Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa
File:                     445a9e00-5a07-31da-8c8a-9ca8970ca526.roa (raw, json)
Hash identifier:          PvfTaXNzN/bp+Xs0Hodud3zuea7PejJUWZHf6buoljY=
Subject key identifier:   FA:C7:38:F0:EA:DA:8C:C4:58:47:F8:66:90:8F:E8:17:2D:E4:58:DD
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584A1E2AA57744546068AAFD5AC0
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     53535
IP address blocks:        199.253.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a5:77:44:54:60:68:aa:fd:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=66352531-9660-467a-bd95-3a35a0829a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:30:43:8c:0a:56:d8:06:8b:42:b9:56:63:
                    cf:ee:81:22:e6:9f:89:ea:c0:92:35:38:e5:43:af:
                    0c:74:a6:e6:f4:4f:21:4e:34:05:5e:a3:d9:4e:d7:
                    cb:a7:d6:64:14:b6:93:ee:83:c1:9f:bb:7f:f0:5c:
                    39:89:f8:9e:a9:4c:9d:ae:84:e7:a4:04:dc:05:81:
                    35:7d:5f:4c:3f:fb:da:8d:1c:10:b8:8d:9c:ec:bb:
                    02:56:07:a9:ee:1a:6c:86:9d:a8:97:96:f5:e6:a6:
                    7d:1d:a3:fb:12:6c:28:c3:06:3f:bb:98:b6:d5:71:
                    f0:89:31:ab:f7:d0:86:43:1f:41:13:77:7a:13:6a:
                    b6:e6:9d:d4:b5:0e:20:09:c4:a3:27:b3:00:d3:2b:
                    74:4c:b3:2b:60:ef:42:f9:33:db:c0:4d:d0:08:cd:
                    4b:e8:ee:55:ed:2e:4f:22:7d:d6:a8:7b:ec:cb:69:
                    f8:df:dc:6d:ab:24:79:2e:19:f2:27:f6:e9:18:fb:
                    c6:b0:56:1b:1d:29:03:23:78:28:bb:de:66:6c:c9:
                    fc:5d:a6:56:2c:73:73:09:51:6b:4b:e8:7b:e9:c0:
                    f6:d1:b9:47:76:ec:76:8a:8b:9e:e7:8b:a3:03:95:
                    44:54:ad:ff:be:e8:f5:77:b3:6d:f5:6d:2c:28:7d:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C7:38:F0:EA:DA:8C:C4:58:47:F8:66:90:8F:E8:17:2D:E4:58:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/445a9e00-5a07-31da-8c8a-9ca8970ca526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:1a:5a:74:b1:0c:fb:30:a1:74:2d:b6:5c:63:52:e3:d1:
         bf:c4:b8:8f:47:fb:a4:b7:b3:9e:e4:2b:63:00:e3:15:8a:94:
         79:c5:41:60:9e:48:fe:c9:23:1f:19:1b:c5:3b:3e:0b:a7:1f:
         32:6d:59:2c:6b:21:97:8e:18:23:ad:b9:b3:84:fd:fd:ac:d8:
         c1:a7:f2:b5:3c:0b:df:bc:0f:6a:4f:b3:85:98:9b:12:41:ad:
         de:f3:03:3c:d7:a0:77:34:4a:32:46:cb:98:6d:89:d9:ca:d5:
         6c:13:ee:e9:52:5f:78:9c:22:f8:6e:39:a2:fe:46:e6:d1:dc:
         99:db:58:87:1e:3c:bd:e8:80:ad:ff:b8:ac:4d:6f:d1:fd:dc:
         3f:00:0a:71:16:29:91:1e:01:44:39:d1:f7:4a:ac:95:23:4c:
         6e:8c:55:12:e5:39:92:49:09:85:36:21:c7:cd:74:9f:ef:0e:
         b1:db:1b:3e:b9:01:a7:84:d5:a0:fc:d1:e4:c7:69:c3:0e:82:
         b0:83:d3:a7:fe:62:60:cf:b6:6d:61:07:ce:c4:81:14:17:59:
         2e:ff:09:7a:34:8c:d7:9f:c8:cb:e2:b0:bd:d6:8e:39:b9:ba:
         eb:55:62:d5:ad:54:4c:88:f4:93:73:94:b7:0f:eb:63:8f:65:
         8a:16:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:21:08 2025 by rpki-client