Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ff41ffdd-a4a7-36f8-8c37-d9f289dd90fc.roa
File:                     ff41ffdd-a4a7-36f8-8c37-d9f289dd90fc.roa (raw, json)
Hash identifier:          F073mO3vzx+7nRr8Jk7RdwnSVgi/Xv3LnoTd8lxBbsU=
Subject key identifier:   F8:0D:D9:0F:E9:91:81:D6:33:8C:F6:0C:89:8A:90:46:F9:13:AF:9F
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849D164FF80C74851C11E2473C0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ff41ffdd-a4a7-36f8-8c37-d9f289dd90fc.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     6453
IP address blocks:        199.202.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:ff:80:c7:48:51:c1:1e:24:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3e9fef8c-3867-4ea5-aa8e-78252bedc147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:1e:93:43:12:10:08:aa:a8:74:cb:f4:03:
                    b9:bb:3f:ca:ab:95:a1:c8:1e:81:59:8e:89:b3:82:
                    77:f4:75:b5:cf:26:44:5a:d7:80:10:7a:c8:e1:46:
                    31:7d:65:25:c5:54:d5:0a:6b:b4:db:ba:1b:d1:63:
                    83:43:17:1b:fe:93:9e:ad:00:a4:fb:04:78:a8:45:
                    bc:1b:a0:df:14:ed:b0:bb:70:0e:6b:ca:36:96:c5:
                    94:fd:69:d0:2b:bc:77:b7:29:c9:18:c4:f1:49:48:
                    be:63:4f:44:e8:95:ce:c1:45:6b:bd:96:40:97:2b:
                    32:08:0d:c9:b1:be:b5:d1:d8:2b:17:f7:79:09:90:
                    0f:b2:57:ff:62:7f:cc:1e:43:82:1d:58:b8:b5:75:
                    f1:c7:1f:d8:0a:c1:ee:e4:ac:b3:47:91:33:78:02:
                    4d:dc:55:55:1c:b0:67:0d:64:ad:75:d0:43:04:4a:
                    3f:05:eb:e3:f9:28:be:b6:af:e1:12:0f:cd:e4:5e:
                    24:3b:7c:52:59:ac:90:d3:bf:1b:7a:89:9c:3f:6f:
                    67:d9:f3:02:15:8f:e7:9d:69:6b:99:ad:d0:7a:3c:
                    c8:d6:8e:00:3c:68:38:14:d7:ee:cb:06:f0:09:d9:
                    f8:a5:03:c6:44:81:4c:3b:be:de:a6:66:e9:92:a5:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:D9:0F:E9:91:81:D6:33:8C:F6:0C:89:8A:90:46:F9:13:AF:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/ff41ffdd-a4a7-36f8-8c37-d9f289dd90fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:a3:b0:8a:b6:1e:be:ec:f3:6b:74:06:63:a7:68:2b:70:
         2d:54:42:fd:38:9c:8f:04:b5:f2:4c:58:71:f2:64:5b:dc:8f:
         9a:ea:a8:2d:8a:7b:12:84:b6:da:19:b2:01:bf:6a:e7:c1:61:
         b0:79:aa:77:46:49:8e:ad:2d:b4:dc:56:6d:d2:5f:cd:e8:4e:
         08:29:f4:aa:49:c3:df:bc:d2:20:38:96:f6:a6:7c:50:99:06:
         29:3c:94:26:c1:9b:ac:94:e0:e5:e4:00:55:06:4a:d8:25:4a:
         84:2f:cb:98:69:5e:b7:dd:6b:39:67:97:2f:8a:5a:79:9e:e6:
         d7:ae:45:77:61:2d:9a:cb:1d:27:80:76:d2:21:8d:2b:5a:b1:
         b1:bc:51:e1:a0:c4:c9:22:6f:16:bc:3e:19:64:e1:a7:3b:3a:
         dc:91:82:bb:cb:09:17:71:7d:e7:99:cb:37:d5:15:ec:ce:ab:
         bb:ef:23:33:14:c8:0e:75:14:87:ac:8e:ac:91:49:74:35:94:
         8c:5d:d5:24:dd:ae:d7:51:59:c1:6b:ba:8d:0d:f7:8d:43:f5:
         5c:45:6f:23:88:7c:02:a4:90:51:b5:23:65:82:69:a6:de:6c:
         f0:e2:3b:5f:83:02:1f:f3:b8:5f:ed:85:c0:0e:23:9e:f5:7d:
         f0:16:69:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:44:16 2025 by rpki-client