Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
File:                     fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa (raw, json)
Hash identifier:          vGF69sl0PW4FgOtl3W/DNq6g1JtiUlJhvdbQuYQQXjQ=
Subject key identifier:   1E:00:84:ED:FF:5E:83:7D:C4:85:C5:04:15:69:FF:3A:11:1C:14:5D
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F432858499DBF2CE9FD78526BF4120F00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     20249
IP address blocks:        169.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2c:e9:fd:78:52:6b:f4:12:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=eec95c43-8395-408e-a4c5-4f1d0e0cfe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:cd:9d:2e:9b:87:99:91:b4:9e:d8:dd:7e:
                    b4:c5:a4:14:07:11:44:c9:3e:e0:83:54:18:67:a8:
                    b8:6b:ea:74:54:48:0f:8c:db:7b:cf:58:6a:e8:7a:
                    89:93:aa:14:eb:53:25:cb:3f:f9:1b:84:3b:ac:92:
                    2e:27:c0:76:b3:5f:87:91:b1:ae:b9:a9:80:db:3b:
                    06:74:e6:79:1e:b8:bd:2b:4e:6d:29:11:82:5d:32:
                    07:d5:59:62:44:57:4f:44:e2:ab:0e:6d:c5:f5:2f:
                    16:e2:fc:6f:9c:b0:e6:bb:8d:6b:7a:93:f5:9e:ec:
                    b2:d6:a1:08:5a:d1:cb:14:9f:d8:7b:db:28:51:a7:
                    5c:dc:d6:e9:47:68:ab:fb:3f:85:11:a3:2b:19:5c:
                    fb:8a:98:15:7c:dd:4c:18:cf:2e:2e:e7:9c:d1:7e:
                    f5:20:d8:15:d7:00:28:fd:40:ac:d7:f3:f3:71:4f:
                    bf:b4:aa:2e:6e:c6:87:62:09:79:d2:a7:7f:ff:67:
                    01:ce:6d:30:cf:ca:8f:8d:27:f9:a2:e2:91:74:87:
                    9c:57:c2:3f:48:02:5e:dd:18:8a:87:98:0c:c5:8f:
                    65:46:77:20:68:2a:09:eb:8f:a8:a4:e5:99:57:10:
                    11:8a:a2:64:a8:75:fe:13:15:bb:45:14:51:9e:25:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:84:ED:FF:5E:83:7D:C4:85:C5:04:15:69:FF:3A:11:1C:14:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/fdfe3f12-0830-3239-8ff4-4615da8e7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:37:3b:e6:be:fa:70:b1:03:37:9e:4e:6a:12:ba:0c:84:
         d6:5a:91:50:b5:8a:8d:36:01:7f:34:f1:bc:57:e3:3a:47:77:
         78:b7:85:6a:2d:ff:57:fb:68:8d:b6:8f:7f:c9:79:86:10:47:
         eb:c0:10:eb:cf:9a:0c:a3:e8:18:8f:7c:41:a9:9b:50:6a:47:
         92:d0:81:f6:b9:95:32:27:0a:e5:54:fe:80:97:10:f8:81:df:
         50:f4:22:53:34:b8:fb:e0:72:b1:6d:82:93:1f:8e:8a:2e:c1:
         75:df:7c:04:7c:54:8a:56:f2:83:b8:7a:01:09:20:19:19:c2:
         04:f1:b0:a4:57:7c:55:2f:6e:74:2a:fc:84:a3:2d:bf:1e:e6:
         06:95:b1:62:6e:12:d2:a3:ad:f5:11:e8:dd:20:03:e4:0e:52:
         2d:93:ef:31:c2:85:fb:4d:cb:c7:6e:c3:7d:fc:f3:12:b6:e5:
         42:91:0b:65:ad:a8:24:ca:b8:60:56:84:8a:2e:10:eb:28:ba:
         1f:55:40:43:00:5a:c9:e1:3f:e3:f2:41:27:7b:89:bd:bc:c0:
         af:fe:ef:f1:34:bd:52:85:3d:b4:f9:78:5e:e3:29:be:99:0f:
         77:63:6a:48:2e:7f:a5:f8:8a:3c:61:41:e6:eb:df:b3:2c:c6:
         ba:c3:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:25 2025 by rpki-client