Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
File:                     fbb388ff-402d-371a-b111-12939dcd0b26.roa (raw, json)
Hash identifier:          plBAMSrxGUQmjxVp0u+10lk5M280sNcsX/fzEfEiipM=
Subject key identifier:   53:ED:FD:1F:F5:13:0E:7F:D5:13:5C:C5:38:01:4F:F2:02:3F:09:96
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F43285849D42FB676041EC8161927AA58
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     19201
IP address blocks:        143.223.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b6:76:04:1e:c8:16:19:27:aa:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=36e42a51-2157-4ce4-afff-2d263a4dc7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:c3:dc:89:cd:55:33:66:dc:2d:5b:af:5e:
                    43:50:a6:ea:b1:16:8a:7e:7d:ea:0b:d6:36:0b:96:
                    93:00:bc:52:b9:51:44:1a:cf:c6:f1:0c:8c:01:cf:
                    1c:ad:1e:21:f5:d0:f9:d7:d5:54:06:a2:85:78:03:
                    b4:ea:24:49:c9:82:ad:e0:e8:f3:a5:c3:db:58:5d:
                    f1:ad:47:e8:90:5a:4a:43:7f:03:23:4f:82:70:90:
                    24:95:b8:0c:dc:95:fa:a3:60:6d:1b:57:22:59:50:
                    fa:94:90:5c:37:99:e3:8b:70:dc:5a:02:98:2a:ad:
                    ac:b5:13:0a:cf:cb:e1:56:d3:b4:bb:11:08:a5:41:
                    5a:28:53:d2:0c:6b:41:e8:28:ac:31:8a:3f:d3:1f:
                    01:01:6c:f5:c3:51:71:e2:f1:9f:14:d9:67:fb:52:
                    03:18:38:87:9a:d9:f6:3d:dc:d1:0e:02:8c:86:c4:
                    08:90:a2:28:1a:78:db:86:f4:fa:41:cb:3a:d8:db:
                    37:0e:37:7f:d6:63:68:1c:ec:44:d0:2d:62:8e:8e:
                    b1:40:f2:6e:3b:e1:80:9c:11:88:44:e7:e5:4b:8c:
                    59:2c:fa:22:fa:86:50:ad:46:0d:07:54:d2:3f:c7:
                    11:65:06:5f:35:44:c0:36:3d:c5:0a:89:54:59:2e:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:FD:1F:F5:13:0E:7F:D5:13:5C:C5:38:01:4F:F2:02:3F:09:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:af:3f:de:d8:d4:d0:01:42:4f:86:a6:a3:3c:9e:86:be:f6:
         02:70:55:9a:77:8f:01:75:3b:6c:06:8f:af:5e:5b:18:d9:10:
         37:4a:8c:70:3b:47:db:e1:b3:3a:4e:fb:69:17:3d:7d:da:8a:
         92:c8:4c:c8:5c:ef:03:0e:ac:50:b8:b4:8e:ff:dc:7f:36:38:
         b8:77:6f:30:b8:a1:cf:e2:75:6d:aa:e5:a2:81:ac:19:1f:a4:
         bf:44:f1:5e:c1:50:58:01:0a:53:c9:a1:36:36:f5:c4:11:c7:
         71:25:6b:62:d8:7f:d7:e9:a0:91:0a:5d:da:bf:93:8e:a3:5c:
         da:99:4f:8d:07:4f:2d:a2:2c:58:1e:ad:48:4b:05:ec:b3:19:
         28:09:4e:9e:6c:33:1a:7c:f1:e7:41:61:0d:e8:b6:07:a6:0c:
         dd:73:74:64:37:95:e9:15:0c:00:f0:89:21:cb:6a:47:e2:a9:
         c9:0e:bb:72:8b:5f:10:a6:44:76:ac:b8:9c:9b:d4:68:2a:91:
         db:c5:5b:aa:48:29:e0:22:42:b0:ea:ad:53:76:49:4b:b3:c2:
         bc:1a:21:36:a2:d2:be:c5:16:e5:cf:0b:2a:09:38:8f:12:e2:
         24:9a:81:19:0b:1b:63:b5:e9:3c:a0:29:78:49:f4:5b:0b:30:
         47:0a:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:02:40 2025 by rpki-client