Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa
File:                     67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa (raw, json)
Hash identifier:          5+LoR6Zm+9jYl6xCHu4Jf7zKdpeKeQcKWBgarnUkJjU=
Subject key identifier:   91:E5:4D:58:A6:D5:ED:A2:9B:83:F7:27:C1:E5:F2:0C:61:2C:DB:A0
Certificate issuer:       /CN=c743b329-2385-4bb0-899d-c1639569faa3
Certificate serial:       010D0C9F43285849DF5A660B4F92895035DF0F00
Authority key identifier: 9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     399199
IP address blocks:        172.99.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:66:0b:4f:92:89:50:35:df:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c743b329-2385-4bb0-899d-c1639569faa3
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=bc6c37dc-df95-4661-94e9-393b55d500a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:c4:0c:14:37:d8:5e:01:50:3b:ee:36:60:
                    87:74:a7:85:e2:3a:45:5c:de:73:94:2b:0a:38:ce:
                    df:db:14:2f:23:c2:a2:08:07:fa:92:d1:76:20:c5:
                    fe:04:3f:7e:97:fc:77:3b:fd:76:a1:de:6f:4a:ca:
                    7b:85:9c:6c:0e:e2:d2:c1:44:6d:d7:75:b7:c6:84:
                    2b:e9:c0:27:e1:eb:99:9f:30:b4:92:70:a8:97:fe:
                    12:f1:46:fe:12:cc:6d:8f:2c:9c:33:ac:9b:99:da:
                    f6:15:c1:6f:aa:1d:b0:2e:d1:7a:c5:b7:04:65:af:
                    02:c6:e3:99:71:63:4c:99:8c:2a:2b:c0:1a:24:c9:
                    a3:68:dd:8f:17:9b:d1:52:f8:2d:68:5d:38:a0:15:
                    5a:14:7d:df:5a:97:a0:30:c1:f6:09:c6:a1:43:fe:
                    b4:65:35:d3:4d:ef:97:a3:e7:4a:e9:57:e3:df:81:
                    93:28:96:8b:c5:60:28:d8:69:a7:6a:a2:e8:57:14:
                    3f:7c:22:d9:f9:e9:ba:76:ca:bd:f5:fb:da:43:92:
                    24:98:7f:c4:0b:19:04:a5:25:bf:dc:04:46:09:a3:
                    22:82:8f:9f:c3:80:be:d7:90:8e:f6:e5:d5:a5:84:
                    db:c3:27:75:4a:49:e8:69:e4:22:d5:a7:2b:bb:b4:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E5:4D:58:A6:D5:ED:A2:9B:83:F7:27:C1:E5:F2:0C:61:2C:DB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/67c811c4-c2ac-3048-91a0-e33dc9f4049e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.crl

            X509v3 Authority Key Identifier:
                keyid:9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2f:55:dc:cf:95:dc:8f:be:ae:56:ae:5d:a3:f9:03:ff:0f:
         11:c7:ad:eb:e5:04:97:c2:44:77:13:f5:09:98:11:18:10:3c:
         3a:79:fc:c7:19:8d:f4:2b:c4:b5:83:3d:5b:df:95:6a:f5:45:
         13:27:ed:2a:43:29:74:a6:5c:dd:f6:0c:a6:a8:d9:38:c8:fa:
         95:80:8e:6a:e8:94:f5:46:1c:23:15:de:4c:fa:fd:13:dd:48:
         c3:9a:aa:13:19:c1:19:09:b5:17:29:e9:4b:60:9e:26:29:9c:
         54:f4:5c:bb:a0:ca:1d:c0:92:1a:5e:62:37:a4:1b:1e:68:41:
         39:15:20:da:0c:ff:c8:ae:96:24:ac:86:0d:47:e6:01:14:a5:
         32:1d:1e:bb:fa:88:1e:7e:ef:94:94:d9:67:82:3a:d1:4e:04:
         41:d8:72:90:f9:54:41:cd:19:91:88:35:12:90:b1:37:3e:2d:
         53:0e:d9:ce:f3:dc:9a:a8:85:4c:84:40:e3:a1:f5:80:b7:97:
         1e:cc:29:f0:75:32:ed:88:87:dc:fe:c1:e0:8b:7e:33:b1:d1:
         b7:d4:71:f7:11:23:ac:ea:da:24:29:d5:ce:95:1c:5a:e0:2f:
         1a:31:d1:79:1d:33:8f:41:d9:69:53:c3:53:af:07:cd:e5:51:
         f7:62:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:13 2025 by rpki-client