Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
File:                     459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (raw, json)
Hash identifier:          GWZduQWY/1vfvh+jQUohSVtex+0WtNWZM0NlWKAZluU=
Subject key identifier:   90:EB:65:19:9F:5A:3B:48:2A:62:1B:03:32:8A:D5:BC:B4:FD:C2:94
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F432858495ABECC0AE52ADD8582F8E050
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        204.122.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cc:0a:e5:2a:dd:85:82:f8:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=1446d17b-2a73-475c-855d-cc2bbb04b5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:90:6d:2e:c7:49:7e:40:29:81:80:96:02:
                    14:59:68:eb:2d:bc:1f:63:79:4e:4f:97:42:94:a4:
                    36:c7:c8:50:34:03:8c:40:01:cc:ff:0a:31:b0:9c:
                    57:39:f3:f2:38:b5:c9:70:5d:63:7c:6c:2b:4c:7f:
                    06:45:64:17:b3:a0:e5:28:a3:ac:e1:44:29:6a:24:
                    f2:b0:31:5d:f5:57:27:81:7d:47:fd:56:c6:31:df:
                    fe:1b:d6:83:f3:cf:48:56:72:ce:f7:00:f8:45:80:
                    98:c3:8c:c1:e6:dd:e7:19:ec:74:48:95:4d:ea:5b:
                    bc:78:bb:f3:f4:8d:64:0d:2e:b4:2f:b1:e6:10:c8:
                    f5:d6:42:a7:e2:e3:b3:f2:42:2d:3e:81:34:8b:98:
                    80:1f:03:17:1a:9c:96:01:0c:89:6a:f1:75:48:f4:
                    45:0c:a9:c4:1f:3f:06:b8:d2:c8:f0:60:e9:8d:e2:
                    7f:67:d5:45:43:72:b1:60:5b:4e:10:95:c0:e7:85:
                    6a:e2:3d:ff:12:58:b2:3b:f6:ef:02:e9:4a:76:b1:
                    c5:df:70:9c:ae:4f:15:de:ae:19:2b:91:10:2a:bb:
                    f1:dc:6b:cc:e7:5d:c1:6d:e5:83:96:56:4b:21:26:
                    1e:65:fc:f2:1e:80:3c:52:9c:78:e0:2e:20:9b:02:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:65:19:9F:5A:3B:48:2A:62:1B:03:32:8A:D5:BC:B4:FD:C2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:21:12:2d:45:84:3d:8f:7d:c1:86:d9:f1:f8:e8:dd:48:
         9c:3d:c6:11:16:51:82:75:a4:f0:ba:02:73:d6:ce:79:43:56:
         da:3b:d1:43:4f:86:04:64:5d:4c:68:aa:a6:ff:6c:98:bf:1f:
         76:f8:fb:64:14:b0:bd:aa:ec:51:7a:e4:e4:b8:a4:0b:84:d2:
         28:ae:48:a3:18:23:bb:4d:c7:81:8d:de:5c:4b:51:c6:55:a3:
         35:4b:b5:46:f5:43:87:37:09:fa:cb:66:78:50:22:58:81:f4:
         04:7c:d8:69:d5:cc:b8:42:08:1f:56:14:f7:44:01:4f:d0:24:
         39:a9:a7:15:5f:27:58:cc:ee:e5:a1:cc:fd:2d:70:1d:04:ff:
         17:a4:25:82:16:d5:8b:8c:25:a6:08:b0:c6:c5:55:cf:88:1b:
         8c:80:16:cd:69:b9:1d:7e:88:62:80:80:98:bd:12:1f:28:cb:
         24:c3:82:db:4b:76:4a:29:74:2f:6f:d3:75:83:66:0a:a8:07:
         16:1e:05:0c:30:8c:ba:ce:59:20:e5:4d:9d:79:27:01:2d:82:
         18:d8:75:32:b6:c6:af:14:e9:6f:d9:ca:ff:57:23:51:05:98:
         00:21:f9:be:d8:8b:87:83:17:b6:7f:a1:2a:be:bd:cc:9d:4d:
         a8:5b:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:43 2025 by rpki-client