Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5c766bbf-cbc4-3b40-a516-36d729f90735.roa
File:                     5c766bbf-cbc4-3b40-a516-36d729f90735.roa (raw, json)
Hash identifier:          TBW85apXaX4RDRoQPGhkgOQhZbwjnFe/cZI09CcbyTk=
Subject key identifier:   5B:37:E8:7C:8C:72:E2:26:6D:3E:07:79:F1:9D:EB:AF:EE:7B:D5:46
Certificate issuer:       /CN=1f54df1e-3d93-4ac5-b209-e24261193230
Certificate serial:       010D0C9F4328584962616904C8EBA6FEFB9A5340
Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5c766bbf-cbc4-3b40-a516-36d729f90735.roa
Signing time:             Tue 01 Apr 2025 18:39:19 +0000
ROA not before:           Tue 01 Apr 2025 18:39:19 +0000
ROA not after:            Mon 30 Jun 2025 18:39:19 +0000
asID:                     399092
IP address blocks:        184.169.96.0/20 maxlen: 32
                          2607:c980::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:61:69:04:c8:eb:a6:fe:fb:9a:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230
        Validity
            Not Before: Apr  1 18:39:19 2025 GMT
            Not After : Jun 30 18:39:19 2025 GMT
        Subject: CN=19fcc100-598b-4902-875f-f965cb27f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:32:36:6b:ef:25:43:d0:23:7e:03:49:66:
                    bd:72:2e:f2:9e:c6:f3:2a:3a:4d:1a:62:38:d8:71:
                    8e:fe:4b:7d:8f:35:e3:ad:50:c5:5a:3f:56:ac:e4:
                    ef:66:aa:4a:30:59:4d:dd:7c:e7:fa:38:43:4c:eb:
                    4a:a8:e3:9c:4c:fb:45:f7:f2:d4:60:9d:c4:73:37:
                    ee:7f:0e:0b:bd:b3:a7:4b:ef:0a:5b:3d:7e:34:ab:
                    40:3a:41:31:a7:18:57:0d:ba:b2:06:00:7d:8c:82:
                    94:e9:c6:f9:29:cf:20:32:be:20:22:86:04:85:01:
                    66:9b:a4:84:66:15:f9:9f:a0:b6:a1:b1:62:61:58:
                    66:47:3f:41:2d:e6:30:ad:90:ca:af:72:3e:e7:21:
                    57:fd:d1:45:3c:8d:34:78:20:c8:c9:61:cd:ce:3f:
                    db:99:a4:01:a3:b7:f1:35:c7:8d:f3:39:ac:7d:aa:
                    a9:6d:e2:f1:6e:bc:84:0f:15:ce:84:4a:ce:4c:76:
                    9d:c8:2e:06:64:3e:83:4a:7d:3b:f2:a7:66:83:f3:
                    f3:91:fa:48:6d:fa:ac:6a:5f:15:21:27:72:c7:9f:
                    6f:06:c9:e4:91:a0:25:b0:50:32:37:66:c7:ff:61:
                    b6:07:f9:39:52:74:2a:78:aa:dc:2d:5b:c1:b9:9b:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:E8:7C:8C:72:E2:26:6D:3E:07:79:F1:9D:EB:AF:EE:7B:D5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5c766bbf-cbc4-3b40-a516-36d729f90735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl

            X509v3 Authority Key Identifier:
                keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.96.0/20
                IPv6:
                  2607:c980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:e4:29:a7:65:43:d6:f2:aa:4e:46:86:c3:e7:03:80:50:
         f0:7c:ab:80:20:de:33:50:81:87:61:5a:e4:76:7c:25:2a:c5:
         39:93:6b:60:b4:4d:cb:6c:04:85:46:c1:e5:5b:49:a3:49:89:
         a0:c8:9d:3c:68:1b:2c:1c:93:63:6c:53:54:7e:9f:50:1d:08:
         14:92:0e:ad:15:f3:1e:42:c9:9f:55:72:de:f5:66:b8:3b:5b:
         6d:6c:eb:53:ae:f1:c5:7c:e2:ab:d3:7c:bd:22:eb:6f:c0:3f:
         a9:88:d6:20:5d:f4:14:f2:98:4c:fd:94:79:25:a8:12:0a:93:
         eb:3f:0d:af:ca:fb:70:a9:fd:7b:eb:8a:c8:85:50:6f:f0:82:
         48:bb:4d:8b:1e:4c:ff:2a:97:3e:ba:2a:78:9c:0d:a2:62:12:
         24:7f:27:05:f3:99:53:fd:65:85:b3:fa:8b:b9:e2:81:3f:40:
         70:73:75:1f:cd:75:e9:21:66:53:9c:2a:15:13:28:0f:ae:72:
         34:76:65:9d:37:ff:ae:70:f0:9d:8a:07:d4:f9:92:e3:e2:b0:
         e2:1e:45:aa:23:b7:27:49:75:b7:4c:0a:74:5d:61:0e:71:d6:
         d4:37:9f:4a:b8:00:87:f9:93:47:b2:8b:40:b1:9d:44:a7:c2:
         f0:5b:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:24:34 2025 by rpki-client