Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa
File:                     cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa (raw, json)
Hash identifier:          Dthr3yUTlpuSTeMup6RuhjsKDCP+VimIJg+wz0YxD9M=
Subject key identifier:   17:21:B1:1A:81:60:DD:9B:40:96:2A:F8:9A:82:69:7A:79:8B:CE:B2
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584A29556B17CE9B30CBB8D78880
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     26196
IP address blocks:        199.47.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6b:17:ce:9b:30:cb:b8:d7:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=f83a8a8f-5fac-4c1b-9ee6-dbbe8a642b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:00:26:5e:6f:48:ff:23:c2:a2:8c:f5:7b:
                    99:59:03:d5:16:1e:f0:5e:93:d7:61:46:3a:40:b3:
                    71:94:41:98:c5:df:67:21:58:14:9e:65:16:2a:b2:
                    82:70:23:94:5f:bd:3c:e8:b1:be:b1:7d:96:39:7e:
                    e8:ba:4a:97:0d:e0:07:13:f2:a7:9d:02:d0:78:55:
                    e8:dc:51:34:b9:da:87:ca:82:6d:e5:13:26:41:4a:
                    ca:25:5f:a0:a0:31:26:5c:46:23:b6:dc:d5:80:79:
                    1e:5e:1f:3e:7e:5b:a8:fd:32:30:31:19:c0:69:39:
                    8d:ec:bf:1a:af:f7:37:0e:52:91:4c:c4:f0:8b:61:
                    36:48:a7:33:ff:5e:5c:01:dd:5a:06:0c:79:d4:34:
                    cb:73:ac:b0:e4:bf:be:51:4e:af:98:51:d1:d3:9d:
                    b7:de:d2:fa:0c:02:eb:02:20:dc:f6:6b:79:be:27:
                    ce:d7:06:b1:a4:ca:bd:a7:f2:0b:f0:10:d1:5c:05:
                    f9:34:fe:92:93:1a:d6:3c:d6:d4:c3:d3:e0:d5:a6:
                    d7:7b:7f:47:5d:1f:3d:c0:89:09:cb:cf:9e:c1:25:
                    b8:04:d4:f7:04:73:f7:7b:e9:05:2f:ca:79:b0:7a:
                    1f:cd:57:f5:a4:ae:50:1c:6c:2a:32:80:9c:ac:e0:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:21:B1:1A:81:60:DD:9B:40:96:2A:F8:9A:82:69:7A:79:8B:CE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:f2:a4:c0:97:da:5a:2a:50:7e:93:be:19:72:bf:c9:6e:
         f2:e2:f5:eb:6c:1c:78:0f:65:43:d4:2f:8f:cd:2b:74:ba:dc:
         46:58:da:aa:f3:ef:d9:c6:2d:e0:91:2e:0c:ae:23:2a:a6:08:
         99:dc:40:56:a4:75:cd:f1:5c:15:6d:c9:e5:cc:9d:a0:5b:44:
         ed:14:ed:e7:38:87:31:f5:e9:52:b0:2f:2d:29:ce:b2:3a:e2:
         d5:91:37:15:07:6f:9c:25:eb:8f:00:71:db:b6:97:92:24:27:
         6b:a3:dd:2b:26:3c:3a:fa:77:be:c2:c8:32:73:b0:db:aa:10:
         d7:5f:25:63:ff:50:68:96:d9:22:da:41:6d:1b:d5:ef:8e:6d:
         4e:e1:18:9d:ed:48:04:2b:a5:62:97:32:92:08:22:fe:7a:82:
         fa:95:21:f7:7b:eb:ec:e8:6a:98:fd:0b:0b:12:65:29:0b:ab:
         05:b7:89:fa:4e:d8:20:2c:d3:ac:02:6c:42:fa:82:99:86:ae:
         5e:1f:6a:28:0e:a7:3c:66:56:63:07:fb:f9:6c:79:56:cc:f0:
         1f:7f:ad:6c:f4:67:28:49:e5:0c:17:66:f9:e5:4d:eb:25:4a:
         83:3a:04:04:26:8e:9f:30:03:6b:46:0b:63:57:2c:51:fd:c7:
         aa:3a:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:38 2025 by rpki-client