Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f9c78a2b-70ad-3e26-8730-0a360277ba2b.roa
File:                     f9c78a2b-70ad-3e26-8730-0a360277ba2b.roa (raw, json)
Hash identifier:          Ro3nvESe5sMHrIELQsEmRzvjgqOcPwJQDKjcYhh39f0=
Subject key identifier:   B3:03:6C:FD:E5:3A:DD:61:FA:30:A2:78:63:7C:C8:22:6D:0F:99:A8
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285849DF5A67B5F38BA9E749736A80
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f9c78a2b-70ad-3e26-8730-0a360277ba2b.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     20473
IP address blocks:        199.255.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:67:b5:f3:8b:a9:e7:49:73:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=e54f8836-63f6-4eff-85c7-c15c3c1a18f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:02:68:59:4c:5e:58:b0:0a:33:6e:b2:fa:b1:
                    37:dd:52:ed:ee:47:99:86:46:fb:d0:0a:d5:c0:58:
                    9b:83:20:26:50:b7:4e:69:1d:33:4f:62:96:fd:81:
                    26:22:fa:1c:11:51:d4:5d:74:44:a8:85:56:2a:5c:
                    00:58:c4:0f:8b:b6:f3:b4:1f:c6:55:e5:26:88:30:
                    fb:db:82:7b:c3:ca:d7:29:cd:50:89:f5:21:fb:3e:
                    a6:0a:ad:71:b2:ac:e9:37:f5:13:87:de:d8:9f:9d:
                    0a:0a:cb:01:31:f6:05:84:47:e4:5c:70:c2:bd:03:
                    8a:67:b0:bf:ca:af:fd:d8:fe:f5:cd:7d:3a:c6:29:
                    87:7a:ec:5e:5f:65:c9:d9:25:bc:eb:e0:80:fe:02:
                    88:39:39:f0:47:4d:60:e2:e7:96:09:b1:de:76:65:
                    b2:d5:c9:db:ee:dc:86:0f:f3:0d:da:76:75:c1:fc:
                    19:22:0d:94:50:f7:41:28:83:74:a4:46:04:b5:0b:
                    c7:dc:45:5d:4d:ea:c4:e7:44:f3:ae:fb:5d:1e:10:
                    d8:75:c9:b0:70:10:be:23:fb:e7:e4:b4:e2:32:12:
                    93:35:8d:91:df:f1:66:2d:cd:e3:e6:52:d1:45:2e:
                    66:9d:ad:30:81:8a:4d:c9:5b:e1:de:50:16:76:2c:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:6C:FD:E5:3A:DD:61:FA:30:A2:78:63:7C:C8:22:6D:0F:99:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f9c78a2b-70ad-3e26-8730-0a360277ba2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:82:a6:0b:f3:2e:c8:9e:a5:c3:63:df:52:d7:07:1b:0b:74:
         0e:ae:a4:39:1f:40:0f:3d:ee:25:db:26:9b:4f:e5:75:68:f0:
         ff:a5:b7:ef:03:a6:39:3c:d1:c1:54:e7:25:32:78:fd:22:49:
         9e:d9:f9:fd:3d:cc:95:59:d8:ce:e1:64:a9:99:15:9d:44:28:
         f0:f3:d3:39:e8:b8:ff:fe:1c:dc:41:a0:ca:cc:b8:2c:47:9c:
         e9:cb:5a:75:e7:e3:15:d8:b8:81:4d:d2:61:de:57:5e:47:bd:
         83:db:4b:ee:85:21:85:07:d6:2d:4f:c9:57:48:c5:2e:2b:40:
         49:80:68:c5:b5:cf:45:74:88:ea:63:bc:7c:2d:58:16:11:be:
         4b:98:02:45:4b:6d:77:74:fb:0c:de:b7:11:26:9f:6c:16:7d:
         f5:55:6a:72:5b:95:84:c1:6f:d8:3e:2e:73:a6:67:58:12:d4:
         86:b4:8e:45:ac:e4:c7:03:8f:a9:b0:8c:2a:e6:2c:f4:62:f6:
         25:e1:27:f8:b3:95:3c:f3:18:5d:01:6f:b6:c5:88:ee:63:61:
         3c:c0:1b:ee:63:5e:b7:e3:8d:7f:10:bf:57:81:96:be:f5:45:
         5b:77:e3:f2:ad:88:a1:50:48:22:c0:87:49:c4:77:5e:cc:d8:
         5c:6f:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:26:22 2025 by rpki-client