Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
File:                     af46517c-ca12-3893-94bf-56e17eb024f2.roa (raw, json)
Hash identifier:          +9WZI3dvGkBy1fJdNbWqtgvj8tnb6s+W7YmFlao0my8=
Subject key identifier:   16:43:5C:CC:AF:46:60:28:65:97:34:44:81:A4:79:81:99:5D:08:44
Certificate issuer:       /CN=72de343e-ded3-43ae-b207-e492c0f88566
Certificate serial:       010D0C9F43285848EC969150FA584E9327DB5800
Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     22803
IP address blocks:        199.59.234.0/23 maxlen: 24
                          208.92.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:91:50:fa:58:4e:93:27:db:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=941548ef-150e-4c5a-88f2-5b54168ffc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:c2:6f:df:10:09:0b:f0:cb:48:9a:ae:2e:
                    6b:ac:8d:b1:94:54:59:9b:40:42:59:ff:26:ae:fd:
                    df:4b:a2:e0:c1:fd:51:c7:07:be:7f:a5:e0:5a:dc:
                    af:8e:03:94:c9:69:36:30:cf:a6:2b:c6:48:b8:c5:
                    5a:9f:74:9b:87:c2:af:01:36:57:19:db:5b:27:cd:
                    ed:22:e3:64:57:db:cd:28:9a:3c:1f:bf:fd:f1:51:
                    ca:67:b3:94:d6:5b:dc:81:9a:39:87:66:64:8c:32:
                    e9:b7:5e:c6:f7:66:d6:cd:e3:e1:ba:82:12:e7:96:
                    42:d2:21:2d:99:67:06:14:c4:a1:69:f1:c0:94:b4:
                    91:f1:62:c1:65:6c:5d:60:23:4b:50:fe:21:22:95:
                    e2:3f:22:08:bc:ce:91:8a:ad:04:be:d9:65:72:5a:
                    66:8b:60:82:03:62:4f:57:88:ba:c6:ef:9e:e4:5a:
                    1e:f6:e2:f5:2b:52:d1:65:42:6c:0e:0b:92:c7:d2:
                    7b:ca:6d:32:cd:79:ca:21:55:d6:e9:7f:0b:88:9c:
                    88:0c:5f:e1:ed:c6:27:14:f0:c5:f1:48:16:c2:b7:
                    41:4a:03:8c:f9:df:da:c3:14:b9:c3:21:7a:e4:d7:
                    e1:23:fd:17:12:e3:f4:c3:e2:a7:df:a8:14:e5:d4:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:5C:CC:AF:46:60:28:65:97:34:44:81:A4:79:81:99:5D:08:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl

            X509v3 Authority Key Identifier:
                keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.234.0/23
                  208.92.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:19:de:57:8a:09:21:61:ee:2d:95:83:9a:6e:f1:35:5f:
         c7:4c:54:1c:2e:dd:41:ee:fb:f8:66:77:40:0c:f6:29:f3:81:
         e9:9d:c6:3f:42:8e:16:b4:2c:f8:ed:dc:3d:19:89:22:a6:6f:
         2c:b6:30:05:6e:46:80:56:fe:ad:5a:fd:a0:66:e6:85:d4:22:
         ef:27:8d:0b:66:c1:9f:75:76:b9:e3:b3:a9:7c:c7:9b:95:e4:
         a5:8a:dc:ba:9b:3a:fe:eb:2a:c1:07:00:20:4e:e7:5e:3e:4e:
         71:91:29:6d:87:a7:6b:d8:6a:25:94:60:10:de:5b:0b:f7:c6:
         48:02:79:bc:0e:f5:bd:ae:fb:60:03:21:90:f0:b9:fe:11:4e:
         af:9e:83:1e:98:55:0a:c9:e3:2f:ff:5d:b1:1a:57:18:52:42:
         4a:67:5a:96:b8:ca:7d:1f:c2:fb:da:84:cf:0d:f1:7a:fc:a5:
         bb:0c:b4:ad:24:b6:32:32:7d:a2:a0:6b:ba:b7:b5:0f:ea:0d:
         2d:5a:b3:6b:60:60:8a:e8:4b:eb:be:bd:83:e0:4e:02:52:fb:
         d2:69:9b:50:a9:59:e2:31:ae:b5:b2:de:1d:f7:4d:61:7f:6d:
         6d:0b:28:65:5a:0e:08:9d:45:07:67:3a:b3:23:ce:2f:ec:43:
         01:c5:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:35:40 2025 by rpki-client