Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa
File:                     760253bb-67cf-3504-9a97-8d6c02166051.roa (raw, json)
Hash identifier:          RvktFte7pUztyunMQCKkm2jRFha60cTVaIzY98ljR4o=
Subject key identifier:   B2:01:8A:A6:1F:20:B6:25:00:A3:AE:07:4D:D3:4E:70:DE:00:EB:11
Certificate issuer:       /CN=f97b644e-a01f-43c5-83e0-146254941d5f
Certificate serial:       010D0C9F43285849A3548414ADD081FD5336B260
Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     36290
IP address blocks:        199.21.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:84:14:ad:d0:81:fd:53:36:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=d5df9811-26e5-45cd-8b14-d2b0047a29a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:ce:d9:7a:06:39:5d:f5:d0:90:98:d0:f9:
                    aa:6e:a3:38:fc:24:c2:47:2b:93:fe:45:a2:fa:2c:
                    c7:19:e2:a8:bc:cd:f8:8d:bb:aa:f4:85:de:f2:bb:
                    5f:2d:2b:91:79:e7:51:9e:8a:02:fd:ec:5f:0d:41:
                    b6:c5:bd:22:62:71:6e:86:5f:8c:d8:7a:9b:2b:df:
                    82:52:1b:81:e7:05:76:d1:f0:60:1d:9f:e2:34:df:
                    b9:b1:e0:26:41:0b:2f:c2:d5:98:15:aa:3a:2a:9e:
                    83:c3:3b:27:0a:52:6e:e4:5d:e0:f8:b2:00:af:1b:
                    2a:5b:0e:b1:58:04:a3:bb:ff:38:8f:92:42:0e:06:
                    c0:0e:39:06:29:9c:90:c3:ce:1c:92:34:34:6e:c2:
                    d6:52:22:5f:35:80:b7:93:42:2d:3c:ab:4f:12:31:
                    83:df:a9:dc:38:a9:03:b6:1f:6e:f5:13:82:3f:a4:
                    c3:4a:8c:8c:5e:c4:c6:9e:e4:34:00:46:98:7a:76:
                    26:6c:c2:01:e8:6e:86:7f:63:02:7a:c1:dc:98:cc:
                    8a:d1:2d:4f:5a:2b:b8:33:be:6a:92:cd:01:0e:d0:
                    c2:6f:59:67:78:76:ba:a9:27:76:90:1a:ac:0f:82:
                    fd:9f:b2:57:c2:42:48:7d:ec:59:b1:85:1f:8c:98:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:8A:A6:1F:20:B6:25:00:A3:AE:07:4D:D3:4E:70:DE:00:EB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:52:28:73:1e:d5:b2:df:f5:3e:e2:36:3b:d9:94:38:fa:
         c5:d4:b3:2e:ec:a2:f8:f5:02:81:b7:b9:aa:b5:aa:75:97:a6:
         44:9d:83:cb:19:d7:fe:fc:1d:8d:15:57:3c:ae:a2:b0:c1:aa:
         3b:06:da:22:57:1b:bf:fd:5d:31:2f:03:48:43:07:c4:39:34:
         e7:06:6f:05:be:bd:1b:8b:18:e2:49:c8:fa:15:9c:27:44:2e:
         10:73:59:aa:fd:15:a1:88:c0:1b:73:01:35:05:4d:4b:fd:8e:
         af:ef:74:e2:80:2e:67:e6:f1:77:a0:a2:20:3f:79:df:25:b2:
         e2:80:23:a9:02:da:f7:df:8d:68:5f:55:34:2f:23:2b:63:d3:
         de:9b:d4:a1:cd:35:d2:6b:e4:c2:87:b0:9c:c7:51:94:4a:22:
         f8:be:01:de:be:dc:35:dd:db:f2:b4:26:13:82:3f:34:49:e7:
         38:ff:72:a5:c3:8f:94:08:74:e5:87:26:34:79:86:a8:f2:0d:
         20:c7:a7:bd:a9:04:b0:b9:65:21:f8:4e:32:18:c7:d1:3b:d3:
         a7:d4:fc:13:ed:b0:5a:d0:fe:3c:e9:9d:e7:4d:8f:85:61:dc:
         08:0c:08:5a:23:c6:05:c6:f8:55:b3:2a:30:48:1f:3f:3e:5b:
         62:e3:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:58:53 2025 by rpki-client