Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa
File:                     1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa (raw, json)
Hash identifier:          QMLM/PC3VI7ftxLvV1S9jhJDp1CbXDuKCpKKxtHjHwc=
Subject key identifier:   A4:B4:AE:F6:69:65:63:E8:B6:97:69:D6:F6:D1:D2:86:DC:22:E8:CC
Certificate issuer:       /CN=979eb01f-8991-4ed1-a753-931ecafd3350
Certificate serial:       010D0C9F43285848EF61379C772B8FBA71C05D00
Authority key identifier: 39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     39287
IP address blocks:        198.167.192.0/19 maxlen: 19
                          2620:18:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:37:9c:77:2b:8f:ba:71:c0:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979eb01f-8991-4ed1-a753-931ecafd3350
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f17bb3a3-00f1-4e0a-aa91-2136219101fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:66:60:91:74:b3:b7:4f:5a:3c:09:f2:98:
                    66:47:1c:5e:3e:39:bf:40:7f:da:2c:6f:44:35:0c:
                    d3:3e:67:fc:41:c1:f3:5b:23:a2:6e:ad:bf:60:b2:
                    e5:16:95:c7:75:c5:6d:35:6c:33:c6:d1:88:32:34:
                    3c:c2:7e:35:7e:ec:e8:aa:19:05:c5:26:a9:bf:a7:
                    bd:42:45:c2:0f:0a:bf:18:c0:6b:71:cf:ad:23:d1:
                    53:f6:42:f3:df:b9:bb:d5:11:3b:b6:47:d2:9d:a2:
                    5e:d0:fa:97:33:49:ec:10:6f:e2:74:5d:26:90:2b:
                    b5:05:89:e9:03:34:dd:e2:3b:4f:96:73:b3:c4:19:
                    61:05:08:f2:cd:b4:b9:e3:2a:09:71:24:a8:34:52:
                    b4:be:b8:53:98:4b:71:8f:82:ee:2e:ea:55:4c:16:
                    39:8d:d6:53:d3:5e:2f:7c:03:8d:09:15:6f:c2:5c:
                    d5:3e:4f:ed:89:9b:cf:53:5d:e7:7d:50:e7:65:93:
                    d6:18:3a:2b:93:68:3e:9d:03:e8:e2:d3:6c:be:a6:
                    c9:bf:b1:f6:a0:a1:e1:1b:48:21:01:64:c9:d9:f3:
                    92:12:f6:f8:4d:68:c5:5a:39:37:47:3c:8d:cc:4e:
                    0e:47:08:5c:05:0b:cb:a2:40:8e:31:61:ea:e5:ce:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B4:AE:F6:69:65:63:E8:B6:97:69:D6:F6:D1:D2:86:DC:22:E8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl

            X509v3 Authority Key Identifier:
                keyid:39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.192.0/19
                IPv6:
                  2620:18:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:9c:78:ae:b6:e0:a6:46:32:bd:32:bf:b4:54:b8:da:71:
         3b:b0:e6:f7:d5:27:7d:12:31:e0:98:3c:81:68:f9:1f:11:02:
         4e:28:a2:75:d8:ee:41:c0:df:8f:d8:08:9b:61:50:a8:06:46:
         4d:bb:f9:2d:e7:46:6d:b3:e6:b5:ae:cd:81:b6:84:6f:29:44:
         a6:a9:9e:29:61:e5:25:fd:cb:10:57:0c:8c:1d:51:1b:df:ea:
         08:d0:0e:bc:ec:eb:4e:d5:ee:f1:da:83:eb:4d:f3:d3:5c:f3:
         e9:ca:d7:fb:f6:39:ba:02:54:2d:e8:1d:41:31:99:da:4c:92:
         de:0c:13:88:0f:3e:6d:9d:8e:48:d1:d5:c7:bd:3b:aa:84:48:
         d9:77:d1:a5:16:d2:64:05:69:65:96:67:30:37:14:51:c0:b6:
         2b:e4:81:97:36:44:8a:8c:43:99:13:b6:17:2b:7e:65:ad:c1:
         b0:dc:01:60:ca:84:db:f4:ef:8c:95:c4:c4:39:a1:dd:b2:74:
         fc:67:39:a6:60:5c:34:67:d9:16:5d:91:0f:63:7e:76:86:b1:
         12:80:3f:61:d1:c2:e4:6d:ca:ce:75:1b:47:1c:9c:b3:2a:f8:
         d6:c8:b9:5f:48:d8:e6:45:81:84:71:a8:dd:90:88:c1:53:30:
         69:1e:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:01:55 2025 by rpki-client