Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa
File:                     9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa (raw, json)
Hash identifier:          swsnO+dalFfLep9HYWYHVDJT6guTqr22bOBAG36R6Ig=
Subject key identifier:   3F:29:7C:FA:AD:AC:EE:1E:84:B3:70:63:13:7A:E5:FE:34:AD:AD:4C
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F432858490021548C03D11AB17085A0C0
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     21766
IP address blocks:        192.131.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:54:8c:03:d1:1a:b1:70:85:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=5061ab46-cfa7-443d-b20c-c357fad0083c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:c9:b5:60:15:1e:2e:83:96:67:35:fa:18:
                    85:40:da:96:4e:28:13:cc:82:91:19:10:a0:d9:92:
                    92:f1:d4:9b:89:fa:b9:44:f9:5c:8e:1d:df:9f:17:
                    8a:c5:b7:1e:e3:f8:aa:a7:80:8d:70:00:0f:84:ea:
                    0e:c3:3a:e7:d9:1e:c4:46:0e:fc:e3:06:7d:d9:14:
                    e5:4c:55:50:2b:aa:12:c4:d6:42:ac:f0:df:74:7a:
                    b8:ec:ba:f9:eb:ac:36:71:9d:10:ab:c4:d5:d2:e2:
                    8d:d2:61:1e:5a:bc:b2:aa:b6:ea:29:b6:9a:aa:6c:
                    36:08:41:d1:cb:66:4e:bb:ff:d5:99:6b:45:ae:77:
                    da:a0:b9:ab:d3:87:8c:68:70:38:fe:c4:54:ef:a4:
                    27:29:da:5e:cb:7f:09:41:a5:b4:88:2b:fe:43:13:
                    8b:cb:9c:fa:87:31:f0:60:5c:c7:20:02:4a:28:de:
                    e4:cc:16:97:52:c9:bc:d0:91:91:bb:22:43:f7:0d:
                    0f:1f:fa:b8:5e:a8:f4:fc:d1:82:0d:9f:b2:f6:2e:
                    cb:59:c6:00:3c:73:a9:6c:be:ff:39:de:9f:a4:3d:
                    43:39:60:61:7f:8b:64:a5:d9:a2:2a:3d:08:8e:8d:
                    d8:a3:00:a9:89:57:ff:5d:a7:29:9b:03:e2:de:53:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:7C:FA:AD:AC:EE:1E:84:B3:70:63:13:7A:E5:FE:34:AD:AD:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:be:97:83:35:67:11:b0:ae:d3:ed:a5:a5:52:b0:69:f5:
         8d:b4:d1:c1:fa:e2:39:79:9a:b6:7e:0f:4c:5e:d6:1d:e4:3b:
         1e:54:0d:73:3c:0b:9c:1b:ee:dd:f8:87:29:c6:d6:1d:18:a8:
         28:60:aa:cd:36:34:88:c0:11:9a:d0:17:d0:b1:d7:db:25:c5:
         01:cc:cf:92:be:23:c7:c6:14:52:bc:bc:42:65:6d:de:a5:88:
         4a:58:5c:03:b1:05:8e:ff:d0:12:dd:38:e4:b1:b7:76:02:77:
         68:a1:9e:87:0f:bd:e2:de:6b:aa:14:15:b2:e5:b5:02:05:64:
         5f:bf:8f:33:f5:0d:e5:64:bc:ce:e6:96:95:4c:c2:82:48:16:
         d3:4b:99:38:9f:aa:16:01:32:65:35:0c:55:80:62:88:fe:d4:
         86:a6:eb:c7:b3:39:85:50:50:3c:95:bd:05:fd:90:66:37:97:
         3a:ce:71:20:35:b0:d0:e8:93:34:11:df:d9:e0:c4:01:51:39:
         a5:1b:25:2e:25:74:52:83:11:d1:79:db:99:ce:99:f9:57:29:
         60:8b:28:92:aa:73:0c:6e:b3:80:07:0f:13:b5:8b:ba:12:c3:
         7f:68:c3:1b:83:0c:b9:21:4a:8c:36:31:a7:95:25:5d:ed:59:
         01:7a:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:34 2025 by rpki-client