Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa
File:                     fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa (raw, json)
Hash identifier:          JL6F6I9gtWN9TB6R+o3xT9d6ncKSFqFHnCb113Iayp0=
Subject key identifier:   AF:60:02:5D:4D:B7:5D:71:9B:44:C4:64:13:77:5A:3B:88:B0:BE:A7
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F432858496CE44E482E9DFCC1029FC700
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     394840
IP address blocks:        67.219.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4e:48:2e:9d:fc:c1:02:9f:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=de198b11-c63c-4699-918c-9ed5dd0ddc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:31:99:bb:ec:80:88:a0:53:aa:a9:41:f6:
                    0e:8e:e9:bb:b4:44:7e:a9:c0:34:17:4f:67:31:45:
                    7f:8e:62:2b:cd:80:da:30:73:be:f3:cf:b7:5f:e9:
                    2d:65:05:8e:cd:0e:34:c6:f7:dd:fe:81:ba:56:99:
                    44:fa:13:27:17:36:cb:fb:29:e8:42:2c:3c:2e:7d:
                    3d:df:d4:2c:ad:69:62:1b:c5:61:c0:3b:eb:3c:e0:
                    c7:7a:69:fa:53:f2:d0:77:46:08:49:30:16:c8:61:
                    21:e0:dc:7f:d8:48:e3:76:d1:af:ba:1f:01:af:78:
                    32:57:96:ea:66:76:f1:e9:4b:a7:cd:5b:b5:cf:11:
                    50:a5:ad:13:81:2c:46:51:aa:e8:5f:69:4b:bf:fc:
                    42:29:a3:cb:29:c4:b0:cc:56:e6:d8:7a:50:1d:55:
                    8b:a1:82:0c:4e:cc:c8:f5:9f:f6:04:24:24:e8:d2:
                    8e:ff:4b:13:6e:4e:16:c3:34:bc:1d:d7:b7:22:36:
                    c8:8d:34:d7:1d:82:d5:67:2f:fc:8d:32:e9:60:15:
                    4d:30:8f:23:34:0a:81:58:76:6b:a7:dc:13:d7:c3:
                    7f:d9:3e:c3:ce:5d:3e:6a:cb:81:fe:74:9d:c7:6c:
                    e8:5c:d2:9b:23:4c:75:b1:84:df:13:8c:7a:14:01:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:02:5D:4D:B7:5D:71:9B:44:C4:64:13:77:5A:3B:88:B0:BE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:54:35:b4:3f:42:91:05:42:fa:3a:cb:ec:4a:02:b1:c6:4b:
         80:12:f0:f9:52:df:fd:49:da:df:1f:74:0a:e6:b1:ad:cd:f4:
         cd:0c:aa:a2:90:90:57:52:06:73:93:57:61:0a:9f:2c:35:8f:
         c1:8b:54:a4:e8:04:cc:33:b1:69:3f:a0:8c:31:9a:91:a8:8e:
         a5:02:6f:30:0f:7d:20:cb:b9:91:4f:29:10:a3:6e:92:ff:e7:
         20:35:5b:ac:51:b3:ca:0d:08:f0:6e:63:ff:c2:f4:fe:bf:38:
         cf:19:6e:74:ac:26:81:d4:5a:5f:ce:d2:3e:3a:12:17:b1:82:
         25:6e:22:e5:16:62:ae:9e:02:cc:7d:66:03:e4:88:d7:bf:e2:
         7b:45:fe:06:ec:68:a6:3d:12:a4:8d:b0:ae:61:25:11:52:d1:
         a1:7a:bd:5e:68:53:91:e8:c9:be:44:a0:66:b1:26:2b:be:7e:
         c0:3c:68:58:0b:e5:c8:fb:9c:13:37:2b:8a:e2:94:5b:56:2d:
         d0:fb:65:f2:13:8d:74:69:5a:f5:9b:38:d7:bc:49:32:dd:84:
         39:dd:54:51:f9:e3:9d:b9:c7:32:42:43:91:52:f2:8a:01:71:
         99:17:dc:a1:25:b0:43:ae:ae:0d:6e:c2:c1:aa:92:01:41:cb:
         27:da:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:48 2025 by rpki-client