Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa
File:                     8f64503e-a39c-366b-89f7-6527525b2675.roa (raw, json)
Hash identifier:          Tsbrx2BanjQ7YeLULgffMgvXCuOHuzrLEzS9QXadIpo=
Subject key identifier:   8F:9D:72:B7:B9:29:22:D3:8C:1C:5D:86:A4:E1:30:48:40:67:CC:ED
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328584A097AB621A8242F7FE3285E00
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa
Signing time:             Sun 20 Apr 2025 22:26:00 +0000
ROA not before:           Sun 20 Apr 2025 22:26:00 +0000
ROA not after:            Sat 19 Jul 2025 22:26:00 +0000
asID:                     399672
IP address blocks:        169.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:7a:b6:21:a8:24:2f:7f:e3:28:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Apr 20 22:26:00 2025 GMT
            Not After : Jul 19 22:26:00 2025 GMT
        Subject: CN=474def9a-9a3c-48e3-943c-b2d9bd62fe90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:ce:3b:54:ea:99:b6:a0:99:2f:9a:9d:68:
                    b4:20:da:a7:8d:53:51:42:4b:fe:50:df:c2:a4:1e:
                    64:75:b1:6b:3b:bf:ba:f3:80:fb:0d:4d:d0:02:b8:
                    86:a8:34:4d:fe:44:47:e1:e7:a1:ff:e3:b4:02:6d:
                    61:bb:0d:b5:fd:a3:d6:0e:90:7a:2d:8d:88:ae:d2:
                    42:89:d5:b2:2b:07:3b:04:7b:a5:fc:e5:d3:64:ee:
                    f5:83:7c:b0:98:71:83:35:6b:19:16:15:8f:dc:fd:
                    9d:9f:16:b7:a5:24:c2:47:4c:35:d9:dc:3e:fe:10:
                    fb:f0:73:7c:12:e4:d9:bf:8e:87:0d:b5:8c:60:9b:
                    82:9d:09:22:bd:c9:e4:57:ff:f5:f7:18:0e:d4:32:
                    8d:79:a6:48:a3:58:6f:36:79:a6:bd:db:7f:a5:3b:
                    1c:de:2e:48:cc:65:86:98:78:53:fc:0c:86:7f:eb:
                    cc:00:d2:4d:e3:50:02:64:b5:14:fe:f7:4e:16:29:
                    7c:a4:a9:4f:e3:95:a6:95:90:34:05:8e:9b:25:7e:
                    56:d9:1e:e3:97:18:c7:fb:ec:b0:c7:ac:d4:13:3b:
                    14:3a:02:19:d4:ec:42:69:f9:36:5e:31:bb:fa:41:
                    bd:c9:81:31:71:d0:05:c7:9c:10:4d:7d:09:03:e4:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:72:B7:B9:29:22:D3:8C:1C:5D:86:A4:E1:30:48:40:67:CC:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ae:e2:b7:5e:fc:9e:28:df:04:c5:93:7e:18:ce:32:ce:62:
         15:0f:d9:78:05:09:1c:67:4b:5a:80:ff:39:17:fd:ba:57:5c:
         7d:ff:cd:2d:74:69:18:a4:ea:33:84:93:7c:01:6d:2f:d0:31:
         7f:89:86:c5:e6:66:e8:e2:a8:1d:7f:ae:ea:5c:d9:2d:e2:86:
         24:0d:fc:b8:fb:96:89:71:f4:33:cc:4a:4b:46:65:f6:30:e9:
         df:d9:b6:17:82:d4:5f:14:74:19:e3:17:5c:18:21:e8:a5:6a:
         82:77:22:3d:b0:96:17:69:4c:da:59:37:1b:3d:d1:eb:40:4e:
         1e:5f:3a:fa:2e:f3:96:4d:6f:33:35:77:66:b8:40:4b:e4:9f:
         46:cd:64:ad:14:c8:e5:69:e2:68:00:05:9e:45:15:ad:56:b5:
         a0:a8:3b:3d:60:15:99:a1:eb:86:b6:59:06:72:41:38:45:6f:
         8f:98:c2:49:62:63:2e:23:b3:99:e3:7e:aa:0d:49:0c:d5:0b:
         0f:51:5d:a3:d4:aa:96:88:a1:20:de:51:bb:de:94:79:14:71:
         24:66:fb:29:e0:ac:e0:94:e7:69:97:cd:08:2c:ed:ec:1b:d1:
         41:d7:a5:ca:0c:70:58:f1:f5:cc:e9:8c:3d:5e:87:dc:50:18:
         cc:51:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:58:43 2025 by rpki-client