:aa:
         91:b9:bc:93:cf:e6:cc:2f:86:29:d8:df:be:3a:d2:63:6d:38:
         fa:c4:5c:86:1f:06:20:f5:bc:6a:b9:f7:45:37:5b:e3:6f:6b:
         eb:65:69:40:0c:9e:35:4e:03:53:71:16:7c:19:d9:30:92:6a:
         46:3c:c6:5f:35:7f:73:9c:f3:c7:98:1e:55:9a:dc:c6:97:90:
         26:95:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:14 2025 by rpki-client