Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d9139ebc-3010-387f-9b0c-67deee59de53.roa
File:                     d9139ebc-3010-387f-9b0c-67deee59de53.roa (raw, json)
Hash identifier:          ibgF2FMFvNgWjjXdc3Yn6fddv5H1fPp3vYqNn4QQgLM=
Subject key identifier:   AC:5E:D0:E1:19:28:C0:CA:9D:6C:25:2E:23:82:DB:DB:3F:03:B2:DE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4439142E61583F5444700
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d9139ebc-3010-387f-9b0c-67deee59de53.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:43:91:42:e6:15:83:f5:44:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=c9ba429a-1f4f-4e6a-86b9-112b8404a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:41:37:fc:7b:1b:ba:74:a8:7f:9c:1a:61:
                    86:80:a6:a7:d2:89:8d:15:3d:27:d4:a1:58:5b:20:
                    28:4b:a5:da:a8:8b:b9:5e:1a:12:de:66:e5:a6:66:
                    91:a2:6b:6e:01:bc:80:23:8d:49:1a:52:c2:d1:74:
                    ec:29:1b:c7:43:f8:ef:04:1d:3b:72:ca:38:d2:43:
                    76:c2:c8:13:cd:eb:fe:48:1c:f5:c3:29:88:61:3d:
                    16:54:df:05:fb:47:3e:0b:8f:cf:62:80:ab:e1:e9:
                    8b:18:bc:b0:fa:ea:f5:02:09:25:f4:ec:bb:97:75:
                    6e:dc:32:cb:6f:0f:f4:2e:77:f2:b8:58:0b:4e:45:
                    60:a8:63:5e:f5:aa:b0:9c:63:61:9a:1f:17:ef:19:
                    d5:e6:29:5f:df:89:3f:d8:a1:3f:81:49:08:25:40:
                    43:41:a1:95:44:a9:41:7d:c9:da:72:9a:e9:37:2d:
                    3d:66:0b:23:19:cf:4f:b2:b2:6a:59:50:8c:ee:5c:
                    88:e3:9f:b4:03:3c:15:46:d1:78:8a:f0:47:a9:12:
                    bd:59:30:f7:25:5d:8d:77:2a:94:1d:a4:06:ce:b5:
                    3a:9f:74:10:5e:14:2a:1f:ae:83:8a:8a:41:65:75:
                    ae:a8:4a:b4:cb:c3:0c:bd:1d:ca:8a:ea:33:cc:13:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5E:D0:E1:19:28:C0:CA:9D:6C:25:2E:23:82:DB:DB:3F:03:B2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d9139ebc-3010-387f-9b0c-67deee59de53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:bb:b3:4a:aa:ca:0a:9b:67:0b:cc:d4:d4:73:54:4d:c1:
         b1:2c:12:92:d7:b1:9d:74:50:f4:ef:3e:ec:03:fb:de:77:c2:
         cf:96:c3:3f:1f:1e:d9:b8:cc:24:04:8b:f9:61:58:f2:3b:b0:
         60:eb:a8:90:78:49:86:dd:8d:9e:83:8f:c4:46:60:ec:82:aa:
         cd:a1:bf:2a:0e:3d:c5:25:e6:bf:10:47:67:89:06:b5:e1:96:
         30:27:ef:d7:e8:19:52:8b:0f:54:c2:87:92:b7:eb:94:67:c6:
         ce:bb:ea:e7:01:a7:f4:16:d7:88:0d:bf:dd:5f:dc:24:dd:29:
         4d:cd:8a:f4:bf:4b:0c:36:59:b3:e9:51:64:0e:1c:7d:ba:a9:
         12:86:ed:d9:40:69:2d:74:c0:a9:81:4f:37:e7:6c:1f:95:d0:
         8c:4e:6f:4c:dd:eb:69:06:cf:dc:07:eb:92:69:d0:bd:a7:50:
         28:c1:2e:14:b3:e4:32:33:2b:c9:19:32:13:56:0e:b0:9a:ae:
         4f:74:63:0e:c6:06:75:06:75:95:2b:96:99:a2:12:e6:cd:f1:
         00:88:a2:34:33:61:32:63:99:19:11:58:77:fc:a4:0a:cd:f3:
         a6:f8:68:31:22:7c:7c:d5:87:bb:c7:57:1d:09:cc:11:b5:7a:
         00:22:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:19 2025 by rpki-client