Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/47b0596f-1ca8-3229-9d20-3ba4a7f487b8.roa
File:                     47b0596f-1ca8-3229-9d20-3ba4a7f487b8.roa (raw, json)
Hash identifier:          pcV3tcrU3xQG9qxIWtL80jp9yvkhweI4bYzDOffKsuI=
Subject key identifier:   75:A2:69:A8:4E:A7:4F:17:3D:A0:F2:BD:DA:A1:EA:74:9F:40:1A:34
Certificate issuer:       /CN=f419c5a1-485e-417a-be5b-733aafaab77b
Certificate serial:       010D0C9F43285849E654F1379E37888BFA16D800
Authority key identifier: 09:60:C2:D7:B7:F9:C9:98:ED:77:A4:F0:F6:52:A5:03:CE:4F:C8:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/47b0596f-1ca8-3229-9d20-3ba4a7f487b8.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     64977
IP address blocks:        199.245.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/f419c5a1-485e-417a-be5b-733aafaab77b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/f419c5a1-485e-417a-be5b-733aafaab77b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f1:37:9e:37:88:8b:fa:16:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f419c5a1-485e-417a-be5b-733aafaab77b
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=28df2a88-2752-4822-9d0e-4427ad039a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:c5:67:23:59:be:e1:9e:db:d2:e1:c0:f4:
                    7f:4c:60:5b:7f:de:f8:ca:61:5c:56:f0:da:dd:d0:
                    ad:59:1e:14:a7:b4:00:e1:bd:1e:68:1f:8e:a3:65:
                    52:4c:95:d7:14:32:08:7c:eb:25:08:a1:93:2a:5e:
                    9e:fc:9d:ba:19:68:11:6d:18:c1:94:25:fd:de:16:
                    cb:6b:d5:a3:05:4f:2f:a6:32:12:00:26:c0:f3:98:
                    d1:28:d1:d9:e7:2c:ac:3c:74:aa:e4:df:78:04:56:
                    ab:5c:9c:11:ab:40:84:c4:9c:51:53:c0:3b:06:c8:
                    f1:45:1d:36:08:03:16:9b:7a:86:46:be:5e:5c:a1:
                    48:c8:9a:0f:8f:11:ca:80:80:40:e3:75:d0:ee:2f:
                    14:c9:7b:02:24:9c:73:6f:54:7e:95:70:b4:03:f4:
                    a5:99:25:20:a2:d1:bc:e6:9a:66:2d:69:92:ca:3e:
                    11:be:63:48:a7:58:a8:f3:cd:81:e8:fa:ff:82:bf:
                    99:72:f3:fd:6f:04:ab:18:b9:ee:4f:f9:31:0c:99:
                    df:3d:8c:4c:61:ee:e3:98:f4:d8:5f:51:2c:29:56:
                    d4:75:44:19:e8:ae:36:44:ef:97:ff:70:48:63:e2:
                    8c:a2:fc:5b:58:af:a7:48:9a:0c:37:fe:3b:90:ec:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A2:69:A8:4E:A7:4F:17:3D:A0:F2:BD:DA:A1:EA:74:9F:40:1A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/47b0596f-1ca8-3229-9d20-3ba4a7f487b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b/f419c5a1-485e-417a-be5b-733aafaab77b.crl

            X509v3 Authority Key Identifier:
                keyid:09:60:C2:D7:B7:F9:C9:98:ED:77:A4:F0:F6:52:A5:03:CE:4F:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f419c5a1-485e-417a-be5b-733aafaab77b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:94:3d:a9:ec:26:55:13:49:c4:13:24:93:31:a1:bb:2b:
         43:4d:c9:7c:89:a2:1b:d2:e4:f5:dd:34:c7:75:b5:18:89:85:
         59:e4:af:31:04:0f:50:8c:01:94:b5:5b:e0:47:7a:f4:58:60:
         e6:23:3e:06:b8:2c:49:e3:6f:4f:29:39:8b:8d:21:f1:42:48:
         15:5b:db:1c:3c:05:4e:ca:a2:75:10:59:2a:75:06:b7:6a:17:
         2a:2a:f1:a5:de:96:c8:ad:46:0c:12:5e:22:12:6d:e2:7f:49:
         24:ef:c4:54:f4:6a:ff:dc:ee:ec:2b:15:01:92:d7:d1:82:26:
         03:40:b6:e6:41:c0:bf:b6:3a:5f:53:30:86:4a:da:b0:01:12:
         5e:70:bb:f7:82:96:a8:74:3c:2a:94:35:55:36:1c:ad:d0:0d:
         34:d5:76:78:f4:67:d2:31:b3:e6:22:7f:74:ba:ab:95:5d:f7:
         1d:23:fe:62:ab:84:9b:d5:8c:94:75:e3:b4:7d:6d:ed:b1:60:
         a6:b0:79:87:ac:78:7f:18:a4:9f:e1:55:04:c1:19:21:dc:bc:
         9d:c4:32:7d:d8:54:ca:14:06:5d:3b:ed:62:c7:f7:65:70:fe:
         78:57:51:29:cc:37:04:92:1d:5c:e8:38:27:58:03:67:41:26:
         2a:bf:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:40:07 2025 by rpki-client