Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
File:                     36273f28-a723-33e1-a389-9416819cddb6.roa (raw, json)
Hash identifier:          abR3A28NqRzKYFLhZJdea8fFsA+3msDbaShCJzO+LGw=
Subject key identifier:   D5:24:BB:7F:9E:04:FD:DD:1B:A7:75:90:67:1A:12:7A:C9:57:AE:FD
Certificate issuer:       /CN=cea06048-7bc3-4b65-8443-4c600b73bc11
Certificate serial:       010D0C9F4328584A119AA8606B7F25999965B0C0
Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     21976
IP address blocks:        159.91.0.0/16 maxlen: 16
                          192.76.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:a8:60:6b:7f:25:99:99:65:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=b4ce5205-4cf5-4698-ac2f-970beef14ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:79:d2:c2:07:51:bd:11:1c:e6:56:ae:38:
                    32:40:3b:e4:1d:94:5f:ae:19:d6:b7:52:57:ba:8a:
                    cc:85:08:d1:31:a4:c0:62:6d:cd:56:63:89:7f:39:
                    06:8e:87:f7:7e:14:ee:42:a6:41:a4:72:c0:a7:39:
                    87:2a:a8:30:95:e7:8a:7a:ac:a2:b7:d2:bf:92:02:
                    b7:69:d3:99:8d:d6:bc:22:c5:df:ab:1c:4c:a2:0d:
                    86:1c:f8:9c:bd:79:ee:27:68:d0:a2:80:6a:fa:5b:
                    52:0f:0f:9d:fb:c2:01:dc:45:52:d3:83:78:59:85:
                    1e:98:20:ae:f7:79:85:8d:65:d4:b0:d1:35:a3:b0:
                    cd:e0:6f:ab:d5:45:ec:95:d1:29:b8:32:ac:a3:34:
                    54:b6:f6:18:a0:e0:c8:2d:98:7c:cb:84:36:07:17:
                    2f:68:e1:06:55:51:cb:fd:54:91:3e:18:68:36:80:
                    b3:66:24:13:1a:b7:04:a4:9b:5f:5e:a8:4c:da:a2:
                    31:f1:b2:28:82:07:48:b4:78:dc:14:6d:96:2d:da:
                    e6:bd:1c:29:b8:8d:94:37:1d:8f:99:a9:53:c0:1b:
                    86:07:c9:92:28:f1:69:33:b2:9a:be:61:37:e7:22:
                    30:ee:43:a1:a5:53:4c:00:3c:9e:28:89:e6:72:a0:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:BB:7F:9E:04:FD:DD:1B:A7:75:90:67:1A:12:7A:C9:57:AE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl

            X509v3 Authority Key Identifier:
                keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.91.0.0/16
                  192.76.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:0e:71:df:89:52:35:a7:79:07:05:60:d6:9d:c0:dd:cd:
         d5:2b:ea:86:a3:57:14:1e:8e:0e:6e:ba:68:09:12:a2:0c:11:
         23:aa:62:5b:65:12:ef:eb:e5:c2:d2:25:2f:f1:8e:13:f6:c8:
         f8:b8:f3:12:c3:20:a0:e5:b2:d6:95:86:e0:ee:1c:5e:7c:2c:
         7c:b5:71:6a:70:69:5d:aa:bc:d6:ea:5e:a3:ea:3a:9d:8e:da:
         9d:c6:5d:e7:e4:0e:5f:43:a9:87:aa:ed:e2:3d:59:70:52:51:
         31:85:ee:2b:e8:e5:86:e7:cd:1a:3a:da:1e:48:a5:c4:80:cf:
         bc:28:16:b3:ad:9d:4b:33:2e:4e:58:6d:91:df:b6:74:2e:89:
         29:f4:d1:59:0d:46:0a:7d:1b:9b:0d:88:90:10:93:af:38:6e:
         7e:b8:41:5b:15:81:52:9d:bc:43:3e:d5:26:7c:69:ba:60:f9:
         93:90:04:d3:21:25:c3:7d:4a:9e:6f:3d:ca:5a:c5:cc:68:12:
         fc:d7:eb:fe:44:d0:f2:a6:14:4d:d1:9d:75:8c:f5:7d:31:50:
         b3:47:96:21:32:ab:0b:b1:11:28:19:e0:0a:c3:e1:b2:26:42:
         07:b7:52:c2:66:5c:1f:63:8e:69:2a:a3:c9:c7:ab:44:fe:e7:
         0f:81:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:54:34 2025 by rpki-client