Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa
File:                     6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa (raw, json)
Hash identifier:          Cq59lmPOEcErsmsNF4UF6SSKpu0uTk0MByhzPeXT3M8=
Subject key identifier:   CC:02:BE:81:2F:51:C7:88:2B:99:82:B7:7B:E9:B4:A2:CE:DB:4A:BC
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F43285848B35B65398AA837378B4B4740
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     36688
IP address blocks:        199.73.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:65:39:8a:a8:37:37:8b:4b:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=082dffb2-0588-4fe2-ab9b-6b6fa930c102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:c3:e6:8d:27:0c:4c:ee:ce:cc:d8:db:7c:
                    d2:f7:d1:d0:ec:82:82:6e:7f:44:4b:25:12:15:55:
                    04:08:b2:7a:e4:83:e3:cb:b4:10:7a:4d:eb:75:e0:
                    8f:c4:f4:f1:de:f1:44:f6:04:bf:00:83:4e:0a:33:
                    3d:ad:a0:d7:b7:27:47:6b:e6:ee:9f:36:31:b3:08:
                    a0:38:b4:79:bc:56:2e:a9:f6:0b:9c:ce:17:bb:47:
                    d8:4e:09:5e:40:f7:81:93:92:fb:aa:54:7a:69:60:
                    20:1f:e8:f3:6d:00:ad:1c:c4:aa:16:12:b2:8d:c5:
                    58:c8:9d:91:66:b0:68:df:cb:07:e9:df:8d:e2:a6:
                    16:4f:1c:66:e9:0b:e7:12:88:1d:47:54:ff:f4:05:
                    6e:27:13:92:de:05:a6:a8:71:96:9d:f8:db:62:a6:
                    1f:b8:14:74:81:7a:9f:2e:1e:bf:99:10:b2:77:24:
                    93:35:64:c9:25:40:e2:66:76:4a:08:a4:3d:f5:80:
                    ab:00:e0:bc:b9:7e:a2:0f:6f:4f:58:2d:2a:a8:07:
                    32:0a:59:68:8e:fe:b1:6c:ce:78:62:97:ef:a6:ee:
                    ac:9b:aa:e0:79:af:a8:32:cf:18:94:09:bf:01:eb:
                    3f:c5:21:12:f1:89:06:5c:28:6b:9e:62:54:fb:7b:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:02:BE:81:2F:51:C7:88:2B:99:82:B7:7B:E9:B4:A2:CE:DB:4A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:70:eb:ad:dc:5a:de:16:ec:80:2d:40:8a:28:50:4d:ef:
         52:8d:55:14:22:29:20:85:1d:15:48:d6:c7:ef:38:03:1a:48:
         a6:47:4a:dc:c1:ae:af:86:9c:08:ea:20:ce:15:7a:09:7c:5b:
         32:ae:16:fd:1d:fe:84:1b:4c:82:71:16:8b:2f:ef:b2:fb:6d:
         de:9b:ed:93:20:1a:42:2e:23:ec:e1:af:d3:af:5d:f6:66:c1:
         13:85:ae:52:f8:39:d6:c1:5d:f3:92:f9:b2:73:c3:9c:a0:c9:
         92:2f:c3:e2:a8:e5:38:79:7e:0b:ea:c6:22:68:c2:75:d3:05:
         6e:e3:85:58:1e:b7:58:1a:0d:19:a1:c6:3a:59:9e:20:86:74:
         56:29:be:db:7a:5d:c7:27:53:a6:89:bb:02:75:22:5f:ef:84:
         79:56:e5:02:22:78:b6:af:9c:a3:d4:08:c1:2c:c8:8c:34:19:
         bc:f2:70:28:e4:c9:9a:22:d4:1b:39:1b:85:db:e4:8b:c9:e0:
         dd:aa:82:46:cf:21:c9:f9:63:9b:5f:63:81:ce:66:25:49:e6:
         67:23:57:1b:b3:c5:49:88:10:0f:cf:64:3c:3f:a7:71:9a:b3:
         7e:1b:3f:16:1a:38:0a:91:e0:be:81:cd:04:61:8b:4f:41:f8:
         79:7d:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:44 2025 by rpki-client