Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
File:                     3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa (raw, json)
Hash identifier:          9USZEMgf+wz1yh+evoj/SLHHWSZMQE1roH+yXwrw9i8=
Subject key identifier:   0C:69:82:93:E9:E0:8B:BE:DF:64:83:F0:B5:79:FD:C6:57:03:AB:81
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285849D594D317F0F40C0B5601BF00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16904
IP address blocks:        207.191.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d3:17:f0:f4:0c:0b:56:01:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=5ced1140-5698-43ee-bc03-a49fecca1c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:bc:98:ad:6c:ac:7e:2f:5f:3c:72:58:b9:
                    52:4e:45:d4:bd:53:f5:59:b3:1f:f5:12:96:32:82:
                    34:fa:06:f3:7e:14:8d:d1:80:ef:bd:dc:67:87:26:
                    7b:7f:fa:39:fd:30:2c:5c:f3:89:20:3d:c0:cb:53:
                    ae:70:44:83:df:3e:8c:d2:64:0f:c8:ae:4c:5b:10:
                    f1:f2:95:d3:18:07:d5:a2:94:97:db:cc:83:30:5e:
                    0a:3c:27:a1:30:b0:0d:fd:b9:e7:17:22:24:c0:a8:
                    58:08:36:7f:5e:1b:98:24:73:9e:96:ad:6b:c9:49:
                    26:05:e7:ce:2c:cd:1d:d1:a8:f9:b5:28:92:f5:c0:
                    99:b9:d3:f0:44:37:b6:0a:77:c7:5d:e9:6d:5d:31:
                    f6:d8:ec:16:ee:27:9f:cb:ac:cb:d8:01:01:04:08:
                    14:2b:b1:59:aa:59:1b:bd:49:7a:98:65:81:02:2d:
                    3f:85:07:c4:a7:17:bc:38:ff:bc:b8:f7:22:f4:80:
                    f2:9e:96:fa:f8:a8:e4:3b:04:90:c0:e4:9b:dd:eb:
                    0e:71:20:dd:78:d9:4f:53:76:be:89:0b:6b:12:71:
                    52:ca:d0:d7:5d:04:7a:ca:29:5e:e0:75:37:46:84:
                    8f:c0:57:c3:05:fa:cf:50:f7:5f:21:8f:24:f7:a4:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:69:82:93:E9:E0:8B:BE:DF:64:83:F0:B5:79:FD:C6:57:03:AB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:4d:fc:6d:cc:ad:cc:be:4a:80:71:8b:d7:01:8c:94:a7:
         9b:4c:d5:51:82:36:66:f7:7e:9c:57:b5:f4:b7:f9:91:08:87:
         7a:c3:c4:be:91:7a:90:46:d2:64:8b:10:21:ed:06:06:31:11:
         bc:ae:e6:f0:34:f5:9e:48:0d:ca:d5:d7:d8:8b:13:eb:eb:a4:
         dc:75:a3:b8:00:d6:62:f0:fe:b8:da:c5:4b:67:ae:38:3b:df:
         1c:77:aa:48:01:b2:a9:cb:5d:a5:9f:c6:93:19:13:9e:7a:d5:
         7f:49:99:b4:ba:f4:6c:9a:86:54:0b:d1:99:fe:9c:98:0c:aa:
         3d:24:f3:99:b7:0c:05:fe:6b:31:dc:1c:16:15:98:04:e6:e3:
         40:aa:e2:7c:1c:cb:4d:a0:03:b9:df:37:24:34:57:fa:a4:59:
         4b:a3:74:b0:a3:0c:50:6e:19:81:b0:bd:c3:b4:34:36:08:5b:
         f0:f7:50:02:69:7f:0f:9d:b4:8d:ed:7e:9c:88:e9:62:84:02:
         9b:19:35:20:a9:c6:54:ef:e4:f0:2d:3a:28:a1:ad:87:ba:94:
         93:15:45:d1:b2:f4:37:f7:50:e0:c4:8d:34:40:98:5f:a8:55:
         13:89:fa:ff:cd:18:87:1c:b0:f6:ec:38:d7:88:29:93:fa:01:
         89:30:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:06:14 2025 by rpki-client