Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fbc54b-569e-33e7-815e-cb689a5d22eb.roa
File:                     40fbc54b-569e-33e7-815e-cb689a5d22eb.roa (raw, json)
Hash identifier:          zwCnzaulgUJTi85vZjdRyXfiaFBsPU6IO4Dzr5tdFZA=
Subject key identifier:   8B:23:F8:1E:0C:6E:D7:0B:85:C5:80:C7:1A:EB:98:28:C4:4B:23:3D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF001A4B5ABE8881C8A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fbc54b-569e-33e7-815e-cb689a5d22eb.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397235
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f0:01:a4:b5:ab:e8:88:1c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=fa90d43f-cef7-4a42-abf2-bc5018ab181c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:3e:6d:c9:5c:ae:4c:c4:6a:6f:d0:a0:3d:
                    0f:bc:70:dc:29:05:e7:02:fa:69:5d:cb:7a:2a:d1:
                    f7:04:38:69:16:76:33:76:3c:45:87:92:ab:14:57:
                    3b:3d:0b:66:a2:44:40:a6:cf:26:e9:84:6d:25:1e:
                    50:06:0f:65:13:de:9e:3e:aa:fb:08:36:1d:e9:aa:
                    3e:0b:0d:95:34:63:f8:92:0a:f9:1c:3f:fa:c6:86:
                    71:4f:60:ed:22:d7:46:37:9b:13:05:d5:5d:e3:1d:
                    42:9b:ad:5e:76:d3:dc:89:1c:cd:fa:4e:1a:25:6f:
                    50:e5:48:21:a3:37:f4:47:41:bc:11:c0:6f:87:0f:
                    33:6c:f5:6b:c3:0e:1c:fd:bf:05:8b:36:f0:01:ac:
                    ec:02:cf:8b:da:2a:28:b5:dc:88:91:0e:f7:bb:f2:
                    29:f1:37:a4:9f:82:cd:05:27:28:7a:f1:9d:e9:6b:
                    99:a5:42:48:74:fa:f4:b7:18:b9:54:c0:8a:e8:ae:
                    21:50:78:74:b1:6b:ea:44:68:fa:24:94:3f:01:39:
                    9e:21:c2:72:11:63:6e:4a:17:d6:23:d0:c5:a2:7b:
                    4d:e6:55:ab:33:06:77:97:c1:39:03:5a:6d:02:ac:
                    c4:b1:89:46:ca:f0:20:ed:3e:15:4f:c1:db:4b:d5:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:F8:1E:0C:6E:D7:0B:85:C5:80:C7:1A:EB:98:28:C4:4B:23:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/40fbc54b-569e-33e7-815e-cb689a5d22eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:c3:1a:61:ac:13:0d:cf:f2:4a:50:f7:ba:00:3c:37:54:
         a3:cb:24:6c:12:09:50:8b:63:9f:3e:43:48:a1:c6:15:47:d9:
         18:a9:dc:b8:60:35:4f:0e:34:e3:03:e4:45:ca:98:70:68:4e:
         62:b2:ad:87:0c:8c:4b:90:0b:52:df:76:49:27:8b:d7:e9:af:
         5c:65:65:74:45:43:52:29:5f:23:21:b0:98:f0:c4:33:5b:8e:
         01:f9:ac:29:c5:0d:8e:6d:42:6a:0a:42:19:8a:5a:cf:39:f8:
         33:a8:3b:eb:27:85:9e:09:33:74:80:0f:a6:82:ec:0e:4c:d1:
         be:68:99:5b:f9:48:82:26:19:57:68:2d:56:00:25:6d:ef:7c:
         98:c4:89:b5:69:d0:2c:ea:e9:26:ce:48:17:a4:39:c7:82:f4:
         4f:1d:2d:f6:61:69:1f:7b:45:41:b4:1a:52:95:6e:e0:e1:4f:
         3e:7f:ec:ff:39:f1:a7:7f:c4:c7:9b:29:1c:41:94:02:70:15:
         6e:a7:18:bf:86:c1:3a:54:a7:90:ed:62:6d:66:59:63:0a:7b:
         20:b5:3b:fe:bf:e4:2f:79:91:88:0a:ba:26:90:0e:78:66:12:
         e1:46:bc:b9:57:71:bf:93:bd:12:67:3c:90:fa:a7:2c:72:5b:
         ad:b0:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:07:42 2025 by rpki-client