Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/8380b680-a6bb-3966-b9d8-fe7ba53ad680.roa
File:                     8380b680-a6bb-3966-b9d8-fe7ba53ad680.roa (raw, json)
Hash identifier:          V7HHbjxhmr2OwHs3m7UBGJ8OBtQDgRbGZ42yF4Fq6LI=
Subject key identifier:   F7:D7:52:58:3D:01:E3:D3:06:5E:CF:F1:F3:2A:2E:BC:D4:A1:07:23
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285849AB16A3D489D244FABFBF3E40
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/8380b680-a6bb-3966-b9d8-fe7ba53ad680.roa
Signing time:             Sun 27 Apr 2025 19:42:40 +0000
ROA not before:           Sun 27 Apr 2025 19:42:40 +0000
ROA not after:            Sat 26 Jul 2025 19:42:40 +0000
asID:                     19901
IP address blocks:        9.134.0.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:16:a3:d4:89:d2:44:fa:bf:bf:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 27 19:42:40 2025 GMT
            Not After : Jul 26 19:42:40 2025 GMT
        Subject: CN=dcce7fcb-7725-492c-9d57-bc77309b7931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:22:27:92:c0:9e:00:56:02:49:96:b5:fa:
                    57:2b:66:94:96:84:76:ef:b2:f1:f8:de:22:f5:98:
                    ab:fb:f7:c0:02:33:f0:9f:93:25:14:48:e5:fa:73:
                    25:f8:ee:67:42:3a:88:dd:5a:c9:f9:ed:a2:02:57:
                    c0:a3:30:ed:be:f6:2e:28:49:2f:11:f4:14:8c:1a:
                    7b:40:d8:e0:78:48:14:df:0b:a8:0d:e9:10:df:2b:
                    09:d2:dd:38:42:7a:b1:8e:ef:b7:ba:39:e4:af:75:
                    43:82:f4:33:aa:35:31:74:83:bc:f5:d0:c9:0f:5a:
                    8b:c2:51:62:63:c2:59:78:6c:81:fb:54:72:df:6c:
                    ed:32:0b:b1:91:c0:86:b6:86:66:f1:90:e7:4f:d0:
                    ce:5e:df:1f:78:10:f4:91:4b:c1:a8:e5:9d:7d:33:
                    e8:ad:55:c6:86:cb:ec:b0:d0:31:ac:f0:80:fa:7d:
                    8b:6f:ec:4c:b9:b9:e0:05:18:66:3a:7a:a2:b8:47:
                    15:1f:e6:c1:fd:1b:5a:c6:0e:72:13:88:d9:4e:ad:
                    37:cf:bf:7d:6e:72:4c:45:ac:40:2f:45:f2:ae:d3:
                    78:ee:0a:76:1d:06:54:ff:b7:45:fc:49:35:40:e9:
                    67:fc:c2:de:d3:8e:9f:b5:6f:75:44:86:93:c3:9c:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:52:58:3D:01:E3:D3:06:5E:CF:F1:F3:2A:2E:BC:D4:A1:07:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/8380b680-a6bb-3966-b9d8-fe7ba53ad680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.134.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:93:e7:05:11:f0:64:32:08:51:1d:03:90:1a:68:79:b7:
         4a:29:ab:f0:17:92:1a:9d:5a:3c:92:6b:e6:ee:c9:09:23:a8:
         e9:ea:c0:f4:db:3a:23:40:79:4c:7d:74:f5:2f:f2:e2:bf:0d:
         e6:e8:6f:68:cb:2c:ef:b8:d0:2d:ef:4e:5e:ee:b9:93:bd:27:
         9f:a2:c1:a0:55:28:58:23:a5:60:b9:5f:fb:61:45:3e:90:cf:
         99:6b:f9:85:a4:d3:6a:4c:fb:62:9e:63:26:c3:a6:97:2b:4c:
         e9:9e:26:52:88:6f:71:82:66:3d:10:68:0d:e0:f8:30:08:49:
         04:86:87:49:39:60:c8:80:0d:32:cf:c6:09:a3:9f:2a:91:76:
         f3:29:ed:17:4e:33:25:76:4b:fa:69:8c:b1:eb:d9:8d:16:8c:
         c4:99:ff:34:69:5c:f9:26:1d:26:fd:d3:3f:91:a3:64:f8:26:
         e7:e3:7f:1d:0f:25:68:b3:11:4a:c8:20:b2:b9:66:ed:e6:a4:
         1f:ea:56:7f:99:6b:0d:3c:f3:25:49:13:f8:99:09:7f:80:88:
         5a:c3:42:d2:79:e9:b0:d4:ed:e5:fc:c0:d4:f7:09:c4:af:66:
         16:57:e4:61:12:00:1e:45:35:99:5d:30:e0:8a:ff:87:ef:da:
         1f:d0:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:50:48 2025 by rpki-client