Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa
File:                     bf187163-b0b5-3dd0-83db-e56d3fb14116.roa (raw, json)
Hash identifier:          jUUFBOyPDy33DW7jJyyYS81+nI1iZ72aJhhNYb1QhY8=
Subject key identifier:   0F:96:D2:F6:74:4E:42:2F:B3:D1:F6:1B:C6:C6:9C:73:36:28:64:EF
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285849AB179A37137CFDB53EFF72C0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa
Signing time:             Sun 27 Apr 2025 19:44:37 +0000
ROA not before:           Sun 27 Apr 2025 19:44:37 +0000
ROA not after:            Sat 26 Jul 2025 19:44:37 +0000
asID:                     19901
IP address blocks:        9.134.32.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:17:9a:37:13:7c:fd:b5:3e:ff:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 27 19:44:37 2025 GMT
            Not After : Jul 26 19:44:37 2025 GMT
        Subject: CN=cedfb410-efcc-4526-95b0-03eb775165fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:2f:af:4d:f9:ce:5f:f5:07:5c:54:14:86:
                    5b:6c:ab:f5:ac:55:c6:60:1f:bb:19:83:b8:42:84:
                    90:fa:7f:0a:88:f1:48:7a:78:6b:69:49:6c:11:b1:
                    8f:59:65:9d:aa:52:14:bd:87:74:57:37:9b:5e:8a:
                    3a:15:3b:02:c0:ed:83:93:88:e0:04:14:be:92:35:
                    f2:4d:be:cc:a2:24:d7:d0:cd:1f:67:56:d2:75:48:
                    f1:22:50:5e:45:d8:50:e3:05:f2:2f:bd:a3:76:05:
                    ad:56:14:95:6c:c8:21:67:d3:5c:57:65:a8:ad:5c:
                    48:a7:cb:79:c5:45:f0:85:fe:9d:bf:ae:b5:ce:1d:
                    ad:e5:b7:59:17:0e:32:f4:52:f0:c0:81:f5:10:2f:
                    d9:93:fa:c4:fa:49:ff:e1:6e:36:24:a5:d9:fb:a1:
                    bc:bd:9d:d5:ac:22:10:e7:ce:85:1e:8f:6d:3f:bd:
                    f5:06:9e:09:fd:b4:80:93:29:8b:89:2b:cd:9c:f6:
                    df:c7:f7:61:6d:1d:73:79:de:dd:e8:16:7e:5a:58:
                    7f:0a:84:2b:04:0b:6a:93:8c:68:2d:c2:0b:2e:f1:
                    54:90:65:6c:ce:0f:68:d7:7b:1d:63:c0:be:e7:6a:
                    32:bb:bb:bf:f7:9b:f9:c7:fe:2a:66:4b:c4:ed:cb:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:D2:F6:74:4E:42:2F:B3:D1:F6:1B:C6:C6:9C:73:36:28:64:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.134.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:83:87:61:1f:34:69:98:e0:79:0d:80:6a:fc:d1:21:95:0c:
         f7:6d:37:1b:76:85:fa:36:f3:2a:dc:3e:45:c9:52:4e:45:af:
         8c:1a:34:52:4a:a6:ea:57:e7:1f:82:f4:23:3c:84:65:f9:b5:
         4e:10:d2:ee:0c:a1:57:40:90:da:b5:41:68:fc:dc:41:d6:3e:
         66:7c:08:36:d6:fd:2e:cb:d4:c9:55:51:b2:ae:54:f4:45:44:
         98:74:40:f9:3e:3c:0e:39:91:79:a9:75:fd:70:3b:f2:ba:d2:
         6f:b0:0e:e2:dd:ab:80:f6:bd:31:20:d6:9f:21:11:98:00:7d:
         8f:5e:ea:f7:9e:6a:4e:7c:bf:f5:5a:e5:14:41:a2:3c:e6:f8:
         09:f5:76:f2:68:45:83:53:d8:f4:39:86:7a:40:06:af:32:d1:
         e4:5e:40:34:77:07:e2:61:97:99:3b:21:9a:74:0c:93:5b:30:
         de:8c:e3:de:87:b9:18:80:a2:45:d3:2a:7b:3b:cc:ec:05:b7:
         b0:2f:9f:a3:0a:a4:ee:31:38:42:b1:60:ff:d8:cd:e2:8c:61:
         eb:97:7a:9a:eb:d4:7f:48:7f:3f:2c:5a:ce:52:4e:9c:00:bf:
         4e:f0:f7:be:8d:29:78:57:2c:64:98:91:b4:5b:b6:1c:db:af:
         34:c0:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:11:02 2025 by rpki-client