Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
File:                     66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa (raw, json)
Hash identifier:          xl0uvZzLhOvRxknktsbbVso1DktFm8XatfNaq6D1/rI=
Subject key identifier:   EB:4D:A0:E2:9F:A9:A6:7E:4D:A9:BD:34:AD:3F:E2:6E:ED:F4:5E:7A
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F432858499294A43040E45C0906682A40
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     212238
IP address blocks:        209.198.10.0/24 maxlen: 24
                          209.198.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a4:30:40:e4:5c:09:06:68:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=c7415254-70db-49a7-9356-4fe0add94314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:13:77:dd:8a:2f:75:69:5c:55:82:a5:44:
                    dd:c7:83:46:da:dc:56:8a:11:b8:c0:ef:b0:f1:4f:
                    cd:eb:07:58:e6:3f:de:6f:cc:24:9d:9b:5b:a2:55:
                    14:3d:04:f1:6d:b2:4e:5d:48:eb:85:1b:8d:4c:db:
                    2f:80:c3:be:d0:df:a1:78:f6:96:67:3a:ed:b2:53:
                    52:3e:10:97:6b:72:fc:51:13:05:91:74:ac:5d:60:
                    07:32:9b:68:e4:b1:e1:0b:25:db:16:d0:51:49:8f:
                    de:90:d7:33:31:01:e3:02:1c:88:5e:a9:35:43:09:
                    3d:36:da:0b:da:b6:00:f3:89:a9:a3:f4:2a:de:fe:
                    9d:63:4d:1e:76:2d:71:4d:f0:d7:f7:96:d9:bf:3f:
                    73:76:59:ba:75:42:92:b3:17:53:e6:db:0c:ec:11:
                    a7:9b:ef:36:b0:60:7d:52:86:82:0f:1d:1b:4b:a6:
                    01:0c:50:45:31:8a:a0:f5:c4:13:55:a8:e5:02:c2:
                    e1:20:3a:73:91:25:af:24:80:b8:82:2c:72:0d:93:
                    d4:6b:52:8d:39:b2:40:2f:b4:bc:24:c3:3e:25:2b:
                    14:67:14:f8:58:8c:f5:99:27:6b:ec:e3:80:d8:50:
                    cb:51:dd:5a:d7:88:be:91:41:01:14:8e:fa:2e:01:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:A0:E2:9F:A9:A6:7E:4D:A9:BD:34:AD:3F:E2:6E:ED:F4:5E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8f:6e:bb:d3:e2:93:7b:de:17:b6:ec:30:a5:9a:54:83:be:
         c7:84:c9:61:95:d4:9d:bb:fd:3c:b6:16:ef:cb:0c:33:a2:35:
         eb:48:bc:a9:12:c9:9a:23:28:94:48:62:cf:c3:14:07:27:9f:
         f3:cb:8c:2b:3a:d4:5a:76:7e:3b:b2:7d:1f:67:89:f9:58:7d:
         81:dd:19:71:e8:7c:70:f3:a7:4c:8b:36:e1:fe:48:91:24:7a:
         69:c4:10:15:64:2d:07:4c:19:a1:23:c7:45:14:19:ea:eb:ed:
         24:7b:7b:15:dd:c5:79:a2:ac:d0:5f:81:6a:47:97:30:a7:c4:
         8e:39:ba:fd:8f:db:71:a6:7c:ac:46:8c:73:3e:46:49:45:3b:
         af:c9:e9:76:75:09:60:92:64:ac:61:bc:7d:28:29:f3:38:2c:
         67:01:da:49:73:a0:7a:9b:c1:f0:85:e5:79:34:fa:6a:8a:58:
         21:2c:49:83:9e:10:4c:e5:07:46:16:17:1c:63:f4:68:24:61:
         03:d8:31:be:1d:0e:ac:6f:ef:6f:b1:cb:86:fb:8d:f6:d2:48:
         17:f7:5e:1a:cc:94:91:39:ef:97:18:07:01:f5:28:30:a5:1e:
         6f:f3:07:58:8b:2e:e8:e7:ec:6e:3f:c9:b4:6b:44:ba:44:7a:
         bc:f3:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:13 2025 by rpki-client