Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa
File:                     d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa (raw, json)
Hash identifier:          dvHfN0R3pS5f/IAL9pJbRaRb55eRpm6Mgk9Hl2NbNZo=
Subject key identifier:   2B:DA:3A:80:05:6F:E2:E4:E3:EB:AA:06:F4:07:8C:7B:BD:BE:DE:2B
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285849D4509F267A5EF57F14D419C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa
Signing time:             Mon 12 May 2025 14:07:38 +0000
ROA not before:           Mon 12 May 2025 14:07:38 +0000
ROA not after:            Sun 10 Aug 2025 14:07:38 +0000
asID:                     3477
IP address blocks:        199.242.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:50:9f:26:7a:5e:f5:7f:14:d4:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May 12 14:07:38 2025 GMT
            Not After : Aug 10 14:07:38 2025 GMT
        Subject: CN=0382403e-005d-474f-bfc6-aa468a785c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:31:c8:8e:cc:95:01:b9:3e:03:24:4f:b3:
                    5e:fb:20:53:72:a7:b0:18:02:5d:4d:f7:2b:fd:0a:
                    5d:38:d2:71:ff:1d:c3:be:66:d3:62:d8:23:b6:42:
                    2a:59:54:28:47:59:15:62:ee:a7:96:88:20:0f:b1:
                    5c:8b:3d:31:70:bb:7f:1e:e9:b5:ed:0e:3a:1a:16:
                    ce:27:be:f9:a3:63:f9:b4:c1:9f:89:41:d0:63:9b:
                    40:85:af:cc:f6:68:c4:38:f1:48:a5:af:00:ac:4f:
                    bd:40:46:e2:52:87:b6:af:67:e1:64:96:eb:34:7c:
                    8b:99:e5:54:73:e9:0d:6e:2f:88:12:97:f2:43:b9:
                    53:66:55:b2:b5:cd:84:66:61:d1:34:ec:b7:4f:ae:
                    d8:e0:34:bd:51:00:c2:db:a3:43:47:63:95:c5:81:
                    d2:00:59:ae:44:bb:bf:57:a7:da:20:55:dd:0e:40:
                    de:fa:16:af:fb:bd:9d:79:f9:1e:e2:13:a6:a8:ae:
                    c3:d6:22:f6:03:88:a3:be:a2:c6:12:3a:5a:e0:24:
                    98:cb:59:58:fd:9a:47:01:e7:ad:43:79:8d:b1:01:
                    4d:54:98:d4:f6:66:1a:d0:16:b2:cf:51:87:2f:25:
                    70:4d:e4:ff:71:25:ef:3f:bb:0d:86:ea:ab:ef:40:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:3A:80:05:6F:E2:E4:E3:EB:AA:06:F4:07:8C:7B:BD:BE:DE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:9a:53:2d:84:31:20:6f:7b:7c:93:5f:eb:9b:5d:53:33:
         70:28:ed:e7:62:83:cd:49:76:71:c5:b3:29:ec:d4:52:39:5f:
         06:7d:66:a3:d7:fa:90:bc:19:fc:6f:5e:9d:cf:06:34:53:09:
         66:45:e8:b9:dc:15:47:ce:34:cb:4b:44:d6:81:01:ae:47:b9:
         41:36:5f:a8:fd:48:b3:2b:e2:72:95:2f:a9:36:d3:ff:9b:c4:
         30:af:e2:77:de:3d:54:29:4e:91:74:7b:b3:6c:26:be:20:77:
         0e:c6:e4:9c:4c:06:58:b0:b9:c4:57:31:90:1f:bd:9c:0a:03:
         33:d3:65:19:26:70:b0:fe:a6:ac:9c:08:03:35:b9:bb:29:18:
         3c:c6:4f:e9:db:e2:c9:98:92:b6:61:65:ec:f8:17:af:8e:25:
         fe:57:23:27:98:4e:a9:98:66:9c:b2:68:28:59:1b:ba:6e:22:
         b4:82:17:e6:91:dd:f8:e2:a9:06:ee:5e:1e:2f:b1:a1:09:c4:
         13:7b:1a:08:a9:a7:a1:f8:5e:89:01:d2:10:46:7c:a6:9a:ad:
         75:5d:2c:b9:1b:42:e8:05:33:ae:58:bb:67:fe:bd:f3:05:8f:
         5b:76:e1:57:1a:25:c5:d2:cd:ef:6d:02:37:07:ff:32:d1:b1:
         ce:6e:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:32:41 2025 by rpki-client