Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/ad0eb7f0-d030-3390-86e0-682d1005ce2d.roa
File:                     ad0eb7f0-d030-3390-86e0-682d1005ce2d.roa (raw, json)
Hash identifier:          kTL3NpHh1ehV7LtsDVKQh9LBM6+AzrVSsjKhoxsgBAY=
Subject key identifier:   F3:16:A9:1C:17:CD:3D:E6:2C:D7:34:6F:A3:98:D2:6A:67:96:14:F6
Certificate issuer:       /CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
Certificate serial:       010D0C9F43285848ADC612BCDACDC327ED05E900
Authority key identifier: 4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/ad0eb7f0-d030-3390-86e0-682d1005ce2d.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     398933
IP address blocks:        199.73.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:12:bc:da:cd:c3:27:ed:05:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=82300afa-728e-417c-9d6e-69716d1f435f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:64:2b:86:29:13:0c:cb:e5:b3:96:66:ec:
                    59:63:ac:55:39:1d:98:22:9b:a0:16:c3:d2:0c:a1:
                    26:18:0c:e0:21:cf:5d:37:f7:2d:50:64:54:99:2e:
                    0a:43:e4:4c:a7:07:fc:d7:05:7e:fd:bd:77:65:1a:
                    70:fa:ca:92:d2:dd:92:10:b9:4d:ed:db:72:b7:44:
                    7a:08:1d:6a:1b:66:cb:71:43:5f:0c:41:1e:45:1e:
                    d2:ef:dd:a6:e5:56:e2:f2:01:b2:92:f6:2d:2b:2c:
                    ea:87:93:9a:48:07:94:a4:df:7b:d0:87:f3:26:78:
                    46:bb:2c:01:76:c0:2e:bf:54:eb:9d:bd:35:d2:6c:
                    a6:82:6c:dc:80:b5:15:b5:95:42:58:fd:8c:49:6c:
                    cd:2e:64:18:f0:e9:31:01:33:31:da:7b:a7:ff:65:
                    e6:83:94:d8:48:6f:dc:42:11:14:a9:80:b5:00:59:
                    d1:5b:b4:1c:17:d8:cb:56:ac:1b:b0:e0:7d:c7:be:
                    de:ac:f2:eb:48:61:a3:b0:16:61:6d:33:ae:54:d0:
                    96:02:1e:ef:cc:04:c7:84:f4:08:79:8f:e8:c8:5b:
                    87:93:dc:84:00:7b:2d:08:c6:9a:e5:b2:35:e2:01:
                    ed:58:2e:a9:f9:23:d0:c6:27:46:1e:24:40:24:e4:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:A9:1C:17:CD:3D:E6:2C:D7:34:6F:A3:98:D2:6A:67:96:14:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/ad0eb7f0-d030-3390-86e0-682d1005ce2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:1d:07:c2:e5:45:ff:19:97:5c:f9:97:49:34:e1:44:31:
         9b:d1:cc:fe:74:1d:ea:6f:70:40:1b:b2:f5:1b:0a:83:d0:e5:
         77:33:c0:c6:a4:3f:2c:d4:90:42:d4:01:3f:5c:81:30:d4:c0:
         f2:24:b1:8c:f5:21:38:bc:b0:e9:00:b5:be:4a:31:76:b7:dd:
         16:63:b7:a0:5e:16:8f:77:f7:cd:9d:a7:1a:84:fd:9b:24:01:
         0f:4d:60:57:12:50:f5:bf:88:37:8b:b1:15:12:51:d7:8f:00:
         31:ea:85:88:97:c3:fc:24:17:f8:27:d2:ad:02:cf:37:ee:54:
         9d:55:52:f9:ca:10:d0:1e:87:8d:03:67:e7:b1:89:33:a3:55:
         83:bb:03:92:fb:62:4a:14:e5:6d:93:03:0b:c2:34:51:90:6d:
         a5:0e:02:7e:93:02:5b:3d:ee:ed:63:be:90:b7:6d:e1:79:b8:
         d1:d7:62:7d:01:1f:b2:c3:eb:a2:3f:f6:e0:af:64:4b:0e:66:
         4c:ac:a7:be:48:5a:ec:a1:fa:c8:13:7e:cc:3d:f9:28:48:a6:
         1a:34:6e:26:13:19:f8:54:7e:16:76:b8:ed:9b:63:e9:61:cf:
         27:23:7a:45:f6:28:48:0f:6e:be:77:26:e2:10:85:c4:b5:f1:
         f8:8a:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:04 2025 by rpki-client