Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
File:                     5cc41769-a8f8-3609-a674-3c555a34b77b.roa (raw, json)
Hash identifier:          6mTRPQOOSB3XwMXAwjrlICWS8/n1XJnWpIeBFgf34zM=
Subject key identifier:   2C:0F:98:A0:58:ED:05:02:D6:98:56:F5:9E:6F:67:35:73:67:1B:1E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF47E658953AFED8B013040
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        199.126.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7e:65:89:53:af:ed:8b:01:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=fc6c7594-29cb-414e-932d-06e1912ca540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:47:8d:c3:a8:d6:81:1a:8d:e7:1b:f2:4f:
                    e7:4f:c9:5f:1d:d2:c5:e4:cc:22:2d:a6:f3:82:8e:
                    83:d1:18:89:71:1e:30:ab:a3:c2:04:62:37:ce:44:
                    51:1a:48:eb:87:99:b1:01:14:2e:f3:cf:65:96:1a:
                    ac:1a:b9:73:52:09:2e:a7:91:97:d9:5d:7b:bd:3e:
                    ad:61:c3:fb:9b:8c:3e:f1:23:db:a1:77:e6:65:fb:
                    e4:2e:0f:59:53:32:75:d7:0a:96:1c:ff:f7:1e:95:
                    a0:40:a0:fb:88:a7:b2:d0:b5:cf:fa:16:c7:eb:cd:
                    29:ac:d4:94:53:7a:17:3e:33:57:3a:51:71:88:52:
                    64:a7:27:81:53:4f:0c:57:de:87:0b:86:fe:02:de:
                    84:1a:a1:bb:d9:19:1a:9a:ec:2b:27:e3:9b:cb:8b:
                    de:7d:bf:d9:8e:2e:ac:48:ee:99:21:d8:3b:b7:c7:
                    7f:4b:78:47:73:ee:a8:37:6f:ef:9f:e9:70:16:2a:
                    bf:cd:ab:65:68:76:bd:e6:39:9f:5d:6a:f7:20:85:
                    a5:23:ad:88:ba:38:c1:9c:a3:5c:79:3d:0f:fc:cb:
                    0c:3b:60:76:92:9d:6e:18:d8:30:94:25:37:e0:93:
                    f0:71:ad:38:4e:44:76:98:04:05:c4:fc:04:a3:55:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0F:98:A0:58:ED:05:02:D6:98:56:F5:9E:6F:67:35:73:67:1B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:58:74:a9:25:47:e2:7f:26:0d:6c:bb:e2:d0:0c:31:29:fb:
         26:df:0d:42:22:b2:b0:60:3a:58:05:86:ba:be:2b:04:2e:d9:
         e4:ff:71:e8:36:2a:0f:dd:43:01:e6:11:a3:d1:24:d3:e5:cb:
         26:52:ee:1f:ca:b3:1f:97:c2:90:40:ee:16:42:83:ce:1a:b3:
         f3:70:7e:28:e5:12:cf:4a:c9:10:8d:5a:ae:eb:6f:7b:c9:cd:
         d5:ff:f0:ef:94:c5:f4:81:80:9b:d2:16:12:f2:5b:0b:b4:13:
         31:3d:eb:09:b5:77:4d:ba:9a:f1:e7:a4:bf:d9:5e:be:ba:80:
         77:66:f2:f3:b7:6d:35:2b:06:af:bb:e9:d0:91:07:f7:0f:70:
         57:c0:e9:8b:90:2d:8d:a5:cd:c4:fb:28:0a:d2:43:2f:97:78:
         8f:0f:a5:0a:3e:27:e0:12:23:5f:31:de:90:5b:48:c7:50:4f:
         60:9a:50:5d:54:2d:54:a2:6c:9a:f3:e3:8f:8c:57:fd:dc:bf:
         13:91:ab:ae:0d:09:74:d0:22:75:15:5e:c8:1b:e0:81:11:cb:
         0a:92:79:e5:7d:0f:eb:43:a1:92:69:a2:d9:29:75:93:41:f6:
         0e:64:a5:96:a8:d0:53:fe:71:76:4a:cd:b0:e4:d8:6a:1b:ee:
         db:07:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:23 2025 by rpki-client