Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa
File:                     6ede325a-ba24-308c-a1a3-54012fa276ef.roa (raw, json)
Hash identifier:          JQMSpYAVzrjIgdKBHauLU5QrW6Eb/Ltb1C8N+r6Is4M=
Subject key identifier:   B7:60:32:91:37:C2:90:07:A7:00:3E:75:23:AF:05:AA:FD:4E:0B:41
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285848EF615DE8E57853BF01B5BC40
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46650
IP address blocks:        199.85.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5d:e8:e5:78:53:bf:01:b5:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7180041d-0b7b-408e-a9c5-0cc75d05197f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:f0:07:bf:b4:9e:3c:5a:32:55:19:16:e1:
                    1a:96:93:df:47:b9:cb:48:ca:0b:86:86:b2:1e:07:
                    fe:32:45:92:b3:a9:6e:3c:27:37:38:f6:dc:6c:e0:
                    c6:23:74:e7:ae:33:91:af:96:57:67:26:9f:7b:1f:
                    9d:03:05:99:51:9c:cd:61:ba:90:40:b0:bb:a1:b3:
                    bf:4e:56:b7:2b:c3:27:a5:55:60:8d:91:7e:d2:3e:
                    25:4c:33:e9:e7:7b:33:52:7f:90:c3:0a:b9:b3:53:
                    d4:92:1c:56:b5:84:f2:bf:4d:a6:a5:10:50:59:9f:
                    02:ef:c2:4f:aa:6b:a2:7f:1f:29:55:2e:0e:5d:e9:
                    6f:d9:5e:a6:67:65:43:31:16:e9:2d:1e:22:8f:38:
                    97:76:05:ba:f5:8a:a9:92:36:93:2f:c4:ac:d8:2e:
                    6c:30:bf:e5:9e:35:77:63:f9:b4:22:3c:83:b2:91:
                    6d:ba:35:6c:68:f3:82:63:9c:d2:54:c8:eb:39:4f:
                    7c:90:de:38:aa:be:19:3e:af:14:fe:dd:60:6f:ac:
                    bb:8f:fe:ea:c5:a7:92:1e:6d:bb:18:79:19:4d:7a:
                    ff:a7:58:ae:b4:7b:9b:9f:ea:4d:f6:5b:a2:d2:c0:
                    5b:0b:03:c8:07:dc:ab:f3:82:fc:6f:00:56:68:d7:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:32:91:37:C2:90:07:A7:00:3E:75:23:AF:05:AA:FD:4E:0B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.85.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f0:5e:13:dc:ba:b4:53:37:90:0d:ae:0b:65:2a:c3:ac:78:
         87:fc:55:5a:98:47:e8:4c:58:ca:c9:81:82:6e:15:08:7b:5b:
         0c:9e:bf:02:b8:fd:d9:47:eb:68:92:20:1e:df:8d:79:05:96:
         1c:f7:03:4c:1b:21:ef:7e:7f:20:34:0a:b2:55:26:6e:f2:19:
         d2:69:6d:e1:e1:a2:9c:b4:21:64:a1:51:26:95:e7:ab:fe:be:
         98:94:17:92:36:60:2c:43:61:fb:08:7d:6e:3d:57:f7:76:8f:
         ff:a8:58:87:29:f0:0d:b0:9a:58:43:f3:d0:a4:39:16:ff:84:
         24:79:be:ee:4c:1b:39:00:eb:34:20:06:9a:bf:25:36:74:1c:
         d9:e1:a1:60:b4:be:7c:8a:a6:05:b4:bd:e8:c5:00:7f:89:89:
         1b:17:c5:46:3f:52:b7:5a:34:bb:db:38:f4:37:60:d0:27:3c:
         15:64:c3:75:22:8f:fa:c6:eb:9e:b6:14:77:ad:7f:09:01:87:
         0d:13:2e:4e:93:ae:3a:11:3e:d2:e3:ea:6d:9d:07:a2:9a:00:
         94:50:39:ae:87:0d:64:6e:c2:4d:56:9d:7f:1b:a6:7b:e3:98:
         80:ee:b4:65:f6:fa:e1:a3:62:0b:f7:46:28:12:a0:13:53:67:
         2c:54:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:18:29 2025 by rpki-client