Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
File:                     10029257-bda1-3754-b670-e0c603bafdfc.roa (raw, json)
Hash identifier:          MPmFsWbxPa0ufMataxoYUFJMgZaEIHDP8N2ItrDmpJ8=
Subject key identifier:   FE:93:82:CA:8F:56:B2:7A:81:10:38:D4:A9:54:4E:FA:E5:DD:C4:76
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F43285849FE0FE468B9BB7D6DC07BB056
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        199.187.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e4:68:b9:bb:7d:6d:c0:7b:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=bd6c9d9c-34a9-4fab-81b5-059b9aebc619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:0c:52:e0:05:3f:b0:82:b6:34:3f:54:c1:
                    29:05:2e:e4:0b:a9:55:5c:64:dd:9e:7f:a3:36:d5:
                    0b:a1:3c:b2:28:7c:21:7d:92:73:9c:4d:a2:81:53:
                    35:a6:95:9a:9a:13:84:3c:7f:db:84:65:df:73:ef:
                    a4:58:73:bd:1d:1b:15:09:c6:3b:2d:91:42:c5:e7:
                    7c:6b:02:fd:a5:d2:4a:65:30:56:37:0d:43:3e:a1:
                    87:99:de:16:33:6e:8f:a4:8a:3d:ea:ab:5d:ab:40:
                    c6:e3:a1:98:57:82:9b:1d:b9:1a:ef:0f:f6:60:19:
                    55:85:5c:97:8b:21:dc:a5:6b:1c:66:cd:44:68:cf:
                    09:14:f5:23:3a:c0:29:09:5d:f8:ca:1d:fe:66:35:
                    e5:e1:b2:3d:e2:8a:2d:ea:31:7b:d5:f0:85:df:f4:
                    be:b3:20:6c:c3:2a:06:9c:28:ba:6f:33:1b:39:3f:
                    ce:af:0e:46:5e:66:5f:d7:96:cc:3a:05:b7:df:02:
                    96:08:b7:bd:70:3e:64:24:31:9f:fd:dc:2e:35:06:
                    66:94:15:a3:f8:85:25:92:f7:26:ed:31:aa:ce:a2:
                    2b:83:b1:fd:de:df:a7:7b:61:29:55:8a:fd:94:de:
                    f9:eb:34:82:e6:19:9d:a4:87:56:61:cd:bd:12:be:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:82:CA:8F:56:B2:7A:81:10:38:D4:A9:54:4E:FA:E5:DD:C4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/10029257-bda1-3754-b670-e0c603bafdfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:73:f1:14:84:ae:ee:e6:dc:03:58:a8:2c:5c:02:06:ed:e9:
         39:e4:48:f0:4c:f5:78:1a:8c:af:93:42:53:8b:52:ba:0b:0f:
         34:9a:f5:4a:7f:dc:32:fd:fb:71:16:29:2d:44:11:35:48:c1:
         4e:78:bc:35:db:cc:1e:6e:f4:5d:cd:22:75:ac:d8:31:f6:98:
         e8:2e:50:fb:4e:7f:43:51:fb:b7:05:d0:ae:d3:2f:9c:b4:c9:
         a8:ae:77:21:fc:b2:d8:e1:ed:a9:a5:35:a2:fd:6d:f4:29:ff:
         77:72:a1:86:f3:b4:e9:7b:65:a3:b3:9d:a2:30:9f:b7:bd:d6:
         80:49:e3:43:be:57:ef:a1:91:e7:3c:c6:1d:12:a2:57:f5:d1:
         a0:f4:17:89:f2:4f:23:c6:fb:35:50:5f:ba:59:61:7c:08:11:
         d1:d0:c8:55:bf:e5:8d:c1:27:80:86:97:ab:99:a3:06:2d:b1:
         67:47:65:8c:e8:e9:5d:a0:8f:d2:23:87:45:0e:c0:0a:f3:e3:
         2e:e8:c1:25:24:a2:8d:b3:fa:c5:7a:73:a9:be:d3:1f:d3:13:
         17:ec:b1:4f:f7:eb:30:6b:64:c0:fc:ce:fe:d7:b8:a2:61:75:
         f4:7f:3e:64:1d:02:c6:03:68:19:ea:4f:22:06:96:90:8f:75:
         9b:9f:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:57:54 2025 by rpki-client