Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa
File:                     88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa (raw, json)
Hash identifier:          7pqpTt8/OWdNUFgubaDRDYXP9rr9ipYTI/a/XGF1uk0=
Subject key identifier:   80:BA:F3:BA:DD:67:0D:48:2D:71:22:90:E1:ED:FC:B1:B3:2D:7C:C6
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285848C6E62C538856F824E80F7380
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        169.196.48.0/24 maxlen: 24
                          169.196.49.0/24 maxlen: 24
                          169.196.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2c:53:88:56:f8:24:e8:0f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=4e525847-bf0e-487f-9563-0e198d9fae7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:04:01:d2:57:3f:b8:fd:0b:5f:b4:61:fa:
                    02:eb:70:32:a6:aa:73:58:e7:6b:43:7f:f4:cd:4b:
                    9f:14:29:67:95:75:47:95:eb:6f:5b:b1:a2:b2:1d:
                    eb:e0:ec:b4:c0:0f:ab:a2:66:d5:88:c4:5e:4c:d2:
                    d9:24:9b:b6:5b:18:01:44:92:b4:98:b9:aa:8e:d9:
                    f8:f5:19:b8:1a:f9:d7:82:d3:25:f4:d2:4c:1f:31:
                    6a:3e:6e:78:52:ea:01:0e:43:11:e1:84:70:ed:98:
                    d4:be:b0:d1:a3:9e:34:1d:6a:89:ea:69:86:7a:56:
                    d7:21:c7:62:a2:a3:1d:0c:f8:f4:08:c2:4f:dd:e7:
                    47:d5:53:52:67:db:97:85:0f:88:52:55:e9:e4:be:
                    98:97:02:d6:5e:c2:40:cc:99:0c:6d:ab:0c:1b:44:
                    db:34:e7:ac:be:cd:69:c4:e6:f9:e7:94:61:d7:17:
                    8b:11:2b:9d:23:01:cf:b6:17:ad:2c:07:b6:74:1e:
                    dc:ba:7e:16:8a:f4:ad:fc:0e:f4:01:fa:21:34:ae:
                    cc:de:ec:f7:97:e8:ee:a7:8b:f6:c1:17:1e:12:c0:
                    1d:ec:9e:b8:14:de:1a:3a:df:0b:ee:c2:89:27:db:
                    c4:c6:c3:6b:d7:7c:1b:b7:0d:55:d9:b0:a9:e7:91:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BA:F3:BA:DD:67:0D:48:2D:71:22:90:E1:ED:FC:B1:B3:2D:7C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/88e832cf-eff3-30a7-a708-522dcbcbe4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.48.0/23
                  169.196.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:8d:04:af:29:06:ac:cb:42:7d:e3:8b:9b:35:7d:61:cd:
         e4:c5:79:5a:5a:99:d7:c7:80:ce:8e:ba:9b:17:19:18:21:1c:
         1f:60:18:60:40:fa:64:9e:9d:dc:3b:4b:19:53:a7:63:73:48:
         82:07:ab:e8:c1:46:4d:c2:b7:0a:e9:4d:a0:e6:cf:0e:be:44:
         29:2b:ee:61:51:b3:cc:49:89:5f:5e:7f:6c:97:37:0f:44:8a:
         f0:8e:cd:17:cf:3e:43:4a:43:5b:1a:1a:cd:88:df:7b:b5:2a:
         d8:fd:a5:5b:ef:ac:5f:40:ee:be:0e:6b:6b:ae:12:85:d8:19:
         63:a1:f8:5b:a8:10:e9:8e:6f:5a:a4:5c:d0:4b:ae:11:6d:1e:
         39:95:3f:78:69:f4:c2:11:38:ef:e0:4d:00:2a:e4:ce:2c:36:
         f8:41:d5:0c:ac:8f:ad:e2:31:d2:0a:7c:51:bb:78:d7:9d:32:
         ad:1b:86:f8:35:6c:ca:26:c0:9d:28:18:fe:71:20:d2:40:e0:
         52:96:39:02:51:6c:62:2b:01:bb:98:f5:9d:c9:09:f5:bd:18:
         13:3f:45:83:e1:34:bc:80:90:be:4d:15:32:57:41:dd:53:f6:
         07:3b:b6:bd:c9:e3:32:bb:7c:d7:1d:37:61:76:fd:44:cd:51:
         c9:be:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:24 2025 by rpki-client