Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
File:                     33ce6ede-9c40-3d7d-9178-caa155d72046.roa (raw, json)
Hash identifier:          C5/qWUcOd8new5PerKD4ZJBnvmlG9GNtMDeHTvS3hoA=
Subject key identifier:   31:33:58:7B:0A:31:9D:45:64:B0:1F:4D:3A:27:15:83:B7:4D:DD:7D
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F4328584953C417FBB4F19154D4847330
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.91.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:17:fb:b4:f1:91:54:d4:84:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=abfffba4-436c-40dc-953a-910e551c1e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:15:3a:07:71:67:c5:e9:92:30:a6:75:8c:
                    b6:78:2d:a9:66:dd:19:21:d3:b0:c3:bb:f3:e0:06:
                    f2:73:b1:6c:e9:b9:6e:be:e1:1b:74:43:b8:5f:47:
                    a9:f2:9c:e5:58:09:25:4e:fd:f3:1b:0e:a8:d7:5a:
                    33:77:37:98:57:aa:c1:13:28:67:06:8b:96:c9:d0:
                    33:3c:61:eb:ed:fe:da:6f:93:4e:63:37:3d:7d:56:
                    a7:66:b2:c5:5c:d1:6b:86:01:e9:3d:da:fa:e2:fa:
                    45:3b:17:80:d9:5b:ec:65:63:cf:e1:a2:ce:4b:ff:
                    15:f7:83:97:f7:e9:5f:ff:90:89:65:97:3e:ea:54:
                    38:e9:f9:12:f1:a5:d6:55:74:58:19:e4:ed:ee:19:
                    6c:26:2c:c1:54:84:b1:58:f3:89:01:4f:35:24:0c:
                    94:d6:9c:0b:57:5d:be:6c:fd:db:92:64:ca:5b:e8:
                    d6:10:fe:98:e5:c5:15:b9:15:ee:e9:5a:07:20:5f:
                    48:7f:4e:b2:7f:ab:24:0c:3d:9f:f0:aa:29:7f:b3:
                    5d:64:da:c8:0b:44:9b:58:ad:eb:fd:8e:42:72:6b:
                    84:69:b5:92:4a:ee:1c:a2:a1:40:ed:31:40:05:e9:
                    a1:0b:18:a5:b3:25:c7:b2:0b:75:c2:fb:87:45:c4:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:33:58:7B:0A:31:9D:45:64:B0:1F:4D:3A:27:15:83:B7:4D:DD:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/33ce6ede-9c40-3d7d-9178-caa155d72046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:44:58:f5:06:ed:ef:90:39:88:52:55:b5:cf:59:e1:5e:
         48:08:ab:b1:7e:4f:54:99:16:b6:51:fb:98:4d:60:cf:fc:06:
         0f:60:db:33:70:eb:70:33:bb:20:36:bf:a6:17:6a:ce:8a:dc:
         35:a6:88:cf:23:89:fc:50:f2:62:fe:15:86:e2:0d:f4:fc:82:
         f9:91:67:e7:54:81:0f:ec:33:5b:f4:30:4f:a7:e3:14:34:f7:
         0d:23:9c:1b:19:3b:db:3d:5e:13:da:cc:f7:cf:bd:f9:cb:72:
         51:18:44:ef:59:6c:cf:0e:47:52:d4:fd:da:80:62:ef:40:9b:
         69:ac:5a:14:ff:03:af:7e:d4:c6:06:3b:f6:62:e2:92:39:99:
         42:97:70:44:00:21:ab:52:d2:ee:7a:91:94:f6:37:7b:84:1a:
         f3:8b:9a:69:55:39:f3:41:84:c2:bb:40:ac:d2:8c:2f:03:db:
         6d:a5:7d:5e:79:7e:f2:25:e2:6a:40:10:2c:85:9b:d5:18:f4:
         cd:34:06:fe:9f:d3:a3:e0:ce:37:83:2a:5f:4f:64:c2:18:c6:
         bb:b3:66:6a:28:56:52:2c:98:3a:7f:9d:b8:a4:38:e0:55:8b:
         9b:88:b2:46:02:3f:40:94:40:07:7b:08:e9:73:88:a4:be:14:
         ad:ab:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:49 2025 by rpki-client