Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
File:                     aba5abac-4660-3a9c-a43a-78c1329525af.roa (raw, json)
Hash identifier:          Ro7c45rw/JiYwn0jOfMsRauqXxd1zVUzETZ9Ei5t/xo=
Subject key identifier:   76:C8:1D:9E:80:93:B6:65:1D:91:6E:13:5E:C4:60:24:8D:06:A3:34
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F4F68F3C462E15EA434B8580
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33072
IP address blocks:        199.6.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:8f:3c:46:2e:15:ea:43:4b:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=0c2fc48e-ac4f-41e2-a507-8011bdc3a264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:5e:a7:3d:6e:c1:98:a8:86:12:58:8a:09:
                    d4:fa:c8:a0:ae:63:15:f4:29:34:7a:bf:ab:6c:74:
                    6b:8f:c5:d3:04:a0:29:e7:22:79:74:85:48:ac:3f:
                    e2:95:f5:61:ec:46:51:3f:0d:4c:7d:70:58:44:ff:
                    29:cc:c9:ab:9f:06:a9:04:ce:07:4a:cd:8b:d2:10:
                    4a:d0:95:23:a8:da:a6:51:89:8c:cd:9f:9b:7a:b4:
                    8d:62:a8:1d:d9:9f:aa:1c:7a:0b:b2:e4:e0:1f:45:
                    5b:2b:5c:73:f7:bd:f0:41:aa:4f:c5:c6:2c:e7:e3:
                    55:5d:fe:98:76:b8:02:1f:9f:f6:b0:b9:bf:0a:43:
                    9c:7e:95:21:12:53:8b:c9:ff:fd:bc:63:48:ef:57:
                    8e:d8:9a:25:23:5f:1b:45:ef:2b:1c:ac:70:13:2c:
                    ef:10:a1:17:1f:0d:ec:6b:ec:e7:7c:f7:7d:51:24:
                    df:c4:d9:34:e6:d5:49:da:99:e4:2d:a6:a7:ec:96:
                    c3:8b:ee:c1:9e:bc:ed:12:ce:dd:9d:d6:22:42:79:
                    d9:ea:c3:99:a1:25:f1:62:a4:d5:46:1f:96:a5:a9:
                    18:24:d5:43:47:49:2a:64:26:b2:a1:34:42:c7:7e:
                    91:10:1a:19:e0:a5:d7:18:04:07:0c:79:58:52:66:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:1D:9E:80:93:B6:65:1D:91:6E:13:5E:C4:60:24:8D:06:A3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:27:3c:eb:d6:2e:ef:02:49:4c:e5:1a:96:2a:62:a7:33:2b:
         01:94:51:a5:a7:f7:1a:39:6c:54:0f:07:7b:fa:85:cd:7c:85:
         9d:fa:b0:1b:3a:6d:6e:14:f9:a0:97:ab:5f:f2:30:1f:7f:b8:
         74:95:87:89:4d:d6:52:fd:c4:4e:bc:62:1b:8b:15:31:cd:be:
         1e:ff:da:2a:62:53:e3:f8:60:21:0f:3b:fe:74:03:88:77:69:
         72:8f:5b:1a:2c:c6:cd:36:7f:ee:79:5e:cd:e8:ef:25:38:fb:
         1e:21:c5:d8:af:2a:bf:53:3c:29:51:ca:70:1a:c9:83:18:44:
         07:1e:5b:25:e5:04:b9:81:15:53:fd:38:0a:8a:3e:38:92:2d:
         8a:c4:bd:bb:dc:6d:c0:ae:5b:ee:7c:2b:3e:2f:51:03:a8:ac:
         3f:b4:8f:01:16:b8:a9:e8:0a:da:67:30:61:f3:8a:b0:08:9d:
         7d:59:8e:cd:07:20:62:b5:78:ad:df:e9:ee:ff:82:5e:a4:3f:
         5b:65:93:3a:93:6d:f6:3f:97:55:8a:30:d5:d8:82:ec:4f:db:
         7b:59:ce:34:ce:92:01:5f:ba:23:2c:a1:82:a1:53:83:58:85:
         74:27:62:cb:b2:8f:1c:3a:c6:82:b9:ad:6c:84:9b:82:a4:d4:
         a1:a3:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:03 2025 by rpki-client