Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa
File:                     19352952-3470-322d-88eb-b17505846bdc.roa (raw, json)
Hash identifier:          iCUyJvXLqGuECrw66lZP2NgKvyKaOdGtKAJ0il6MwYw=
Subject key identifier:   81:A2:6C:0B:DE:15:77:54:43:45:E2:60:45:2D:01:07:4C:FF:5E:41
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCBF9FEEB805CACB532E0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        199.233.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cb:f9:fe:eb:80:5c:ac:b5:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=857cbf60-792c-4354-893a-90a38aa30154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:8a:6c:1a:6b:46:9c:e4:66:da:d9:28:b9:
                    e2:15:b4:87:57:8d:2d:94:5b:32:8b:b5:c6:59:31:
                    6e:da:80:0d:d6:f3:7f:2c:f3:bc:77:3b:fb:cc:80:
                    8f:a9:dd:25:f1:33:63:ab:82:22:11:4a:7b:da:7e:
                    6b:e2:0c:f5:20:03:e9:d1:52:d4:aa:29:7b:92:e0:
                    81:0e:f1:3b:30:ad:25:57:38:8a:aa:2f:e4:51:cb:
                    cc:b8:42:9c:30:e3:91:f2:71:53:bd:84:da:64:99:
                    81:07:f1:f9:da:a5:d5:af:56:95:1c:ca:13:8d:59:
                    e0:26:49:c1:55:ff:b2:b2:8c:06:38:7e:74:8d:7e:
                    be:20:19:b1:13:f8:c3:5c:66:0d:22:31:d1:28:de:
                    fb:06:3f:8d:85:07:e3:e9:74:60:fc:a6:b5:46:e3:
                    76:12:ac:8d:c9:e5:ef:e5:0e:d0:af:a9:d7:03:c6:
                    99:d8:8d:00:d8:b0:3a:cb:9e:84:98:ce:40:dd:78:
                    8c:ee:d8:47:e3:4e:fc:0d:a9:8d:82:0d:08:d5:02:
                    1b:e5:ef:c5:f2:aa:7b:ef:73:7c:a3:f0:c3:89:85:
                    c1:1f:fe:8e:54:92:13:e6:a0:77:14:b6:83:f7:fc:
                    4b:a8:c9:05:bd:22:3a:41:3d:02:4b:b2:70:5f:44:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:6C:0B:DE:15:77:54:43:45:E2:60:45:2D:01:07:4C:FF:5E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/19352952-3470-322d-88eb-b17505846bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:af:d9:8e:52:d5:80:99:55:a6:43:bb:35:d8:50:62:f1:
         81:0b:a8:29:2d:1f:2e:d1:c3:b0:b6:bc:9a:87:f6:3e:20:93:
         3c:47:5e:a6:c4:ca:ed:93:8a:f3:39:45:64:c2:f2:5b:dd:f5:
         ec:44:5f:73:d8:5b:8c:74:4b:fd:7a:cf:db:82:c9:9f:8a:20:
         ed:2e:6e:fc:e8:fb:4e:04:d9:32:f6:4e:cd:fd:22:90:59:0a:
         98:e4:9a:36:a5:8b:83:c6:5a:ae:a9:d6:b8:81:b7:cc:ff:da:
         4c:c1:94:ba:c6:3c:f0:bd:de:dc:16:67:9b:98:d4:6d:af:07:
         11:64:95:67:f1:6e:49:4e:21:4d:58:56:cf:c8:6a:7c:73:a2:
         7d:48:6e:88:16:1d:1a:01:8b:ba:8a:7c:a3:36:f5:bf:a2:81:
         7e:bd:83:d2:e2:97:b2:f8:31:9e:22:eb:0f:58:1e:c9:43:92:
         42:43:c0:90:5b:ad:f0:c5:c5:98:0c:32:3c:57:b6:a5:79:5b:
         ec:45:a4:11:0b:44:81:9a:67:15:ad:82:ee:7c:4e:13:71:f7:
         03:54:3e:7f:04:19:76:7e:f9:c8:bd:34:8d:99:09:5f:4b:91:
         70:ff:7e:bc:30:50:a3:0f:5e:e5:f4:15:eb:13:e1:a7:76:56:
         e4:11:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:52:25 2025 by rpki-client