Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
File:                     848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json)
Hash identifier:          v8WejLyVUNrCewvvlL21FUsq5LwLTVGPrhYLXHjfbvw=
Subject key identifier:   D3:EF:7F:06:95:40:D7:2B:62:5D:56:73:38:57:A9:9B:3E:DB:DE:78
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F4328584949FE9375AF3A6989254F0E00
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     398774
IP address blocks:        209.250.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:93:75:af:3a:69:89:25:4f:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=e974ebc0-4236-4035-92e3-54e6658942a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:68:7a:1a:dc:79:e9:f6:01:c8:af:c5:d7:
                    2e:9a:04:0d:01:11:f7:33:79:63:85:b6:cf:22:b7:
                    cc:81:f7:c0:78:90:48:bd:62:8a:d5:83:03:d0:24:
                    7c:a7:67:6e:01:8b:a0:59:54:eb:ef:ff:e5:fb:e4:
                    86:75:38:11:1e:65:18:5f:c6:4a:94:07:b6:4a:e9:
                    3d:fc:e8:2a:d9:09:45:28:1d:de:d7:79:2c:8e:25:
                    81:69:da:63:05:2c:c0:a6:bb:61:53:f0:0c:a5:e8:
                    89:bd:59:89:e1:04:fe:ef:d3:d6:6f:75:b6:b0:a8:
                    6c:07:3b:76:a8:8f:fc:91:c6:8f:eb:74:5e:e9:6f:
                    fb:57:37:ea:5e:6f:ee:fe:74:d9:0a:df:95:32:4d:
                    54:e8:48:25:69:2f:f5:61:ee:98:10:9f:c5:5b:f0:
                    cc:c5:69:b0:ba:da:a4:68:fa:89:e0:0e:d4:3a:9d:
                    8a:5f:8d:3a:fc:62:dd:dd:6c:ee:9d:04:9c:b9:ef:
                    72:ad:69:c1:f8:0a:67:4e:ce:36:5c:d1:d8:17:7c:
                    58:e5:12:fb:93:c7:c6:fd:af:f7:c8:0f:8b:4a:32:
                    e5:97:55:91:3a:40:96:88:b7:dd:a5:c9:32:04:b6:
                    bb:45:46:be:b9:f9:c2:00:5f:f7:43:11:85:38:66:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:7F:06:95:40:D7:2B:62:5D:56:73:38:57:A9:9B:3E:DB:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:64:f2:be:05:5d:73:91:d6:fc:4d:a4:56:cd:90:a5:86:
         b5:f6:3b:73:c7:c4:3d:c6:8b:a5:af:f0:fc:ab:bc:42:89:87:
         1a:b5:41:13:d9:57:3e:9b:39:ea:5d:20:bd:33:84:8a:89:b1:
         12:cb:ef:88:98:58:93:3a:0b:40:73:04:15:d3:47:65:3b:e4:
         86:9f:25:c1:a5:48:5a:43:b4:4a:a8:fa:73:16:df:29:96:2b:
         9a:d2:e6:d6:d6:ef:72:6d:9c:9f:ec:84:cf:98:6a:0c:c7:6e:
         6d:c4:22:b1:af:30:1a:cd:ee:f1:a8:8e:7d:5c:bd:31:a5:c3:
         00:f9:79:9d:3b:2b:6a:2f:88:98:11:40:9e:f0:56:61:52:20:
         0c:e7:67:ad:e1:d6:d0:74:39:50:81:b0:59:1b:42:b4:76:a7:
         95:43:69:ca:a3:5e:ae:0c:66:02:eb:f3:0b:bb:13:cd:a6:e7:
         57:bf:34:7b:b5:ba:f1:92:9c:86:75:67:50:43:04:4a:69:ba:
         22:e8:1c:29:35:f1:1a:85:34:f0:c9:0a:df:3e:92:b6:7c:81:
         3b:bf:61:22:8f:51:e2:f9:2c:cc:65:67:f6:1b:f7:e0:e4:ec:
         21:e7:80:19:6e:c8:46:7d:86:c9:05:c4:04:56:ae:90:c9:b1:
         da:bd:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:43 2025 by rpki-client