Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa
File:                     6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa (raw, json)
Hash identifier:          do4GS9SIFZCMg3FamCnlWkWZAhby7i55BB9qQjVZ4T0=
Subject key identifier:   A4:69:FE:21:51:49:9F:76:97:DA:4B:CC:CD:A0:2D:73:EE:C2:DC:82
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F432858499AF483386C6B70D367528E1C
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     63298
IP address blocks:        199.45.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:83:38:6c:6b:70:d3:67:52:8e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=6d8ca74d-5dc6-4239-919a-706a4dcf09e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:60:34:ba:8f:8b:f4:e9:c6:b8:80:d2:52:
                    3c:4a:bc:8c:63:61:19:2e:7b:e2:04:76:37:26:40:
                    ed:36:5b:b3:18:ce:e6:0c:fc:92:6a:42:e3:80:fb:
                    c4:ea:13:30:58:71:5d:9a:15:8a:11:47:39:05:f7:
                    af:b4:90:5a:b6:16:78:85:20:58:98:6a:3d:58:3e:
                    75:4e:ca:47:29:cc:35:4f:42:f0:5c:c8:ac:c8:7b:
                    1f:e9:b4:78:88:9a:69:87:a5:c1:87:e5:73:ac:61:
                    71:00:b5:85:61:6f:8c:09:eb:41:96:3d:de:38:85:
                    06:2b:b4:a5:65:28:6c:23:c3:c1:68:0a:ff:1a:ec:
                    49:7e:e3:a9:62:a5:18:a2:f5:50:ca:49:9b:a0:1e:
                    ec:35:89:62:a9:21:a7:40:6c:61:d8:28:73:c2:2b:
                    f5:77:98:74:90:9b:bb:48:a1:42:6e:d6:f4:46:75:
                    47:1e:10:45:6a:7e:54:aa:6c:d1:cb:f0:15:1b:3e:
                    e9:17:0b:68:1f:f2:66:c5:c4:c5:9f:8e:de:90:7f:
                    1a:ad:e5:21:3b:7b:f3:eb:e6:ba:9d:f6:3d:0c:31:
                    d8:8e:c1:ec:ea:e2:ba:de:1c:2d:c3:c9:59:7c:c5:
                    de:ae:ba:41:56:7e:cf:74:94:ae:e8:b1:74:24:24:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:FE:21:51:49:9F:76:97:DA:4B:CC:CD:A0:2D:73:EE:C2:DC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/6f1a8f76-091f-31a0-9a9b-75bdec478d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:04:cd:04:13:64:bb:b5:36:b9:d8:71:8c:30:ae:80:c7:
         f0:54:ad:f7:23:7e:e4:b5:d1:35:6a:e9:80:d0:af:37:36:d3:
         09:80:da:60:5a:a3:65:34:21:c1:ad:1b:41:c5:d5:5f:d8:37:
         3a:5f:b5:26:fb:56:8f:b4:a8:50:63:48:87:95:65:49:c9:f4:
         e7:8d:be:49:ef:20:e2:ac:59:b1:29:5b:d6:82:01:a2:b1:d4:
         fe:52:44:50:a5:80:6e:8d:36:2c:49:20:13:14:60:ef:25:b3:
         69:b5:31:cf:36:cc:15:8f:54:94:f3:26:d3:63:bb:e5:2b:ca:
         f1:63:4a:6c:de:1e:93:c6:45:6b:54:89:3a:99:dc:c5:5e:bf:
         4b:82:83:91:6e:02:59:3f:f1:69:5a:94:73:02:c1:5e:3c:9a:
         cf:0a:20:74:9d:de:2b:36:08:0f:11:b7:45:96:52:e0:d8:92:
         89:b4:8b:1b:3f:f5:62:1c:25:eb:41:18:20:a9:34:b0:ec:51:
         3a:3b:3e:fb:47:8c:4c:96:a0:fa:13:2a:d3:ca:c4:c8:1c:0f:
         a2:f6:bf:28:0f:e4:bd:64:4b:f0:95:c1:60:23:c2:02:36:d8:
         4f:72:1e:52:9f:14:d4:ab:e0:dc:63:4c:e2:cc:00:e0:ee:64:
         7d:ae:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:37:29 2025 by rpki-client