Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa
File:                     85cc95b5-f025-3e36-b069-0368e2daf0b6.roa (raw, json)
Hash identifier:          OGU06VmCgfxL0jVZocRmu5RPNT2BLrOQevTF/Yp1g0o=
Subject key identifier:   62:77:49:6A:E1:28:4F:DA:04:5B:8D:3F:97:95:8D:BE:45:E1:8E:54
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285849151157E4EA6810A8ECFA0B40
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     19905
IP address blocks:        99.217.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:57:e4:ea:68:10:a8:ec:fa:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=3860135a-1751-40b4-9149-1086ea46e5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:33:c7:f0:b2:f9:aa:65:97:24:27:b9:aa:
                    c8:c1:75:59:bb:90:b3:cb:26:be:92:a4:04:e2:de:
                    42:72:b2:fe:1a:fd:37:a3:5c:4f:df:09:9e:76:30:
                    ee:6b:ce:4d:57:2b:79:93:ba:72:b2:e1:87:f9:41:
                    bc:42:ba:62:f8:84:00:96:29:ca:da:80:4c:a3:06:
                    78:e2:ea:c2:6c:ba:8a:85:d3:42:e9:8d:4c:60:12:
                    61:1a:44:7f:30:bc:7c:a0:ad:35:65:60:cf:de:ad:
                    f7:5c:40:98:df:ee:86:b3:0d:d1:7a:eb:8f:ea:2e:
                    c6:b5:ae:7c:b5:52:9e:b9:4b:e8:2c:88:25:5a:52:
                    78:84:41:36:1d:96:b8:70:db:af:4b:da:dc:76:4f:
                    02:31:97:d3:dd:21:ce:55:14:09:3e:b8:ab:0f:cd:
                    cf:2a:98:d7:61:9e:9f:72:fc:56:f7:b5:19:36:4a:
                    f0:8d:77:51:92:0f:33:05:e9:2a:56:5f:7b:30:79:
                    b5:08:07:2e:1e:b5:16:d2:a1:ab:e7:1a:8d:c7:6b:
                    78:f9:1e:f3:34:b2:7c:61:35:67:1d:10:16:f5:3f:
                    30:09:28:7e:6b:a1:01:df:59:10:39:82:30:f6:0b:
                    3f:e4:26:e0:cb:e3:cb:d0:30:fd:55:5c:ab:11:1a:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:49:6A:E1:28:4F:DA:04:5B:8D:3F:97:95:8D:BE:45:E1:8E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.217.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:4d:ab:65:5a:12:2a:90:cc:79:44:94:29:c3:19:7c:ab:
         a1:66:fb:45:b6:12:0c:7e:ba:b7:93:9b:e7:44:a3:c2:c8:12:
         fb:0a:b8:d0:b5:8f:74:7a:81:51:7a:17:23:5b:19:7f:4c:46:
         cc:92:6d:8c:fa:21:e9:59:75:5e:67:37:0d:c5:12:e4:a3:7a:
         e4:ee:57:3f:c6:5f:c5:3d:95:a6:8d:aa:59:84:97:54:a4:38:
         f4:0b:1a:e1:57:ae:3c:5f:56:53:e6:7c:67:38:53:ce:f3:4b:
         ce:d2:72:81:16:6c:f9:3b:72:b9:40:14:6c:4f:35:11:06:62:
         4c:c0:e9:b5:62:16:41:74:6f:b5:03:b3:92:6b:cf:71:6b:59:
         16:30:2a:db:07:97:21:e4:bf:59:d4:54:8e:8f:25:6b:5c:9b:
         c4:d7:57:a4:0f:8e:79:03:c5:ff:ac:65:83:66:a7:4b:6a:14:
         93:25:62:e1:9f:3b:84:7e:6a:1b:a6:52:cb:66:7b:b0:c0:1d:
         d8:99:de:1f:50:db:b1:52:d1:ee:70:0c:1a:31:ca:58:a1:ce:
         05:98:50:4b:31:94:64:52:ad:ba:e0:1f:16:49:4f:58:f7:20:
         20:5f:d9:32:af:c6:1d:24:63:8e:4b:9f:e9:c3:c5:ff:04:5f:
         f6:fe:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:07:42 2025 by rpki-client