Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
File:                     1c0970c7-6818-3f17-a6be-abb3ae87972c.roa (raw, json)
Hash identifier:          NsIag9zMp19clqbt9+44Xs9hB+JNTkosjh/xx5IOfQQ=
Subject key identifier:   9C:72:BB:FF:C6:0F:02:E7:68:FA:17:30:F0:F4:C5:11:22:48:BE:92
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F43285848C6E62DBF4DA2F59FEDF9A900
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     393397
IP address blocks:        173.195.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2d:bf:4d:a2:f5:9f:ed:f9:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=ec3e5b26-398c-4194-a2f0-076dafaef960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:e5:ac:91:f9:b9:e9:3a:a4:c1:96:68:6f:
                    4e:dc:b3:57:56:25:2a:4b:0a:e7:01:f9:39:79:52:
                    6f:14:7e:f0:4d:7b:5a:19:2c:0f:13:49:af:04:59:
                    06:0f:ff:ea:51:c6:64:16:56:c3:80:60:ee:03:8c:
                    8f:5b:90:92:0d:f8:a9:af:0e:fd:de:d5:ad:05:06:
                    5d:31:50:b4:5e:cc:ae:a0:69:c8:2b:3f:b2:77:3d:
                    59:96:2b:f7:91:88:79:2a:00:c1:93:cb:4a:0e:03:
                    8d:b9:fd:ba:cd:8f:57:d2:d5:67:e6:57:fc:d1:50:
                    ad:c0:2e:00:9d:d5:fc:26:af:37:a1:fc:42:d0:04:
                    08:78:eb:b4:90:89:17:49:59:c9:87:f0:21:df:97:
                    cc:f6:73:20:34:19:76:5c:54:3f:9d:10:75:91:72:
                    5e:dc:51:ba:fc:36:ab:92:b5:a6:d6:3f:8a:ba:ea:
                    7a:27:18:e6:66:cb:90:0d:b1:d2:85:17:40:f1:07:
                    c8:04:7a:18:0a:51:c5:33:18:93:80:55:9d:c4:91:
                    02:29:c0:46:0b:c5:ea:2f:80:2e:39:8c:87:e6:49:
                    77:6f:1d:15:de:5c:08:4b:ec:ab:52:05:a0:cb:cb:
                    21:48:8b:1a:6d:7c:cd:75:3e:64:56:ea:d0:84:87:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:72:BB:FF:C6:0F:02:E7:68:FA:17:30:F0:F4:C5:11:22:48:BE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:65:cf:1b:31:9d:20:e3:e5:57:f6:2e:1f:4d:a2:9b:48:6b:
         5c:26:f6:a3:9c:ac:8e:db:31:4a:58:47:7f:f3:23:a0:46:71:
         89:1a:57:bd:a0:19:1f:5f:f2:d0:23:c5:9b:df:00:af:32:2b:
         16:03:c0:43:d1:6c:96:ee:14:0c:e8:60:34:17:f5:0f:6c:5b:
         23:b1:30:94:ca:04:07:9a:8c:bd:67:12:b0:09:44:66:56:2c:
         e0:d5:fa:86:64:fe:a8:54:28:9b:dc:7c:3c:83:19:3d:03:28:
         77:72:fd:de:ad:48:1c:f0:37:f0:c3:ce:76:75:65:e9:d6:a9:
         27:bd:86:17:e4:6b:87:75:85:06:87:8e:3f:eb:67:c7:67:2c:
         8b:46:a0:f1:3a:30:86:ab:ce:9b:94:6b:31:3d:ba:43:28:cc:
         85:e2:aa:7e:90:50:be:07:26:17:2e:ee:68:c1:b2:13:42:97:
         43:dc:e3:8e:96:cc:75:9e:68:6f:f1:1b:ec:84:7c:c5:0d:0a:
         85:fe:eb:f7:aa:88:9a:9d:47:9c:ee:26:f9:9d:03:5d:c6:bd:
         59:a2:ce:0c:1b:81:f5:03:87:33:2b:a2:cf:d2:b5:5a:87:ee:
         c6:12:a6:0e:0f:4b:29:2d:80:69:f7:c6:b0:4c:72:59:cc:3f:
         71:c5:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:01 2025 by rpki-client