Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/4f233169-8205-38de-983e-fd9492664393.roa
File:                     4f233169-8205-38de-983e-fd9492664393.roa (raw, json)
Hash identifier:          fRGqFlNdd3jV3HcNoQymGmd3cVypjusydGnl17NAeZk=
Subject key identifier:   1C:5C:1D:D1:E4:D7:CD:BB:DF:90:33:41:3D:92:26:F0:E9:ED:D4:66
Certificate issuer:       /CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
Certificate serial:       010D0C9F432858499829D6D2A696B0E242116B40
Authority key identifier: C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/4f233169-8205-38de-983e-fd9492664393.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     40149
IP address blocks:        216.87.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d6:d2:a6:96:b0:e2:42:11:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=44c4ce9e-40d0-4848-a3ea-b875bef5565d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:3d:f9:b8:52:64:1e:ef:07:27:4e:d8:9f:
                    67:5c:da:37:78:f3:64:ef:e4:a2:44:94:d3:6b:a0:
                    72:af:0e:29:3d:3f:ca:55:13:58:54:82:82:a1:4c:
                    89:87:cd:ae:31:4e:cc:e6:aa:75:9e:7c:fe:63:cb:
                    20:89:27:e3:12:27:0e:00:5c:f5:a7:f4:c6:5b:1b:
                    2f:51:7a:e0:57:74:13:0b:8d:81:7f:f9:ba:2a:ee:
                    82:1f:cc:be:fe:c1:b0:66:d4:06:68:be:88:e0:f3:
                    e3:ea:fa:ae:55:4d:9a:08:aa:b3:22:46:c7:08:76:
                    fd:b3:dc:57:a5:94:fa:88:08:0d:1f:fb:38:f7:2a:
                    25:85:7d:63:18:77:97:79:17:e4:28:76:38:7e:29:
                    b3:e6:bf:97:64:d2:81:a4:84:e7:bc:a8:38:c7:4f:
                    e4:a6:8a:8f:23:ea:e3:27:51:3a:51:58:6d:fc:8e:
                    fa:99:8d:14:c8:29:d4:62:bd:72:70:65:f4:76:40:
                    30:c6:73:ce:8e:12:a3:2a:21:ca:27:72:ca:c8:4d:
                    b5:6e:81:07:06:81:2a:a5:55:56:7b:1a:46:cf:b1:
                    57:48:e0:87:ba:47:0a:76:58:fc:86:45:18:71:a0:
                    52:49:68:e8:fb:72:f2:e6:62:13:2f:83:f5:ed:87:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5C:1D:D1:E4:D7:CD:BB:DF:90:33:41:3D:92:26:F0:E9:ED:D4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/4f233169-8205-38de-983e-fd9492664393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl

            X509v3 Authority Key Identifier:
                keyid:C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:1e:b6:33:ab:d8:fa:a4:69:c6:8c:d8:5a:73:5f:1e:c9:
         a2:3f:4a:2a:2e:a2:58:b4:f8:2b:d6:d9:02:6a:93:6c:1e:89:
         51:e3:b8:ce:31:a1:32:85:30:55:9b:6c:11:dc:71:83:5c:31:
         d9:e1:9c:4e:d2:ee:9b:17:3c:71:ed:d0:f1:10:5b:77:24:c2:
         39:5f:e5:89:64:8a:1e:6f:fb:01:74:65:43:e2:65:39:a8:fa:
         88:b0:9a:ba:f2:39:6b:ed:e9:ad:d6:42:d0:68:eb:5e:fe:b1:
         a5:51:f5:af:02:cc:64:4d:2e:48:81:7c:d5:19:eb:b4:48:e9:
         39:0c:26:b3:e5:83:95:fa:2b:17:e1:7e:56:67:63:33:f5:73:
         46:05:d6:42:a6:18:cc:88:ea:46:66:16:24:e2:6c:cf:f1:a4:
         ec:ef:32:87:d2:9a:40:3b:f6:de:32:cd:5b:eb:52:41:f7:44:
         89:ab:37:c1:27:cf:ab:fe:26:0d:62:05:b5:88:c2:9a:c9:7b:
         9e:a2:d5:be:f8:9e:24:5b:5b:3d:5b:f4:51:55:86:53:2b:a8:
         41:54:af:a0:21:1c:b2:cd:7e:d2:1f:fe:02:b5:11:b2:74:21:
         14:b7:70:a3:50:a2:1b:c5:15:34:e9:78:4f:21:ac:93:2c:c4:
         93:12:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:24 2025 by rpki-client