Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa
File:                     8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa (raw, json)
Hash identifier:          JuvNYs+j5zClyXTOkAFPthGGjHrYU5UejwwuOlgtgas=
Subject key identifier:   E3:D0:92:97:6A:EA:D3:69:52:97:39:5E:88:96:2B:5B:B4:3A:4D:EC
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F43285849D1650970DD94FF65F555E500
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     13813
IP address blocks:        199.19.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:09:70:dd:94:ff:65:f5:55:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=d580488f-947f-4141-9529-ffae9ad1ab06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:69:18:01:be:2b:a5:38:b3:4a:28:9f:20:
                    95:ea:1f:84:ea:e5:fd:0f:d9:14:46:9f:61:4e:4f:
                    9c:2c:ec:82:09:bc:69:90:73:04:4e:52:1e:84:72:
                    e8:16:3a:c0:65:33:df:5d:de:88:ca:fc:9e:82:b0:
                    fe:9a:54:23:ee:4f:3c:70:55:4d:88:da:ed:f9:64:
                    f5:db:18:28:ef:87:6f:74:c4:c3:7a:c4:71:be:fa:
                    e9:41:63:4c:9d:38:bf:9e:a8:b6:d2:d1:4c:21:c7:
                    0c:de:69:6d:bc:15:46:f2:39:f0:11:93:f0:ff:5d:
                    7a:14:6a:f2:4b:57:f8:b9:29:3c:38:43:53:37:5e:
                    49:38:9f:47:03:ee:b9:2c:d1:e9:db:59:e8:03:09:
                    18:64:63:d4:31:b6:bb:fe:cc:ca:a5:25:c8:f3:b6:
                    6c:22:14:3c:68:a6:1b:ac:4c:38:2f:59:98:7b:4b:
                    09:af:8f:e8:96:5b:01:3b:0a:b2:80:0a:8d:ee:f1:
                    65:c1:e4:04:b0:e6:c8:c8:50:1e:3e:25:be:f0:78:
                    c6:fd:e3:0e:e2:1b:14:3c:0f:95:56:c9:ea:1e:4b:
                    0e:17:b5:1a:49:1d:6e:15:d3:c7:1a:de:60:15:c3:
                    28:85:d2:9f:80:78:09:36:98:1d:b1:1e:cb:03:3b:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:92:97:6A:EA:D3:69:52:97:39:5E:88:96:2B:5B:B4:3A:4D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/8ee9e17d-abc8-31b9-a1e8-0b48a2e69622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:d1:93:4b:5c:31:f6:22:de:3b:e6:95:0b:ca:f2:2c:d4:
         e6:99:43:da:a0:db:72:5c:85:be:81:26:44:5d:fc:ba:f6:ff:
         96:1f:5a:ae:2e:5d:0c:9d:0b:00:59:b4:a0:07:ad:82:85:7f:
         64:59:46:18:58:f2:5e:6c:a4:e1:a4:f4:6f:40:f3:e7:af:e9:
         b7:49:e8:6b:e6:6b:41:3b:bc:6a:6b:df:33:2a:f6:89:ce:3d:
         13:cc:44:d6:9a:7c:00:61:a1:60:92:56:9a:73:50:86:87:5e:
         67:5b:7c:19:89:76:c1:3c:e3:d8:41:df:c7:6c:3e:3a:c7:fc:
         66:da:f7:4a:8d:14:36:e2:31:4a:fa:d9:d0:a8:c0:b3:ca:01:
         c7:b1:43:ee:ac:74:e1:7e:da:dd:4d:21:24:68:e4:77:b7:1a:
         59:d9:7e:d6:20:a0:c8:33:2a:19:72:d1:f4:55:09:45:5a:66:
         82:54:38:47:e0:27:52:5f:76:7a:bb:d1:da:fa:ec:b4:c7:22:
         84:91:2b:8b:96:e3:70:5c:ac:c4:5f:4f:b9:b0:c3:56:46:05:
         6a:08:fe:77:41:9b:e7:20:02:58:ab:e4:ff:1d:3f:5a:9f:4f:
         7e:7e:8f:60:99:62:a2:c9:9e:0c:d5:ee:24:e1:b0:38:f9:d3:
         c7:4c:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:48:54 2025 by rpki-client