Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
File:                     f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa (raw, json)
Hash identifier:          A0w8UQOuJJN6fHNe/lw+Dqn9fEPk/Xitgm5IrVQuX5I=
Subject key identifier:   9B:7C:34:B0:B7:92:A9:66:72:EF:5B:77:00:A1:4A:AE:C4:5E:8C:41
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848F65BE21594B6763459C07580
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     12129
IP address blocks:        69.39.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e2:15:94:b6:76:34:59:c0:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=1d91d0f5-fdd3-4f33-abd4-d0f59cab40a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:f0:e9:e7:e7:0c:23:be:42:cc:7c:d5:0e:
                    97:0b:9a:3f:6f:df:ee:b7:4f:0b:ea:9f:98:4a:91:
                    92:d0:b3:06:2a:84:bb:49:da:8f:60:ce:48:dc:17:
                    a2:11:9f:ee:d3:f1:b5:3c:55:cf:85:19:8a:df:75:
                    3f:80:13:c2:53:54:cd:9f:4c:8e:a6:4b:85:7f:07:
                    82:0e:25:86:f3:b0:a8:98:5d:ad:bb:c0:5d:c8:45:
                    24:38:75:d8:08:74:6a:d9:cf:e4:b8:2f:87:1e:a4:
                    5e:2f:8f:02:5d:f2:9f:58:7b:54:26:15:d1:2d:7a:
                    6d:c5:e9:a5:45:4d:52:a5:ad:38:38:ca:ca:64:01:
                    23:fd:44:77:99:1a:fa:88:63:ea:88:50:b6:44:a8:
                    bf:d0:fc:5c:5c:df:47:d4:95:95:dd:73:cd:76:c4:
                    bb:74:aa:55:e0:a1:13:ae:7b:b6:da:ea:93:b4:d2:
                    71:00:48:03:74:32:fe:03:85:6c:d5:ec:c1:f4:6e:
                    8a:f3:51:e1:ec:8c:08:df:b1:dc:24:c0:7a:7d:85:
                    50:bd:3f:f0:df:5e:8a:cc:97:9f:7b:80:a1:88:14:
                    0b:90:5c:74:e3:a7:e0:e0:c2:07:5f:2a:92:11:32:
                    36:9d:90:f3:c6:a5:9b:0d:31:a4:43:24:78:c0:96:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:34:B0:B7:92:A9:66:72:EF:5B:77:00:A1:4A:AE:C4:5E:8C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.39.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:23:51:08:88:57:4d:91:6e:e5:2c:2d:21:d5:db:f2:8a:
         52:d3:54:f1:a0:7a:4f:c1:93:13:ec:07:f3:d0:1e:a0:5c:4d:
         9f:3a:e1:e0:e8:4a:22:c5:05:4e:54:49:36:7c:b9:ec:f9:f0:
         fb:5a:22:ae:02:e8:68:5d:5d:4c:11:4d:67:d3:c8:52:60:3e:
         b3:ae:e0:34:d2:7e:b0:ed:56:62:9e:fa:7e:24:8d:e8:54:5a:
         2b:83:d1:81:96:53:28:5f:64:bd:4c:56:43:e8:62:6e:28:a9:
         3d:fe:c7:14:e1:dd:43:8e:24:b5:63:23:2e:3b:e5:77:67:64:
         87:88:4c:bd:88:e6:fb:6c:6e:52:5f:11:7b:25:9e:6d:9b:28:
         07:85:c3:a4:6b:71:d4:2f:af:4a:ce:ed:71:cd:c9:71:de:10:
         98:2e:72:0d:32:7a:48:b6:37:6b:46:f1:af:6b:54:29:e7:2a:
         51:4c:21:fa:34:0c:e9:da:e8:6b:fe:ba:46:ff:a1:fe:71:96:
         84:8c:a6:5b:37:ee:90:1c:f8:a9:d8:5e:9a:76:d9:13:15:b7:
         f6:54:6c:d3:5e:64:9f:b1:f0:76:5e:40:71:eb:07:44:7c:36:
         8a:20:d1:24:01:2e:02:f1:3f:c2:9b:f8:f2:7b:48:ee:9f:4f:
         26:b6:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:16 2025 by rpki-client