Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa
File:                     d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa (raw, json)
Hash identifier:          sRVcPfhS+SDkgtbVe9evKPrVHvNGMRurJe1W3khbUkY=
Subject key identifier:   11:46:DD:B8:63:89:71:84:6E:DF:1C:6B:46:91:63:5A:0F:FA:48:6E
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F432858496A008B425E4536D14CF33100
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa
Signing time:             Fri 04 Apr 2025 12:10:36 +0000
ROA not before:           Fri 04 Apr 2025 12:10:36 +0000
ROA not after:            Thu 03 Jul 2025 12:10:36 +0000
asID:                     23471
IP address blocks:        67.219.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:00:8b:42:5e:45:36:d1:4c:f3:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Apr  4 12:10:36 2025 GMT
            Not After : Jul  3 12:10:36 2025 GMT
        Subject: CN=0c52b098-0071-41db-87bc-d63670f34539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:7e:9d:86:70:b0:54:26:0f:ac:b8:b6:a6:
                    aa:76:6a:ee:cc:40:fc:15:d3:20:66:3a:6c:2e:37:
                    0e:53:2f:31:3e:05:1f:38:a0:15:73:e0:16:0e:6f:
                    3a:36:df:54:59:ae:fe:12:1d:08:7e:49:f2:b6:1f:
                    66:99:78:1b:83:2a:4f:37:80:9a:e5:17:73:a6:53:
                    16:ac:ed:e0:2d:f2:4c:ed:ba:3d:82:0a:a6:0c:da:
                    6b:b9:20:e9:c5:a5:7c:45:7c:fb:02:34:dd:44:8e:
                    6a:a6:f9:b0:01:04:ec:69:76:bd:c2:a5:26:a5:d5:
                    38:96:93:b4:09:be:eb:c2:ab:a5:3c:db:5b:aa:6e:
                    2c:20:de:d4:80:3c:79:66:0c:1f:65:58:99:82:df:
                    04:0f:25:a2:69:44:52:a1:e1:cf:90:f5:bd:22:a7:
                    98:f1:33:9c:0f:5b:6b:e9:55:79:de:3f:37:b0:1a:
                    32:40:93:a0:65:47:5e:5b:b0:70:ea:04:d8:cd:66:
                    54:6d:b9:3a:a7:45:24:ac:d6:53:b5:89:6e:9b:39:
                    8a:3f:0d:b9:59:91:f9:4b:5c:29:93:c8:85:84:3f:
                    03:91:4e:6b:ef:59:52:20:fe:0f:46:5f:54:0d:fa:
                    33:37:49:ac:49:7c:6c:a4:bf:a5:9b:e5:87:60:66:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:46:DD:B8:63:89:71:84:6E:DF:1C:6B:46:91:63:5A:0F:FA:48:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:30:ce:89:d1:ff:83:08:3a:cd:ac:be:e1:fe:72:72:2e:
         a5:13:08:39:87:bb:b2:f6:d0:8f:9f:7a:ad:90:cf:00:ea:8f:
         0c:59:a3:d1:fb:53:89:e1:b7:1f:12:86:22:8b:6a:f3:5a:52:
         4b:6c:71:40:59:00:f3:87:fd:ed:e2:01:6b:a8:c6:30:d2:f9:
         97:2a:1c:08:e2:6a:0d:61:bb:70:96:52:ad:39:22:61:e2:ef:
         fe:36:48:dc:53:34:c4:7e:0e:48:1d:59:77:76:f1:fe:32:b4:
         00:67:6b:b2:08:8a:7c:6f:47:60:73:c7:7d:45:95:da:0c:a1:
         48:20:bc:15:3c:c5:2f:ce:8c:ad:63:ee:75:81:7e:56:d5:5b:
         4b:a0:ff:eb:a3:d3:07:2b:90:87:31:a3:61:7a:60:ad:c6:76:
         fd:91:f6:7e:29:9d:1f:b5:2c:b7:60:2a:02:e2:40:b6:cc:cb:
         43:c2:e9:98:54:e6:86:53:1e:43:2a:6b:3b:f9:a9:e4:57:bb:
         33:32:08:72:7b:77:cb:ee:fc:81:a9:0b:f6:2a:3d:32:62:81:
         39:8a:ec:73:13:59:43:95:97:7f:d3:33:4b:73:f7:21:16:e2:
         31:55:6f:9e:08:0f:df:c4:80:f5:5a:74:c2:96:65:74:d2:f6:
         4b:47:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:38 2025 by rpki-client