Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
File:                     657a060f-11de-3437-8e3b-e36a3da029c5.roa (raw, json)
Hash identifier:          CJ9c+t7HS92rRBehzlDOe6nL/VKWx7dWYMHmf8Iaw04=
Subject key identifier:   FA:E0:8C:E7:91:16:E5:84:83:33:C5:92:27:89:97:AC:B8:EF:68:5C
Certificate issuer:       /CN=5886029e-a569-4937-b21c-91a2f3965848
Certificate serial:       010D0C9F4328584A07D526C222A196650290FA00
Authority key identifier: 6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        199.196.234.0/24 maxlen: 24
                          199.196.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:26:c2:22:a1:96:65:02:90:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5886029e-a569-4937-b21c-91a2f3965848
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=bd679cf9-297c-47bb-a655-a908820855e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:6e:f2:65:eb:f6:4d:7e:cb:ae:b0:e1:f4:
                    83:32:a1:06:1a:d2:97:7d:1c:98:f3:d0:36:78:c6:
                    8e:da:08:b6:a7:8c:17:d8:02:28:c7:bf:ef:0c:33:
                    92:eb:c7:a2:27:ac:b6:42:b9:c9:65:f3:30:18:34:
                    c5:03:c5:1a:d7:81:de:ff:33:69:54:5d:d7:80:5e:
                    83:23:4e:e9:63:ec:6f:58:0c:33:54:7b:6e:8c:8b:
                    99:6e:4a:65:04:13:1b:cb:50:da:51:98:b8:a1:0a:
                    94:f8:e0:e9:bf:c6:b1:56:e9:e7:b9:ea:b1:21:e6:
                    94:92:cb:47:9d:39:91:41:e5:90:4e:45:29:fa:0b:
                    3d:e2:71:44:10:a1:a6:de:75:70:a9:69:9b:f9:03:
                    fc:78:47:f4:10:0b:b3:41:7d:a5:e9:4d:9e:a5:87:
                    ac:a3:3e:13:38:fd:32:b4:ef:c0:39:08:f5:d6:22:
                    6d:00:73:9c:c8:4d:a3:ce:a7:a6:3a:8c:48:1f:12:
                    8b:9b:04:db:22:93:88:4d:0f:34:ac:b8:15:99:73:
                    a7:74:3c:ac:57:ed:d0:33:3f:30:cd:a2:ac:14:91:
                    b5:72:2f:5a:ed:a1:c7:58:c4:f0:6c:e4:31:af:cf:
                    3c:5b:2a:73:70:5b:07:07:75:dc:9b:9e:1b:c9:31:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E0:8C:E7:91:16:E5:84:83:33:C5:92:27:89:97:AC:B8:EF:68:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl

            X509v3 Authority Key Identifier:
                keyid:6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.196.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:f3:e4:6e:59:96:5b:d3:98:d6:be:62:8f:e0:5e:cf:9a:
         ea:95:de:78:be:1a:7f:04:ca:85:48:9f:75:61:a2:10:9c:9b:
         83:70:0f:f0:cd:fc:a3:ff:f6:a5:7d:5d:4c:0d:e5:74:53:a5:
         41:b0:d7:3f:0d:34:79:fe:f3:6b:ff:cd:5d:33:20:35:83:af:
         73:73:1d:99:3c:a2:46:1f:c4:a9:54:f0:89:7a:f4:08:ae:a7:
         5d:a6:5c:08:a9:1a:7c:4e:42:11:72:4e:01:b6:2d:7e:3b:a6:
         b2:67:1e:1a:35:9d:b5:99:9d:de:8c:4f:5a:37:ad:23:67:85:
         22:8b:a9:4d:3a:a4:3b:d3:24:77:c2:f9:68:fd:a5:97:37:6b:
         cf:fe:d8:ae:ba:0b:83:56:b1:ec:05:4e:60:20:7b:a0:49:7c:
         75:59:a4:f2:9b:33:7c:ff:29:fb:ca:2e:0f:8e:c5:1d:09:ce:
         72:94:e6:8e:f2:b3:1e:f4:be:74:78:4c:ac:4c:14:40:ea:3b:
         74:f0:ad:ef:f9:07:f1:54:b2:c0:25:2a:1c:8c:78:3d:45:b3:
         e6:c6:11:8d:78:3a:97:b9:33:d3:d2:b6:d4:4b:93:28:86:e9:
         ea:a1:9e:3f:70:81:89:e3:66:bd:1f:2a:b3:ef:50:f6:35:15:
         e7:3c:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:31 2025 by rpki-client