Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
File:                     0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa (raw, json)
Hash identifier:          6KyXqQ6vzEYvfwTYUeSg6j0kTD5MFItKFvrj0OUV6Pk=
Subject key identifier:   37:CF:A1:4E:BF:AD:06:AB:90:60:6F:9C:60:F9:D7:0F:CE:6A:FF:3F
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285849E22529C82309FD11F5440200
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     10929
IP address blocks:        199.193.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:29:c8:23:09:fd:11:f5:44:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=a6e0623a-08f4-40c3-9015-a8df3e0810c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:7f:73:5b:18:c3:a9:73:23:c9:d0:c3:7d:
                    f3:74:b9:aa:78:64:cf:dc:24:30:6c:8e:1c:a1:aa:
                    e5:72:72:11:40:8a:a3:fe:33:09:20:1d:8d:39:a1:
                    12:32:24:4b:83:cb:cd:7c:a2:0a:69:55:3c:11:29:
                    8a:31:42:fe:2d:c8:c6:9b:cd:9d:7d:50:aa:3c:66:
                    84:78:fa:98:ba:6b:ae:c1:52:2a:62:ef:b4:04:68:
                    46:cc:ea:45:9a:a3:0e:32:50:ef:46:4e:2a:04:b1:
                    53:f7:1a:61:df:d1:f7:02:d0:ea:06:7a:af:20:fa:
                    15:91:d6:c2:00:20:87:62:bc:51:f6:dd:11:11:2a:
                    9b:e2:2b:3b:73:6f:40:3e:76:4f:66:1c:63:20:d3:
                    a9:b0:96:3a:0f:b0:78:81:14:fd:d2:2b:ab:95:f9:
                    4a:45:71:0f:4e:e1:6c:4a:69:60:84:4f:4c:20:b1:
                    79:86:42:68:06:de:81:90:27:f8:90:2e:7a:13:6a:
                    54:b0:2f:5e:c7:0d:fe:73:b4:41:79:c1:c7:6d:0d:
                    e2:58:fb:3f:ff:85:c9:60:30:6b:25:5a:62:51:e0:
                    a9:6e:17:6e:e4:62:0d:d5:d4:ec:9b:9d:27:8b:9a:
                    b5:55:8d:90:b0:2c:98:87:65:aa:cd:a4:c6:85:ea:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:A1:4E:BF:AD:06:AB:90:60:6F:9C:60:F9:D7:0F:CE:6A:FF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:3c:a3:71:19:79:35:1e:b2:71:3e:fb:56:8e:fb:7e:74:
         82:92:34:9a:57:8a:27:4b:c0:ce:bc:1c:bc:0f:66:52:95:ae:
         e0:ee:1d:db:37:ea:87:e4:f4:85:d7:54:82:6d:ad:59:29:4d:
         71:f4:26:37:97:ef:b5:db:d8:f0:ab:76:2a:99:7d:75:69:e8:
         1e:4b:23:fe:bf:d3:ca:51:a1:c4:e2:c1:cf:da:dd:f9:09:80:
         90:58:e6:51:06:87:5f:ff:91:4b:63:9b:27:61:65:8e:2c:95:
         fb:6a:07:6a:70:89:89:06:14:e8:51:8c:3f:a9:6f:0e:6f:0f:
         ea:41:54:68:39:a2:08:16:e3:0f:57:63:89:b8:e9:71:a8:83:
         b7:3f:24:d2:b8:f8:05:ce:3a:d5:11:70:e7:a6:03:be:86:5a:
         10:54:23:91:47:97:8d:08:d4:a2:dd:44:e1:4d:1b:d5:a5:f2:
         24:b5:66:49:52:16:f8:1a:c3:66:e0:45:19:78:f4:15:ec:84:
         05:d8:2c:ac:6e:e8:57:6b:ae:ea:b2:9e:a9:61:bd:cf:f0:a9:
         a2:b2:88:4f:40:9d:8d:f0:78:5b:a2:cc:e8:1f:28:b7:aa:df:
         2e:2d:08:4d:54:58:a9:22:c1:80:00:8a:45:25:c0:92:dc:ae:
         40:fb:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:16 2025 by rpki-client