Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
File:                     639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json)
Hash identifier:          uxWtkabDuuXLwxBIKRXBWxJHBMNMpvBpTQeIT6COUp0=
Subject key identifier:   CD:C8:0B:25:06:40:04:C8:56:FC:63:AE:D9:59:66:DA:D1:82:EB:FB
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849F715131C41D32D9A208A0F80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20471
IP address blocks:        209.124.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:13:1c:41:d3:2d:9a:20:8a:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=0d532079-6531-449d-9695-e89a6a30e364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:27:a5:9c:fe:d6:ef:a7:0c:f8:e0:4c:ad:
                    15:45:a7:9a:ed:96:fa:f9:a3:35:87:a5:b4:7f:7d:
                    2a:4f:00:14:fe:93:07:12:0c:ad:d3:1a:3f:42:1c:
                    fc:89:76:ae:d5:b6:e1:85:d7:23:3a:a4:37:6d:70:
                    f6:ea:9a:2a:c5:3e:31:63:48:88:40:a7:a8:18:5c:
                    69:85:a4:ef:4a:89:c2:c7:65:1c:12:0e:e2:cc:58:
                    77:63:59:d8:a8:96:47:c2:14:12:5a:51:22:1b:07:
                    d3:1a:18:2d:57:63:57:4b:00:77:81:00:86:2f:ee:
                    5e:8c:e0:35:70:02:b3:b3:8e:a0:4f:37:0f:09:d2:
                    ce:27:d8:81:24:de:2f:70:64:b4:46:59:0f:13:d3:
                    8e:e9:4a:02:56:9f:be:c2:31:c1:38:b3:a5:b8:da:
                    89:9b:f7:c8:f8:27:66:cc:f9:7b:68:46:01:20:b0:
                    5a:0c:c7:04:a3:e2:63:e7:fe:b4:ba:34:71:27:7a:
                    ef:3c:c4:6c:2f:16:7d:17:13:ad:3b:e2:5c:b9:8a:
                    bc:47:ea:be:c3:22:5b:51:33:17:b8:6c:3e:80:8e:
                    4e:c2:dc:be:68:7b:75:6e:f0:ef:1b:3b:90:30:4a:
                    9d:8e:37:49:f2:ce:2f:b3:4f:36:f9:3d:a0:d9:1e:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C8:0B:25:06:40:04:C8:56:FC:63:AE:D9:59:66:DA:D1:82:EB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:70:7f:dd:c4:15:5a:6a:fd:db:2b:02:c6:43:bd:38:6c:
         f9:73:23:60:51:3d:3e:d8:68:f5:46:80:04:74:3e:9b:ba:4c:
         0f:59:6f:b2:08:56:21:8c:9f:20:16:d2:45:4d:4a:f6:d2:50:
         35:74:99:18:f6:02:52:1a:07:fa:92:6d:fc:56:b4:26:76:94:
         1f:7d:20:14:e0:28:fb:d7:f8:29:f3:5b:af:03:ba:32:35:f9:
         e6:f1:78:c8:06:9d:85:20:4a:b6:d6:33:46:be:a1:cf:88:1a:
         f6:41:51:16:fd:1c:31:93:48:ab:5f:2c:8d:4a:11:83:a7:58:
         b2:f5:06:58:84:bd:8f:28:5e:cf:25:b5:53:b9:9a:fa:e8:73:
         04:39:cc:71:4d:81:6c:f6:97:4e:eb:06:f0:de:26:87:07:7e:
         2a:60:7f:a9:dc:be:c4:de:a2:32:a6:d0:e4:38:be:5b:f0:1c:
         a2:ca:fe:d8:de:a9:8b:d8:8c:43:dc:19:ed:08:19:13:d7:fd:
         01:6a:49:98:40:84:51:6d:d7:d3:83:27:65:d0:28:82:f7:bb:
         8c:e5:33:7c:a8:c0:26:0c:25:92:b4:1e:01:4a:15:15:93:d5:
         09:71:bf:58:d5:59:2b:f7:b6:0a:f3:bb:6f:3f:4b:85:5a:bc:
         16:f8:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 16:57:36 2025 by rpki-client