Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cecaca9-b969-3638-b569-6694216edc52.roa
File:                     6cecaca9-b969-3638-b569-6694216edc52.roa (raw, json)
Hash identifier:          D166qVYWBCSxMsp3bPg0kCE5/ErJhLIahoVXu8B2lDg=
Subject key identifier:   AA:EC:E3:48:37:DD:0A:27:8B:CF:11:6E:22:BA:52:1D:3E:5A:5F:FF
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A212C3579E2037E786E28700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cecaca9-b969-3638-b569-6694216edc52.roa
Signing time:             Thu 24 Apr 2025 14:12:35 +0000
ROA not before:           Thu 24 Apr 2025 14:12:35 +0000
ROA not after:            Wed 23 Jul 2025 14:12:35 +0000
asID:                     207266
IP address blocks:        199.182.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:12:c3:57:9e:20:37:e7:86:e2:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 14:12:35 2025 GMT
            Not After : Jul 23 14:12:35 2025 GMT
        Subject: CN=d73dab6b-2405-47a1-9060-e2452bae80e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:52:0f:ce:65:5f:ba:b9:a6:8a:7f:b6:d8:
                    c4:22:d4:17:fe:37:c8:79:dc:4b:22:31:5c:84:bc:
                    f1:47:15:f1:34:b0:25:1c:da:cb:5c:03:db:c2:6d:
                    6a:e0:67:0e:b4:da:5b:dd:55:6c:29:d8:5d:cd:ad:
                    82:e4:99:88:f0:fd:f4:0c:dc:24:1a:71:87:35:ba:
                    f6:ec:ba:58:12:ff:97:8d:07:2e:53:cc:07:27:00:
                    89:5c:05:f5:22:a5:1f:df:ab:e8:7e:90:07:41:58:
                    08:24:34:a2:cd:be:7c:47:f7:bb:0e:17:2b:de:5a:
                    c1:34:26:3e:82:87:99:81:6e:25:97:6f:73:1d:5a:
                    ac:ed:45:df:a1:1d:05:86:13:14:33:e5:83:e0:c5:
                    11:c3:1e:3f:c1:4f:9a:c5:fe:9a:db:bc:8e:69:60:
                    df:ce:70:47:19:7b:c7:08:44:73:15:7b:37:16:81:
                    83:a5:35:82:b2:a4:34:9d:c5:8e:5d:a3:94:36:e1:
                    8d:18:da:26:f4:56:98:66:7b:69:b7:2a:2b:88:2b:
                    f4:27:42:ab:4b:d9:66:a8:89:53:75:e3:b2:0e:6c:
                    92:5c:52:94:34:56:e9:c7:47:d8:9e:7a:ed:38:a4:
                    62:4d:34:a9:47:10:21:a8:2c:7e:8c:29:f5:e9:4a:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:E3:48:37:DD:0A:27:8B:CF:11:6E:22:BA:52:1D:3E:5A:5F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6cecaca9-b969-3638-b569-6694216edc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:c1:7e:3c:f7:11:c0:8f:01:b6:06:d4:6b:62:2e:46:9c:
         85:c1:91:00:54:9b:34:b4:cf:1b:18:0f:f4:e2:9a:33:a4:9f:
         f9:44:34:d8:b5:c0:2f:42:ee:97:c0:3c:c5:0f:88:43:d3:ce:
         b9:26:07:67:82:02:49:3e:df:7e:91:73:ca:fc:4d:aa:53:98:
         a0:b2:07:44:48:88:ea:d4:74:fc:e9:f7:11:b7:22:63:f0:4f:
         f9:61:87:40:61:df:fc:5f:06:01:8d:68:ae:f6:7b:08:1d:17:
         5c:92:d8:4b:83:40:14:50:09:f4:eb:73:fa:84:04:1e:d9:59:
         f8:6b:b6:ca:68:07:1b:00:1a:66:cf:03:9b:05:e8:dd:5f:1e:
         e5:56:1f:d7:36:a1:c1:61:66:f2:e6:d8:23:5e:c2:e4:d6:dc:
         ca:41:85:20:a3:62:c5:50:69:06:c2:7a:d8:c3:31:be:61:d7:
         70:08:87:1a:9e:14:73:3a:97:99:bc:88:da:0b:01:6d:5a:50:
         a7:d9:94:88:8c:b1:53:80:b7:b1:e0:79:56:7d:37:d5:e7:05:
         0b:ca:77:8d:1e:9c:90:0e:3e:90:09:d1:72:e9:77:de:13:0b:
         03:8d:04:ff:36:a0:f9:9d:24:71:2b:bc:a9:6a:42:d8:6a:e8:
         8f:9e:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:24 2025 by rpki-client