Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
File:                     2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa (raw, json)
Hash identifier:          Jom7CR7y4YkymBWqmwH0w0FVPxF0Ezbr2H5gUiMg6hg=
Subject key identifier:   09:A6:AF:CA:62:38:C4:47:0B:22:76:4E:B4:5B:9B:9D:0F:03:82:C5
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285848C6E62C6E1477E8A5EB71FA00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        169.196.72.0/24 maxlen: 24
                          169.196.73.0/24 maxlen: 24
                          169.196.76.0/24 maxlen: 24
                          169.196.77.0/24 maxlen: 24
                          169.196.78.0/24 maxlen: 24
                          169.196.79.0/24 maxlen: 24
                          169.196.198.0/24 maxlen: 24
                          169.196.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2c:6e:14:77:e8:a5:eb:71:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=41ab1910-a315-4790-b43e-8b3c3c16e567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:32:16:e5:4d:1f:4d:e2:87:5b:58:3a:f5:
                    e0:2b:b9:e5:96:89:3c:e6:77:ce:0a:b4:0c:1d:64:
                    9b:13:6a:11:95:86:b3:ff:56:18:ae:34:fc:6b:dc:
                    0d:ee:52:d8:14:6f:b3:1e:6d:0a:1a:16:1a:8c:d6:
                    5c:5e:05:15:5a:51:54:c0:89:e1:9a:d0:54:3b:c3:
                    3c:0c:66:51:7f:82:62:b8:93:07:c8:cf:5d:af:c2:
                    f9:a3:3f:37:41:c7:de:c6:e1:fa:0d:08:ba:e4:d2:
                    3b:7e:5a:3b:ee:7e:80:a8:e5:bf:31:fc:b9:f6:5a:
                    1c:c3:1d:25:a7:64:56:ac:e0:0d:3b:09:5a:d0:df:
                    10:4b:22:c1:3f:51:c5:d7:02:7e:47:ba:07:a8:fd:
                    af:a3:40:33:a4:49:5c:f5:8d:96:c3:88:cb:1a:6c:
                    ca:c5:23:7f:00:ec:68:3a:29:84:b6:4e:5a:35:19:
                    a1:7a:13:68:36:74:dc:2d:ba:1f:83:cc:77:17:fc:
                    51:ba:f3:a4:cc:9a:48:c0:f0:98:e4:06:d3:03:0f:
                    47:99:4d:cf:5b:23:b0:cd:9d:73:00:11:f6:67:0a:
                    d6:dc:7f:de:95:05:4c:60:8d:12:d5:d0:20:91:2e:
                    df:52:5b:d1:cf:3d:75:3c:37:11:5a:fa:b1:b8:48:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:AF:CA:62:38:C4:47:0B:22:76:4E:B4:5B:9B:9D:0F:03:82:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/2c9c7c88-42e4-32a5-9c8d-f2cea4c4b5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.72.0/23
                  169.196.76.0/22
                  169.196.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:53:c7:2f:98:63:a5:f4:e8:55:6b:d2:2b:8e:60:bf:dd:3c:
         6c:44:52:4e:4d:c1:78:ba:ee:c4:bf:ac:5c:7f:eb:82:b3:13:
         76:e9:6c:6d:94:7a:b4:6e:53:e9:2e:01:19:6c:4a:0b:d9:d8:
         40:0b:72:88:be:da:2e:81:de:65:c3:b8:63:ce:26:64:a4:6a:
         3e:43:e2:27:2e:d4:d8:98:07:45:41:1c:da:47:55:46:db:d4:
         bb:3c:7f:1a:68:b2:4c:6a:20:21:23:40:d9:f1:2c:c8:4c:c6:
         f8:27:2d:57:ca:9e:02:24:1e:46:70:6a:98:c8:31:1b:58:c2:
         d5:c1:9b:fb:b3:7f:d8:9a:cd:2a:1e:5f:46:07:21:52:71:08:
         dd:dd:31:87:4f:30:c3:5b:59:cd:c4:a0:0e:7a:23:c4:09:3a:
         9e:92:b2:ff:89:03:2a:82:0b:a9:f0:e4:57:5d:03:d9:e5:d5:
         18:59:3d:9a:83:76:42:19:e5:10:51:28:1b:ea:aa:ea:63:fd:
         08:53:ab:72:71:28:ab:a7:c0:d1:9c:cd:28:36:95:47:3b:6e:
         e7:5b:a1:70:f0:1f:8f:82:aa:a4:63:4d:d8:3c:1c:29:ab:a4:
         59:82:07:7f:a6:46:62:7e:17:c3:23:d2:42:1c:07:0b:15:a3:
         42:e9:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:18 2025 by rpki-client