Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3bc9d02-f05f-3546-b3d6-cdec8eefad38.roa
File:                     c3bc9d02-f05f-3546-b3d6-cdec8eefad38.roa (raw, json)
Hash identifier:          BVj8begBrT8aBmUdE41ADWuHdMlA0+SdBbTcla4nbbE=
Subject key identifier:   DB:E4:A5:53:A1:16:CD:64:8B:07:F2:72:D6:CC:EF:4D:C5:22:1F:1B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C442A5FA02CC55B1D2EDC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3bc9d02-f05f-3546-b3d6-cdec8eefad38.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:42:a5:fa:02:cc:55:b1:d2:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=46902c8b-165e-4258-971a-954dd8a7c5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:36:ac:75:a3:07:81:1d:a9:46:c9:01:6c:
                    76:67:0e:d2:b1:20:2c:03:ec:a9:e7:a3:fb:f3:42:
                    5a:fd:34:39:bd:c1:d2:93:63:96:38:65:d2:f1:1b:
                    17:b0:a4:37:5e:ef:68:30:a0:df:24:e1:46:63:db:
                    b6:b1:ca:54:cb:fb:79:82:11:2a:cb:0e:a9:32:4f:
                    d2:3b:80:ff:49:b6:d6:a3:b4:c4:e4:8a:3d:e3:e9:
                    f3:2a:1b:bf:7d:81:bb:54:db:a8:c1:ed:48:fe:0f:
                    53:51:56:00:bd:61:3d:f4:13:84:7d:8b:97:15:e1:
                    8f:f4:ad:8c:cf:b6:54:ef:06:52:bd:63:32:e2:66:
                    c0:b8:8a:9c:c0:d9:75:5e:70:ff:81:a3:ea:1d:9d:
                    8f:c2:d8:58:c3:f9:a0:e3:e2:25:83:a1:cb:c3:15:
                    8f:33:c3:79:89:b5:bc:95:d7:32:43:c5:ab:ef:31:
                    f5:c3:8d:70:67:53:a1:11:07:4c:08:23:d7:db:f9:
                    d9:9a:e1:76:f5:87:36:29:5d:41:1a:01:e5:69:e0:
                    19:d0:f7:b3:4b:d7:3f:7d:75:be:07:f2:a5:20:0d:
                    07:a6:f2:35:1a:d1:93:46:dc:33:59:99:34:07:91:
                    34:d5:12:c1:f9:c4:52:31:c0:25:c9:a1:9e:27:d8:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:A5:53:A1:16:CD:64:8B:07:F2:72:D6:CC:EF:4D:C5:22:1F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3bc9d02-f05f-3546-b3d6-cdec8eefad38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:d4:82:12:8a:0e:1e:ca:a0:25:d4:65:2e:46:26:29:53:
         d6:60:34:36:cd:0e:32:d8:6b:22:b7:80:8b:17:e6:7b:fe:12:
         bc:6d:c9:71:ce:7f:1b:14:14:5f:e1:61:51:ca:9f:96:73:cc:
         2f:55:ef:65:7e:e8:0c:7e:58:4b:a1:7e:43:1c:9c:05:87:79:
         64:17:84:35:a2:a4:c3:41:70:c8:d8:05:99:8b:7b:39:cd:73:
         c0:ad:c8:1a:96:a9:2a:51:af:d3:97:a3:9b:45:4e:06:9f:34:
         8b:c6:9d:23:c9:4a:27:1d:68:67:c0:29:fd:95:42:75:58:21:
         58:d5:ea:f1:f3:70:50:59:7e:0c:5d:d3:6d:95:2e:26:1e:6f:
         f0:8d:5c:2e:b6:17:76:0c:17:67:7a:50:c0:85:ac:95:e7:44:
         73:d7:23:44:bb:f0:29:8d:91:14:a5:0e:79:d0:47:23:9c:c5:
         d1:89:a0:f0:94:5d:7f:c7:52:ac:1f:47:bf:cb:b6:b8:87:dc:
         1b:77:1a:fc:4e:f5:81:59:2e:c4:d6:2c:bc:e2:1d:82:17:22:
         6a:68:96:d9:dc:c4:ad:83:60:64:41:6e:54:c6:c0:4a:e1:a8:
         39:a5:71:a7:02:46:53:39:bd:1b:4a:22:1e:a9:bf:e7:dc:21:
         54:8a:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:24 2025 by rpki-client