Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa
File:                     c1b79bca-e010-326c-84ab-9dac09578d88.roa (raw, json)
Hash identifier:          WgValKANiFIj8524jh+gumqdYLEMaJK458rUhRaZRC4=
Subject key identifier:   5D:4B:32:A5:43:56:7A:0D:4B:CE:30:90:2A:27:D8:D2:14:FD:40:51
Certificate issuer:       /CN=fca378e8-d583-42e8-ad97-ea7b6d731d7c
Certificate serial:       010D0C9F43285848F926A1655E3B5E15F5EFC7BE
Authority key identifier: 36:5E:2C:17:D2:87:9C:44:1C:E7:57:80:F4:7D:34:2D:5A:B9:06:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     5723
IP address blocks:        198.57.32.0/21 maxlen: 24
                          198.57.40.0/22 maxlen: 24
                          204.124.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a1:65:5e:3b:5e:15:f5:ef:c7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca378e8-d583-42e8-ad97-ea7b6d731d7c
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=87efc5c2-64b5-4b5f-95dd-b846ae1757ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:c0:69:84:6c:cc:22:a6:91:41:09:6b:e2:
                    ee:fb:bc:56:dc:aa:08:12:48:c5:23:ca:91:3e:eb:
                    c7:fb:7b:d3:f7:92:d2:85:85:97:10:71:8d:07:de:
                    e6:37:c6:d6:4a:02:0e:cf:9c:9b:be:64:3f:e1:e5:
                    51:46:1f:5f:58:b2:03:89:24:69:b2:a1:cc:66:29:
                    fa:5c:90:73:a4:c7:a9:4e:78:d4:13:f0:f3:3e:86:
                    02:b0:28:4c:ef:29:67:6f:e0:58:a3:5b:39:9c:a8:
                    78:53:27:49:5b:24:75:0f:01:8a:c8:0b:34:84:ff:
                    0e:44:42:80:31:13:81:32:40:42:06:89:eb:0b:f4:
                    fd:6c:e0:b2:e6:85:3b:13:1e:ca:a9:bd:d1:13:94:
                    f4:1b:a3:fa:f5:2a:a0:f9:d5:7d:77:1e:81:16:bf:
                    4f:ea:1e:2f:af:db:8d:65:a8:25:a5:7f:04:84:d3:
                    0d:4d:73:35:89:24:f4:80:8a:3c:5f:4d:a5:4c:bb:
                    ed:b5:07:cd:95:d7:c3:ec:e9:84:78:98:0c:11:8c:
                    71:02:67:e8:5b:56:b8:7e:e0:36:60:b9:35:a2:6a:
                    6f:f1:9b:42:a4:17:f4:c2:1d:a8:7f:6b:8f:01:8a:
                    e8:42:59:83:22:58:42:f4:83:e9:db:d0:6d:4d:f6:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:32:A5:43:56:7A:0D:4B:CE:30:90:2A:27:D8:D2:14:FD:40:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/c1b79bca-e010-326c-84ab-9dac09578d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c/fca378e8-d583-42e8-ad97-ea7b6d731d7c.crl

            X509v3 Authority Key Identifier:
                keyid:36:5E:2C:17:D2:87:9C:44:1C:E7:57:80:F4:7D:34:2D:5A:B9:06:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fca378e8-d583-42e8-ad97-ea7b6d731d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.57.32.0-198.57.43.255
                  204.124.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:e2:45:d6:3f:45:56:1f:fd:ce:21:d8:50:05:8c:52:dc:
         aa:c5:e9:af:45:6f:c8:89:36:73:97:4e:56:53:3f:34:66:3a:
         ea:09:36:07:7c:db:2e:f7:bb:1b:db:e1:27:9f:a8:7e:44:e3:
         44:86:11:af:42:54:3d:77:bf:c8:c8:bb:4a:25:3e:3e:0a:65:
         c7:80:23:75:56:9d:4d:d8:73:89:14:33:bd:98:95:53:03:cd:
         48:64:4c:30:ce:63:47:12:45:2d:6c:89:e0:e7:6a:c4:7d:d0:
         db:92:8b:98:f3:56:7b:7f:06:8d:2b:5e:9f:9c:2e:47:10:af:
         2a:d9:4b:9a:79:bc:38:ce:5d:93:e2:af:a9:04:e8:38:5f:b4:
         30:96:92:90:d8:ec:6c:21:bd:e4:46:2e:e0:ed:b9:b2:a3:26:
         dc:35:72:ca:a5:4d:20:f9:9a:a7:e9:94:3d:a9:ee:47:30:47:
         77:d3:84:90:71:00:8b:90:6b:a5:91:0a:ca:d5:09:b1:8f:5d:
         4e:3b:79:fe:fb:32:42:18:d6:ec:5e:af:49:3e:f1:ec:7e:41:
         dc:64:cd:c2:4c:2f:ef:28:14:9d:a7:c5:98:f0:66:36:35:ff:
         52:cc:1c:3a:ce:d8:93:b2:d2:43:23:c2:e8:8f:3a:3a:9a:71:
         9a:09:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:44 2025 by rpki-client