Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/057921c0-343a-369a-9b5e-72511f182212.roa
File:                     057921c0-343a-369a-9b5e-72511f182212.roa (raw, json)
Hash identifier:          sYCsgZ7pF4BD29surLq/bw/1NkM7fXDpcnT7jVpBdNU=
Subject key identifier:   6E:C4:D2:8C:D7:0F:9F:22:D0:5E:8F:32:06:E5:22:C6:2C:46:1A:ED
Certificate issuer:       /CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
Certificate serial:       010D0C9F432858498FC9BD64F392CD938E023A80
Authority key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/057921c0-343a-369a-9b5e-72511f182212.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     549
IP address blocks:        192.75.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bd:64:f3:92:cd:93:8e:02:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=505c7472-3781-4e8c-aac0-62d17782bc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:62:0d:54:d4:56:ee:d7:6a:06:b7:a9:ff:
                    3b:c9:f7:bf:b4:e9:88:91:64:bf:24:bd:d5:fc:35:
                    68:fb:38:45:23:25:52:08:4a:72:4f:bb:19:3c:89:
                    67:4d:07:bd:e5:4b:d4:93:b1:e6:5d:a5:c1:3e:7e:
                    a1:e3:ca:b3:38:fc:a6:16:9d:32:d7:9e:c2:3f:1a:
                    81:fc:8a:63:fe:a1:00:95:67:bb:8d:3e:d5:10:78:
                    1c:ed:8e:84:51:e2:40:67:82:a9:46:fb:95:e4:0d:
                    6f:cb:44:ef:fb:2f:f9:57:0f:59:f5:eb:1e:4a:90:
                    d9:b0:47:e9:ed:f0:14:4c:24:68:ae:2f:b6:23:5b:
                    6f:a8:0b:03:3b:e3:5d:c7:bd:19:06:c5:95:37:9c:
                    00:83:0e:57:6d:6d:5f:8a:f1:1c:ca:2e:4b:5d:51:
                    bc:83:7e:6f:57:90:1b:f5:24:b8:25:3a:ac:ab:2c:
                    2f:51:14:f7:5b:db:e0:19:86:71:ca:51:b8:12:4b:
                    75:22:e9:28:9f:7b:ae:12:8e:97:0b:f7:22:86:fe:
                    dd:bc:5b:02:8c:18:d5:db:98:5a:00:05:97:33:ac:
                    0e:c2:4d:c6:a8:d3:bf:02:19:99:4b:bc:c1:5e:71:
                    2c:f2:f4:77:d0:84:da:11:8a:f7:34:d6:2e:bc:32:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:D2:8C:D7:0F:9F:22:D0:5E:8F:32:06:E5:22:C6:2C:46:1A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/057921c0-343a-369a-9b5e-72511f182212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:99:9e:2b:1f:34:21:91:69:17:19:ae:d8:b6:9e:f9:4f:ff:
         1d:6f:89:48:39:f0:b6:40:de:d7:bf:2c:64:8b:45:17:0b:5b:
         fc:8a:48:89:43:0c:48:67:1b:a7:d4:76:6c:fc:dd:0f:ed:92:
         ee:7c:e1:a5:5d:c0:db:4e:5d:db:cc:bc:83:65:2a:0a:18:27:
         a1:85:33:3f:1e:55:b9:47:ac:9b:94:31:cf:77:10:cb:cd:e0:
         3b:48:72:57:72:c7:af:cd:ef:28:e2:4a:df:ac:ef:e9:2d:45:
         3b:f1:7e:9d:fd:b4:c5:9f:f3:9f:c2:b5:12:48:a8:6f:f5:7b:
         f9:7d:17:2d:55:e1:d5:77:9f:24:04:bb:77:4e:ba:1f:5c:c0:
         2b:85:1f:40:5a:b6:53:01:b9:6a:d2:8b:69:07:78:7b:cf:c6:
         ed:28:d8:85:e7:3e:02:36:4b:18:0c:82:a4:44:d7:d7:3c:67:
         36:aa:9b:96:04:82:1e:5d:c7:bf:14:d9:0e:68:34:ef:ae:65:
         6a:ff:07:34:0a:27:be:a9:ad:96:61:b4:74:9e:0f:97:da:4f:
         1f:e6:84:7c:a7:6d:5e:9b:73:da:0e:f1:5a:fd:50:cc:67:2e:
         2e:f6:1b:57:7c:38:56:01:9c:5b:0d:2a:88:b3:66:59:1c:3c:
         0f:f9:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:40 2025 by rpki-client