Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
File:                     86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa (raw, json)
Hash identifier:          0HeqgJjXiyrsJdN+xKT9fd+KI3zrMZFzdbjzxuBWknk=
Subject key identifier:   14:B9:C6:04:19:9D:76:58:16:B3:74:2C:D3:51:7A:0C:C0:2A:BB:93
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F432858499DBF387E32EA51D64C3E6980
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     10886
IP address blocks:        199.7.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:38:7e:32:ea:51:d6:4c:3e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=1293e463-59af-4335-a68f-2014c47beeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:0a:fe:d1:69:a0:2e:2c:31:ab:68:1d:b8:
                    6a:6b:ad:20:11:88:b9:c6:b4:b3:f0:17:76:f3:5c:
                    09:0b:76:95:96:69:35:53:5a:75:98:67:00:dc:fa:
                    dc:2d:a1:e2:cc:f0:5b:0d:e8:36:d6:f2:dd:b8:45:
                    44:d3:91:b3:4d:7a:c2:1d:c8:1c:54:73:ee:86:78:
                    a4:32:5e:d0:b3:a8:61:c7:c3:27:d1:ee:7b:e0:65:
                    8b:be:d2:6e:9d:29:af:86:9c:ae:71:55:99:de:6a:
                    02:10:bf:7e:a2:4e:8e:8d:08:93:73:3a:2e:d5:86:
                    bf:9b:d5:8e:05:f1:3c:37:a3:fa:ab:7c:df:a9:4a:
                    9a:f7:b8:c5:37:f2:33:f1:46:77:70:71:59:62:af:
                    0a:24:69:4f:b3:79:95:0f:87:05:59:c6:b1:04:b8:
                    64:9c:c0:3b:3a:e5:f1:1d:7b:9c:b8:bc:4c:13:58:
                    4a:07:84:e4:d4:ea:ae:42:a6:1b:e5:0e:83:32:8b:
                    e0:8d:04:f9:c9:a5:f2:1c:dc:93:a0:eb:97:f6:98:
                    56:89:a6:0c:84:eb:54:ac:a1:11:9c:9f:7c:49:5e:
                    87:12:70:fb:0e:5d:3f:91:d4:78:5e:87:dc:c8:d0:
                    91:2d:19:4a:5a:4c:73:9c:70:07:94:6a:87:74:38:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:C6:04:19:9D:76:58:16:B3:74:2C:D3:51:7A:0C:C0:2A:BB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:05:0c:c8:74:a9:e6:80:b0:6a:42:4e:5d:48:81:d2:47:
         43:38:a7:80:87:7e:ea:e7:b2:14:b3:f9:23:9e:5f:eb:43:9c:
         8c:a2:97:bd:db:a3:2d:47:06:82:68:16:30:f1:4c:aa:19:06:
         52:d6:82:51:fb:e0:35:9b:a1:2d:9c:19:cd:8a:ac:08:05:6c:
         9d:43:00:01:90:c9:87:2d:a2:2d:8e:e7:6d:9b:ec:fe:e2:33:
         fa:97:1b:29:ab:96:09:be:04:50:36:bd:88:91:ba:d5:7d:5e:
         5c:e2:d1:86:93:0c:f4:d8:f8:82:7e:e5:9e:b1:33:6e:28:2c:
         21:24:14:b4:ad:ba:f5:9e:33:04:bb:11:e1:5b:b8:9d:89:fe:
         85:cc:df:95:76:4f:eb:21:8c:88:a8:de:35:7c:d5:d2:3d:e1:
         d3:45:88:2f:59:f6:8b:14:b5:73:4f:82:b8:5b:a1:b7:f7:47:
         12:83:08:06:9e:46:76:f2:32:98:a2:25:05:92:94:ac:00:78:
         d2:a6:ac:f4:91:c8:a5:b6:0c:c6:02:54:5d:65:f0:0f:65:5c:
         ff:49:ba:92:f8:5c:f7:8d:04:8b:07:16:b2:3f:6a:cb:87:c0:
         4e:82:d3:ef:93:55:6d:20:db:be:11:c0:35:49:81:bd:d0:3b:
         d6:1a:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:50:27 2025 by rpki-client