Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa
File:                     6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa (raw, json)
Hash identifier:          ul1W161LLKRrMm/e0CSLFdZmqw/xvuvI7XaKsijhxVg=
Subject key identifier:   F0:BC:1B:C5:6D:61:9E:A7:B0:12:7C:B2:8C:16:9C:11:77:5F:5C:A1
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F432858495E7000359F1971B622FDFE00
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa
Signing time:             Mon 31 Mar 2025 08:45:29 +0000
ROA not before:           Mon 31 Mar 2025 08:45:29 +0000
ROA not after:            Sun 29 Jun 2025 08:45:29 +0000
asID:                     26658
IP address blocks:        192.119.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:70:00:35:9f:19:71:b6:22:fd:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Mar 31 08:45:29 2025 GMT
            Not After : Jun 29 08:45:29 2025 GMT
        Subject: CN=963130f9-d7fe-42b9-812b-e1f41b01baaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:f8:d0:46:c8:7d:3c:1f:d6:b0:c4:38:89:
                    d0:e4:6b:60:dc:97:22:f9:55:0f:37:03:fb:86:a3:
                    97:3d:b6:d6:06:22:27:d6:8c:1a:e9:88:ba:72:58:
                    6d:e5:53:01:8c:67:b6:c0:ba:d7:5c:e4:32:be:5d:
                    f2:6f:78:cc:df:a4:d0:72:f6:83:ae:c9:51:36:57:
                    ed:f1:f2:86:d5:f9:a1:d7:53:80:a9:66:f9:1d:1a:
                    bc:83:f6:4e:28:48:1e:c3:06:fa:75:7a:dc:ad:f5:
                    8c:fc:d2:9e:96:20:3a:21:3c:34:a7:f8:60:ae:a9:
                    44:05:d0:33:c2:03:79:c1:f5:56:d6:48:9d:0a:ca:
                    00:93:4c:0f:1c:af:67:a1:85:cb:da:c2:4c:29:3e:
                    c2:84:f3:d1:cb:fb:76:ba:70:77:8d:95:e0:99:57:
                    5f:15:b8:62:5d:78:d8:4b:9f:d1:97:08:85:e0:e0:
                    74:93:31:7f:60:76:6d:e3:b9:60:f2:81:85:30:ae:
                    3a:de:fe:6d:f0:dc:2e:c9:dd:ef:c2:8e:d4:00:04:
                    ce:99:be:c4:34:59:b0:4e:e2:35:54:68:49:c0:53:
                    e5:c9:b7:b2:c4:62:4f:f3:c4:ea:f1:d2:82:83:38:
                    ba:25:5a:0d:76:ec:05:46:97:62:cc:e5:33:b0:f5:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BC:1B:C5:6D:61:9E:A7:B0:12:7C:B2:8C:16:9C:11:77:5F:5C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:13:87:16:17:ac:86:ee:80:c0:70:db:07:a1:ee:ec:c2:
         8f:a3:e1:ab:8d:8c:87:54:42:e9:e9:22:49:c5:5f:b5:59:21:
         9d:06:63:fe:d4:32:a3:8f:4f:fe:42:c8:e0:72:f1:f2:3b:fe:
         73:0a:a2:f2:a4:a3:3e:03:8b:83:25:1c:9e:f4:0f:79:9c:8f:
         ff:af:1c:06:46:43:7b:c5:85:f6:fe:22:30:c7:01:2b:d9:e9:
         3a:49:6f:07:ee:77:b9:ed:4e:95:f6:64:f3:90:8a:56:e8:77:
         51:0c:ac:9d:b8:37:be:a9:ab:60:c4:d0:db:83:cb:59:08:b1:
         3d:2f:a8:70:ef:a1:ce:d3:18:f2:02:1d:7c:ea:d3:b2:fc:34:
         8a:f0:1d:1a:f8:a9:c6:f7:11:35:69:e6:59:23:c7:2f:2d:69:
         b4:b2:89:3d:40:9b:fa:b5:94:bd:c8:e2:84:be:ec:89:c9:94:
         f9:00:f4:80:8d:8f:5b:6b:53:4e:b6:07:0b:f2:62:1d:36:43:
         bf:75:fc:40:46:27:6c:5d:4e:52:5c:1b:a0:27:f3:a5:71:be:
         01:a1:77:5d:58:9e:8e:6c:64:1a:04:cd:f7:87:d1:4d:60:14:
         00:92:3a:b9:f7:07:54:54:04:7e:28:91:0f:63:35:69:95:3a:
         fa:3a:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:20 2025 by rpki-client