Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
File:                     9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json)
Hash identifier:          M31bmw94NYboFwrQhadNWOODxn87ieu+pzpTdsVRJ84=
Subject key identifier:   0F:F1:D7:12:62:11:40:B8:5C:89:8D:E6:67:4B:45:BB:46:CE:11:68
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285849631EBEEFFD425E2C416169A0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     19637
IP address blocks:        192.19.66.0/24 maxlen: 24
                          192.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:be:ef:fd:42:5e:2c:41:61:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=5d0e5ede-c704-4d0b-baa9-513a9c4a6664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:f1:dc:71:83:0f:a3:1b:71:91:16:e5:6c:
                    5d:4f:60:98:68:44:8f:04:c0:fa:fe:5f:73:60:c9:
                    7e:56:b2:2b:fd:6e:a5:78:7f:2c:20:77:52:f7:7c:
                    ab:6b:68:aa:c0:86:04:9e:e0:ff:d2:73:6a:76:3f:
                    8b:7e:43:97:a6:85:58:52:a9:c0:fd:fe:25:98:86:
                    47:06:1c:73:1b:56:7b:46:dd:26:b9:6b:f5:a2:fb:
                    2a:4a:35:6c:1d:1d:e3:6a:3f:63:39:4c:44:6d:83:
                    4a:a3:8d:33:39:da:b2:c4:36:49:2b:f7:72:44:c2:
                    a0:25:50:d0:92:66:b4:e2:f8:ed:52:74:e1:29:31:
                    7b:d9:d2:0f:4e:f3:e7:f1:a5:f9:a6:2a:08:4e:ec:
                    7a:8a:bb:71:a7:38:37:57:c3:1d:e2:e6:2f:23:97:
                    f3:d5:88:3a:40:93:7b:f4:22:fd:3c:7a:38:85:bd:
                    28:2f:3b:f1:61:b8:34:6b:af:57:e6:50:49:54:cf:
                    d1:8c:85:34:83:88:0c:61:9b:5a:20:f7:3c:ec:4e:
                    56:36:f7:4a:5e:9e:6d:2f:15:e1:28:99:a5:e2:6c:
                    19:63:85:c9:5c:cb:b4:ea:31:ca:59:f8:a1:02:3f:
                    b4:23:99:da:a2:57:3c:35:4d:74:d0:57:08:16:94:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F1:D7:12:62:11:40:B8:5C:89:8D:E6:67:4B:45:BB:46:CE:11:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.66.0/24
                  192.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:25:8e:0a:a7:d6:a8:68:c5:74:ca:69:ff:6c:38:80:8f:e7:
         b1:97:9a:a7:89:f6:53:ca:60:86:df:b2:42:0d:81:3c:57:e1:
         db:ac:13:20:72:12:c9:95:f6:8d:7a:2f:43:02:d7:df:1f:43:
         e8:bd:c4:be:47:76:fc:df:88:1e:91:47:13:40:60:fc:ca:45:
         a7:00:1d:dc:fe:8e:56:09:4c:74:32:1f:b2:a1:34:2e:80:41:
         c6:d7:6e:c1:22:48:b8:d8:27:47:a0:e6:50:c1:ca:03:92:c5:
         24:e1:e6:98:dd:cf:d3:7f:eb:b8:ec:8a:07:d1:fb:eb:2f:d5:
         37:48:30:56:f1:73:66:d9:0a:b4:91:0f:5a:6a:8a:6d:e5:aa:
         a4:ef:46:83:25:31:b3:f9:e6:74:dd:f3:0c:e8:8b:1f:02:ab:
         93:90:85:35:e1:62:ae:9d:6e:fc:d2:35:e5:e1:7a:40:2a:dd:
         7b:45:a6:82:a5:f2:ea:e5:11:18:f8:8c:d8:c0:46:0d:a5:c3:
         d2:e8:b4:22:d2:ed:dc:94:d3:ea:50:02:9d:78:c1:e9:bd:c0:
         dd:b8:dc:90:92:46:8f:f8:35:1b:72:dc:6e:6d:5a:d2:6c:b3:
         d5:02:00:d2:19:19:9e:17:d4:f5:c1:2a:a5:62:b2:84:59:fe:
         84:99:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:53 2025 by rpki-client