Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa
File:                     5819b85c-1290-392c-af04-a578ef8c63f4.roa (raw, json)
Hash identifier:          BKTNA5evQcC4vWW30OTSvQXteBTGxp9Uw0W2S4zbiiQ=
Subject key identifier:   AE:D5:B5:DD:C0:6A:AA:C7:4F:5E:8A:2A:35:0A:DB:4A:70:42:FA:22
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285849AA4F67937A22BA5F7302CD40
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     16433
IP address blocks:        162.43.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:67:93:7a:22:ba:5f:73:02:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=b5a73d4e-dafd-4b93-b4ac-4d97a41232f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:2b:ff:33:cc:33:4b:5e:58:af:bf:3e:f3:
                    53:ec:3c:19:8d:48:a9:c2:61:24:4b:6b:79:e0:19:
                    78:f9:67:a8:90:24:41:78:c8:6a:fb:30:0c:cf:d0:
                    bf:6d:b6:0c:fe:0e:28:7d:d6:f7:c1:94:b9:61:d9:
                    05:60:cb:f0:75:cb:07:c8:79:67:69:dc:a2:9f:13:
                    36:df:5f:28:d4:22:bf:21:e3:f5:05:fe:60:54:bb:
                    91:8c:94:c2:86:2f:fe:ae:db:c7:b5:eb:09:ed:15:
                    dc:73:08:af:2f:93:8b:e8:35:32:9b:2d:ea:e1:d7:
                    bf:2f:81:5b:55:e9:78:dd:af:e3:ba:07:e8:01:58:
                    7a:17:69:c9:a4:08:5f:04:72:90:de:2c:44:9e:08:
                    28:ef:09:b6:f1:eb:cc:dc:da:70:07:63:28:f2:e0:
                    1d:04:85:6b:a9:8d:6d:f6:3d:8f:0c:aa:71:f9:f0:
                    18:6e:6b:fa:4a:21:38:4f:c7:6c:80:94:22:6f:f6:
                    3d:6a:a4:b8:e5:af:ed:80:a8:6b:c7:dd:01:20:ee:
                    f9:d8:ff:02:f8:f4:b3:63:34:ba:31:35:02:99:78:
                    a2:4f:5c:76:4a:05:b5:42:3a:6e:8e:95:1a:27:39:
                    50:59:6f:50:5f:59:9b:ef:9a:91:4d:0a:96:b8:3d:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:B5:DD:C0:6A:AA:C7:4F:5E:8A:2A:35:0A:DB:4A:70:42:FA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/5819b85c-1290-392c-af04-a578ef8c63f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cf:0e:44:7d:c4:4b:fd:fd:2b:dc:86:8c:35:92:6c:8a:45:
         e1:71:19:a1:a0:44:71:18:6f:17:aa:0a:bc:63:0e:33:5d:ed:
         a9:8e:3c:29:a3:3f:ea:17:4e:fa:e3:fe:27:58:c9:29:fa:74:
         f4:80:b7:4c:f9:63:7f:b1:04:36:2a:52:df:39:4a:a2:01:dc:
         83:e0:fc:1a:66:d4:59:b0:c2:6a:5c:3e:9d:af:01:8a:6c:1d:
         9c:b8:cc:e0:4d:19:28:87:06:4b:ad:39:d8:b8:d1:75:2e:12:
         18:f9:2d:0d:87:87:a2:fa:33:54:8a:7d:8f:c6:5f:ad:2a:b3:
         de:ec:e3:58:03:8c:70:3d:2c:7c:0f:56:21:92:73:7c:8a:85:
         fa:71:fd:b6:e8:d9:17:00:98:a9:6f:f2:39:ae:3b:92:21:21:
         2f:99:68:6b:10:a0:bd:3e:31:e7:0f:9c:c3:6a:41:7b:b3:9a:
         cc:56:7f:cd:8b:27:52:0e:17:2a:28:88:a7:71:45:9e:15:0c:
         c0:5e:1b:03:4e:85:d1:45:a4:2d:52:67:bc:7a:e5:d4:2b:e0:
         c0:a0:b5:78:55:e2:fc:11:a8:e3:77:64:3b:97:a5:a7:1e:29:
         7e:7a:b3:7c:13:5b:e2:03:bb:35:25:44:16:2c:47:76:07:a0:
         8a:f8:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:24 2025 by rpki-client