Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
File:                     f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json)
Hash identifier:          XO4vmAucjQgwBGsikaepAXjtu0EBWyVS6IgKkeXtDhU=
Subject key identifier:   57:8F:09:80:38:0B:43:5C:DC:3B:EB:98:81:F5:96:E1:AA:47:60:80
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F43285849D42FA8DE4969D09F2F263880
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     32098
IP address blocks:        199.19.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a8:de:49:69:d0:9f:2f:26:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f4503a0e-1897-429e-9b5f-6a9cd0b49846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:af:57:5f:e8:a8:c9:92:68:d1:e8:4a:f4:
                    c0:05:b4:8e:0e:ec:a8:1f:f7:4d:05:ef:03:30:c2:
                    9d:8d:67:b9:57:be:d0:16:43:85:a5:ca:1d:98:27:
                    38:87:4e:4a:8c:47:62:3c:e2:3e:10:9c:0d:28:5e:
                    84:d3:72:c3:0c:83:d7:c8:2a:92:00:42:8f:f9:1a:
                    86:8d:c9:16:f0:f3:0c:2d:4e:60:fd:1f:4a:3a:01:
                    60:9c:e2:3e:af:2b:40:a7:6f:e0:52:4e:57:72:90:
                    df:03:66:d8:1a:6e:22:e0:2e:07:9b:39:15:12:48:
                    5f:a3:72:8d:19:05:98:b6:ab:76:e0:19:ee:78:55:
                    5f:72:37:3b:89:8b:e3:e9:7e:90:54:47:fc:d1:27:
                    f0:54:79:0c:10:5a:ec:d4:b6:3e:69:87:ec:da:73:
                    a7:a0:5f:8f:a5:63:bf:6b:00:c2:b5:47:33:16:8a:
                    40:cf:34:26:69:84:02:c5:6a:07:09:b4:ea:2c:c7:
                    ff:68:d5:12:48:dc:b3:41:a5:ae:4d:71:3f:36:a5:
                    80:1a:27:4f:7f:ee:d9:62:9c:9b:97:11:ac:26:f6:
                    49:08:52:a5:52:7e:11:e0:88:89:1b:04:e1:fc:7f:
                    65:c1:d3:ee:11:49:d0:95:3d:ea:dd:98:c2:ee:c3:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8F:09:80:38:0B:43:5C:DC:3B:EB:98:81:F5:96:E1:AA:47:60:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:37:ff:70:a7:4c:c5:ac:c8:b6:2c:d1:e4:4f:49:77:7c:32:
         27:ed:b3:43:52:f5:aa:0b:b4:7a:65:fe:58:74:5d:79:33:05:
         a9:0c:67:d0:ec:ba:7b:39:c9:cd:a0:40:16:6f:e3:92:7c:de:
         dd:4e:b3:c7:84:a1:17:bd:60:a5:69:03:cb:29:36:0c:81:0f:
         20:ca:7e:d7:e0:40:1f:09:be:05:e6:33:aa:93:3b:2f:44:8e:
         e6:71:b1:f4:24:c5:95:bc:df:0b:03:f0:29:13:6c:49:83:ad:
         83:b3:74:76:7c:32:d9:f7:ec:f9:b8:f3:4e:6b:be:ab:e9:1b:
         38:d9:89:76:58:bc:b0:25:bc:fc:45:0e:ae:1b:07:79:85:95:
         94:f8:58:a2:4b:0b:d3:86:28:22:ea:6e:53:ce:fa:ac:4c:4c:
         77:b2:2e:38:76:69:e3:b7:4e:7b:81:39:5b:74:49:6f:80:a7:
         d2:8a:cc:a9:8f:46:2c:51:eb:70:d3:65:ee:17:06:a7:6a:1e:
         78:bd:c7:02:e9:b9:ad:f3:84:a1:ea:dd:c6:e7:bb:70:d6:da:
         8a:a4:3a:4a:76:02:27:00:9f:08:b5:cc:8c:e8:70:82:f4:77:
         69:19:ab:8f:72:a6:37:a8:47:22:80:c3:db:7c:04:29:62:4d:
         44:d8:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:13:39 2025 by rpki-client