Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
File:                     f99df0ee-55c6-30f2-9f70-4715143eb655.roa (raw, json)
Hash identifier:          tb9HrFrn1p3af2raa7Qz+x93ztNqXg9+Le16EPHhnGE=
Subject key identifier:   C8:4C:32:B7:A0:F3:88:F9:EA:2B:DE:3B:F7:8B:79:66:E9:38:22:6A
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584A14656D2E76EB8C03EAD61660
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     396905
IP address blocks:        192.82.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6d:2e:76:eb:8c:03:ea:d6:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=b3ceb565-dfc4-4dd7-bfca-77a6791a9b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:21:65:41:c6:48:e1:c0:36:cc:fc:fc:f2:
                    bb:cb:a3:72:91:43:07:69:0c:3f:d8:82:89:eb:e0:
                    90:0b:43:71:25:c1:b5:62:2d:0a:6f:17:ed:b7:37:
                    59:03:72:a3:41:e3:3c:68:06:81:75:24:88:69:0f:
                    1a:58:e0:8b:fe:11:92:0b:ff:97:60:c5:8e:cc:56:
                    1d:83:d3:fb:b1:22:ef:41:eb:a9:99:45:6e:e8:4e:
                    6e:0f:4d:60:a4:e7:64:01:75:af:47:78:ce:88:1b:
                    9c:a8:3d:86:a8:42:0e:59:d8:0b:8e:6f:dd:8c:7e:
                    3c:dd:e6:45:e2:6b:b9:04:4f:2c:08:40:fb:93:e5:
                    9f:33:fa:c7:c9:3b:0e:06:07:d1:93:34:98:c3:32:
                    6a:e7:e2:77:33:5d:14:a8:09:48:6d:57:83:24:33:
                    ca:ff:fa:43:38:44:03:9b:7a:10:2d:c6:e9:b4:ca:
                    7b:cd:17:b4:fe:5f:5a:a4:a0:76:f4:ca:fc:7c:86:
                    0f:df:6e:b1:de:cb:18:ad:f6:02:1c:c0:cb:76:bf:
                    a5:19:d1:c4:cb:f6:0e:77:3c:1d:fe:be:8b:23:9f:
                    f7:7b:4a:6f:ef:c6:1d:af:fd:89:57:e6:36:3c:94:
                    a7:ed:8a:9d:96:21:de:11:e4:76:c8:60:f1:17:66:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4C:32:B7:A0:F3:88:F9:EA:2B:DE:3B:F7:8B:79:66:E9:38:22:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:bb:05:88:d6:7f:65:2e:e6:1e:ad:e0:31:26:5d:f7:c8:
         fc:4a:72:f2:fb:73:a3:cf:36:b7:f6:d4:88:23:25:0e:95:a6:
         0a:6a:01:ef:f5:92:d2:1d:d0:0d:76:66:38:3a:0d:83:18:57:
         74:68:99:20:b3:5a:ac:ae:24:f6:a6:5d:07:91:6f:8c:a5:b9:
         04:6d:ef:98:75:6b:18:b8:6e:83:a3:10:c1:29:db:b7:47:6e:
         72:a9:9e:81:0a:00:2f:a4:10:c1:8d:a1:5b:77:dc:ae:b2:96:
         69:ec:42:b0:22:a5:dd:47:62:72:7b:40:67:d9:91:bb:09:45:
         38:68:ce:e0:b5:9a:e2:76:cc:ec:83:92:df:b8:08:fa:f3:a8:
         dc:dc:9d:9e:85:84:14:3a:b1:9a:8c:00:77:95:fe:ed:03:b0:
         9d:5c:a4:60:a6:63:ba:49:61:8d:b8:13:a5:96:60:19:7c:2c:
         0f:cd:9f:9e:03:73:19:8e:9d:32:ef:f5:1b:c2:24:dd:b3:20:
         23:af:ca:2f:d8:72:f1:23:c6:83:cc:22:e6:c5:d2:7c:4b:da:
         e0:b2:05:3d:d8:52:c4:93:71:f9:9b:be:db:c7:a9:d5:46:12:
         73:00:c8:2f:7a:86:48:23:4b:90:06:8c:32:8e:ac:23:6b:4f:
         af:b7:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:17 2025 by rpki-client