Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
File:                     f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa (raw, json)
Hash identifier:          3RDZUzS0PHO60w0FtCwyu0TsTQF00OnoKo+Wl12IiPo=
Subject key identifier:   A9:A1:EC:55:70:0B:1C:1B:18:DB:B9:0E:A6:B3:4B:A4:9C:D9:C5:90
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F432858496A8DC9DBEC40CD82D6C80800
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
Signing time:             Fri 04 Apr 2025 16:55:12 +0000
ROA not before:           Fri 04 Apr 2025 16:55:12 +0000
ROA not after:            Thu 03 Jul 2025 16:55:12 +0000
asID:                     63018
IP address blocks:        199.59.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:8d:c9:db:ec:40:cd:82:d6:c8:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Apr  4 16:55:12 2025 GMT
            Not After : Jul  3 16:55:12 2025 GMT
        Subject: CN=57e8e4ad-3a0b-4861-8100-e5f057f48d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:b0:62:d8:b6:9f:8d:b4:b7:42:3e:cb:0c:
                    dc:3a:43:60:43:89:7f:2e:1e:b4:77:22:ed:df:a0:
                    06:2f:ae:3d:6e:ca:98:69:66:c2:1b:19:3f:07:e8:
                    35:d6:74:19:0a:64:32:da:ac:ae:30:60:76:48:68:
                    04:8e:a4:b1:73:72:7e:56:bb:b8:af:29:87:46:7a:
                    93:cd:d9:69:51:65:ca:a0:66:19:98:5f:9d:1b:e1:
                    41:b7:26:29:62:2d:31:92:bc:74:17:3a:e6:43:58:
                    7d:87:88:eb:b5:35:04:5b:ba:6d:2c:21:5e:e0:47:
                    33:2d:be:dd:64:81:19:f7:fc:a0:f6:63:64:21:83:
                    4b:cc:d4:e9:bc:2a:a8:9c:34:57:7e:68:f2:a0:38:
                    20:5b:3a:ff:0e:2a:b4:98:70:df:5f:bb:0a:2f:e7:
                    ff:74:13:a8:fe:73:75:d1:1b:e2:ad:a9:4b:fc:18:
                    56:e3:63:b6:3d:a5:60:78:2f:8f:89:d8:b9:5e:85:
                    9c:e5:9c:21:e7:b3:57:81:83:43:63:96:b8:5e:40:
                    1d:e4:ff:67:10:96:de:eb:16:1c:a8:b6:30:d2:34:
                    9d:c9:08:bc:24:e0:1b:42:47:1a:12:83:b9:a8:68:
                    68:23:b6:75:85:07:5a:e9:b8:70:de:bd:21:7c:9a:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:EC:55:70:0B:1C:1B:18:DB:B9:0E:A6:B3:4B:A4:9C:D9:C5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:bc:a5:ff:c1:88:49:7d:42:52:c7:ce:d5:c2:48:51:f0:
         18:47:ca:f6:e6:45:b4:79:31:fc:ad:5d:15:3f:e7:32:95:e5:
         67:da:b7:01:cf:8d:e8:3a:4d:d7:d0:61:52:52:bb:44:90:c7:
         49:e2:5c:a9:9a:b9:c9:fe:5e:85:d7:56:c2:1c:0c:26:08:ba:
         43:e9:0d:dc:b9:df:18:a4:c6:e8:b6:ba:f2:e0:85:8c:06:ac:
         72:9d:b3:b3:6f:e4:b5:e4:07:aa:27:d0:5a:c0:7c:50:48:9c:
         44:39:97:e3:4a:c4:49:74:8a:e0:b4:7d:dc:ef:4e:c6:73:58:
         f5:9b:8e:db:e3:ca:b5:33:ae:86:b3:6c:2a:6a:65:04:b2:93:
         8b:e2:45:c5:f0:d7:db:4c:d0:ed:55:ed:90:2b:0f:b9:9d:95:
         1f:b3:6d:6e:88:a0:4c:82:8d:4b:c1:24:5e:90:ca:21:3b:67:
         59:fd:dc:40:12:7c:8c:6e:12:e0:5c:22:97:ad:04:61:91:22:
         e9:b3:ef:ba:96:8c:f8:de:25:3a:23:13:3e:69:16:71:2d:bd:
         24:ea:98:85:1f:1c:31:d0:94:2f:8f:f1:11:65:58:6d:3b:77:
         0d:9c:d8:45:b6:e4:fe:4c:f0:5d:ff:e6:b1:67:eb:8f:8b:31:
         95:99:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:00 2025 by rpki-client