Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa
File:                     90774b9d-bc67-3fb5-969b-6254017ec651.roa (raw, json)
Hash identifier:          ITumpSLacO7Qxk2a6FgGqeGvovauLPRpAR1cGHVI53o=
Subject key identifier:   A9:8C:4E:29:89:3B:99:09:F8:9E:FF:25:F5:B0:50:ED:AD:1B:5C:56
Certificate issuer:       /CN=1380a44d-7851-4eb6-8887-413917dcdc12
Certificate serial:       010D0C9F432858496CE45954DA86A4F2F507E640
Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     31972
IP address blocks:        199.101.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:59:54:da:86:a4:f2:f5:07:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=1bdd4610-56ac-4c40-9f4d-73ef8f2ce7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:90:a8:1c:77:d8:bc:ae:88:57:2c:45:26:
                    87:40:ff:12:06:56:7c:0e:3e:42:96:0d:3e:0e:13:
                    6a:c9:96:7d:52:ed:ba:cb:32:c7:a0:eb:09:d1:59:
                    f0:34:73:d6:ab:73:c3:b0:85:44:d9:12:ec:98:d6:
                    41:80:cc:a2:cb:a4:5a:09:36:26:78:47:78:e1:30:
                    63:33:ae:9c:01:42:06:7d:a5:97:ee:a8:0b:d3:5e:
                    60:06:3b:b0:e2:79:e8:3e:6f:90:0f:14:98:58:a7:
                    17:5b:17:7e:a9:7a:9e:ad:a3:25:e6:c1:45:71:fe:
                    a8:95:0d:67:1f:ab:c1:35:fb:4e:6c:8c:66:20:23:
                    fc:b1:bd:3b:5d:0d:f4:b8:fc:a8:87:35:e3:f7:fa:
                    fb:f7:4a:4b:b4:ef:dc:29:33:83:6f:60:cc:b9:e6:
                    37:db:ae:53:81:c9:51:57:21:7a:5c:f6:2d:bb:fd:
                    99:a5:f4:02:cb:c7:56:14:96:e2:81:1c:53:cc:7d:
                    eb:33:e4:aa:39:77:1c:c4:3b:02:fb:3c:11:00:4c:
                    3d:91:f6:f4:a5:85:10:76:3e:a8:0e:f0:b4:0f:b2:
                    db:76:ca:35:4e:3a:93:92:f7:9a:ab:71:74:fd:bc:
                    d3:b3:32:00:47:5b:4a:71:ef:89:ed:f6:23:c6:e5:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:4E:29:89:3B:99:09:F8:9E:FF:25:F5:B0:50:ED:AD:1B:5C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/90774b9d-bc67-3fb5-969b-6254017ec651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl

            X509v3 Authority Key Identifier:
                keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:52:56:b4:1b:36:58:76:55:ed:61:3f:ca:37:28:0e:f6:63:
         29:34:f1:56:ed:54:f1:44:d7:12:db:e8:85:9d:cb:a8:44:6e:
         a2:21:38:5b:32:bc:cd:f5:fd:ae:17:6a:89:db:05:a4:9d:27:
         63:8f:7a:23:96:da:ca:69:70:c6:88:fb:aa:57:03:d4:80:6e:
         94:dd:42:2e:91:af:f7:c5:d7:b4:72:70:6f:f2:37:75:af:8e:
         5d:84:a2:15:bf:14:60:63:01:82:ff:c4:2c:b5:a8:bf:6b:bf:
         47:bf:63:70:14:74:1d:83:0e:d4:61:c5:b5:8c:a0:89:79:f3:
         b7:6a:96:ab:aa:59:4c:42:22:0e:48:2c:1a:3b:b2:b2:e9:91:
         ee:33:ed:be:2d:92:c4:c7:de:60:56:46:02:46:f0:e0:69:42:
         d8:9e:64:83:c7:48:f9:c1:64:c2:52:39:26:87:a9:dd:be:56:
         0a:04:68:0d:b0:d9:6a:98:3e:e2:d8:0b:ee:c9:d6:92:9b:8f:
         e6:25:7a:5c:b1:2d:da:47:24:4a:af:fd:1d:ad:e4:ff:4a:fa:
         57:2f:94:f3:87:6c:ac:92:db:92:78:a9:f9:83:e4:e8:e1:e9:
         18:fb:fe:87:c1:22:58:76:ba:59:4c:4f:c9:e7:b1:30:92:9c:
         e7:fd:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:40 2025 by rpki-client