Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa
File:                     5f969a12-5cb2-36ef-aaab-e4b979add84d.roa (raw, json)
Hash identifier:          yt1Ej5C7PKJP5bUrzJduKMcoJyHa2RslNof+nf25sTE=
Subject key identifier:   7C:DB:5C:85:9F:45:C6:0C:32:29:1B:97:73:09:0A:33:92:59:F6:5C
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285849A61F43591FBEF6A254C29040
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     10430
IP address blocks:        68.179.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:43:59:1f:be:f6:a2:54:c2:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=bd7bd5ee-5f11-42b8-b1f3-f5b4947b51af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:0e:e7:f7:10:bd:d4:87:4c:05:c4:94:ef:
                    84:5b:94:a6:d9:1e:b8:17:0c:43:97:b6:11:f0:06:
                    b9:d2:cf:f0:0a:6c:b5:fe:cc:72:2e:d4:c6:a9:cd:
                    35:76:d7:20:8e:1f:c0:9c:68:6f:bb:1a:48:e0:82:
                    30:7a:e5:87:95:b6:80:29:3a:9d:0c:a3:1a:72:72:
                    e2:5b:69:35:e8:f5:02:9a:ec:92:8b:79:1b:ae:c5:
                    61:34:5a:d3:10:80:4d:58:99:c3:c3:56:e1:7b:d1:
                    22:b9:17:69:f0:35:0a:a9:a9:3f:1f:15:2b:a1:3a:
                    a8:8a:c8:d6:a0:a5:2f:81:b6:a4:0a:6e:78:cb:98:
                    a8:1b:c4:fb:a5:61:ab:06:69:40:f4:2b:cc:6b:a2:
                    23:9d:4e:9c:58:01:19:55:1b:37:c6:b3:67:47:fc:
                    f0:74:98:c4:35:3e:bc:66:e9:d1:65:27:62:b7:25:
                    86:8c:5a:8c:31:5d:bf:e3:b6:56:34:59:fd:16:29:
                    4d:13:d7:8b:d9:51:f4:34:98:15:ba:cd:e2:ac:7c:
                    b3:c9:a6:84:3c:05:e4:36:94:5b:45:51:c3:19:b0:
                    11:0e:c0:dd:4a:05:af:37:26:2c:9d:bf:37:71:87:
                    d2:1f:fc:6f:b0:19:52:ad:ee:c4:d1:39:d0:12:94:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:5C:85:9F:45:C6:0C:32:29:1B:97:73:09:0A:33:92:59:F6:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.179.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:1a:32:cc:95:7b:9b:46:65:0b:76:d1:d1:64:1e:5a:53:
         9e:bb:28:86:41:ef:20:51:43:de:21:3e:b6:60:8c:03:f1:8d:
         17:16:86:2d:e7:11:c4:1e:52:c9:1a:e4:55:8f:51:20:50:ee:
         42:35:04:40:28:42:7c:09:53:6a:94:af:1d:6f:ae:9b:68:67:
         b9:b8:85:9e:07:9e:33:d4:58:55:28:e9:72:53:c2:66:af:03:
         bd:2d:2d:af:e4:f7:4d:18:36:7c:55:2e:4d:4b:f5:6c:ea:e9:
         a7:ef:a5:51:10:dc:dd:c0:1a:83:49:0c:20:d2:01:65:dc:73:
         15:73:ec:69:4d:af:3e:8f:7b:0c:c2:b5:0d:12:ca:0a:20:75:
         82:5d:58:a1:25:39:3d:91:36:23:5e:39:b1:be:23:94:7f:44:
         cb:61:cf:41:4d:78:24:ab:d4:d4:ac:85:5d:52:5c:c7:46:64:
         9e:7c:ab:33:97:40:1e:df:6c:73:6f:95:0d:c9:a3:52:f9:85:
         96:e1:4c:de:a2:44:05:62:ec:9f:58:6a:31:ca:6c:a8:48:98:
         63:22:3d:4f:3a:7f:59:31:d6:5d:a6:ad:c1:0b:fb:0a:72:6f:
         60:a3:07:f3:5a:45:a8:cf:4d:b5:a8:5e:f3:36:2d:33:e9:6f:
         2b:71:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:46:12 2025 by rpki-client