Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
File:                     7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa (raw, json)
Hash identifier:          c9l1zjgzCHXqDkaleiC3ssBgh58q1x6fXU2JqGRKw6s=
Subject key identifier:   0D:9C:74:60:66:30:23:0B:0D:A4:78:05:91:FC:C1:00:84:F0:48:0E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1BBA9392691923F601EEB40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa
Signing time:             Thu 24 Apr 2025 11:17:05 +0000
ROA not before:           Thu 24 Apr 2025 11:17:05 +0000
ROA not after:            Wed 23 Jul 2025 11:17:05 +0000
asID:                     12041
IP address blocks:        199.182.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:bb:a9:39:26:91:92:3f:60:1e:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:17:05 2025 GMT
            Not After : Jul 23 11:17:05 2025 GMT
        Subject: CN=f903d7c5-1766-4124-b7dd-e7580cce4d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:0a:bd:a8:94:17:98:c7:60:11:a5:bb:74:
                    9b:bf:63:28:bf:b0:5c:1f:b7:a9:1f:32:8c:92:c9:
                    db:58:7e:de:33:bd:ca:58:a4:ef:a6:91:59:bb:47:
                    a5:0f:00:cd:34:18:cd:59:90:89:48:24:11:2f:42:
                    c6:2f:80:19:03:35:27:2c:42:22:fb:cc:6b:42:41:
                    6c:46:67:b7:28:cd:5e:aa:7d:32:66:ba:3b:0b:31:
                    c8:00:92:22:32:41:8b:b7:37:38:8c:79:c5:4d:47:
                    1f:9c:57:32:e8:e4:fe:83:da:e2:6b:fd:e1:ed:2d:
                    a2:ec:42:78:65:f0:89:bd:37:1f:ea:98:14:ea:b4:
                    af:7d:24:bc:0e:f7:ca:c6:81:52:db:79:45:ba:ca:
                    14:93:f0:1b:71:df:6f:99:e8:1f:66:48:7e:32:a8:
                    a1:49:b1:b6:9b:5c:56:d0:4e:af:ce:46:10:05:78:
                    9d:14:3a:f7:be:81:ba:ee:5b:9f:a0:6d:2b:73:8a:
                    48:9c:24:55:53:d2:0b:1b:68:c0:6a:b8:ea:44:37:
                    37:5f:4f:ee:4d:74:5d:00:70:d8:a6:34:6f:41:2d:
                    de:36:c1:fa:5a:f2:f5:e5:8c:e8:19:1a:c0:c0:bf:
                    11:44:5d:09:31:38:e8:12:49:6f:4f:b3:5d:e3:e3:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:74:60:66:30:23:0B:0D:A4:78:05:91:FC:C1:00:84:F0:48:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7936d14e-f6c0-3ad9-8507-512cf6fd76a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:71:90:6f:ae:4d:33:f7:6a:ef:54:05:9e:3e:0f:85:12:24:
         60:50:e9:0a:a1:f9:89:f4:8f:6a:36:27:0f:8f:21:d1:db:db:
         ea:e6:b9:73:62:7d:96:0c:06:21:bf:d3:89:8b:78:39:03:20:
         25:56:22:ec:84:7c:00:6d:2b:ea:54:e8:ac:cb:8a:88:00:6b:
         c0:a5:c6:f0:e8:55:8a:43:b0:b0:d7:24:8f:0e:24:a0:c0:36:
         cf:d8:08:39:a9:1d:97:00:70:eb:00:df:5b:2a:59:0c:47:7e:
         29:52:cc:20:c2:b9:21:50:61:1a:45:cc:f9:3b:e7:5a:e2:47:
         d2:af:52:ed:f5:e0:8c:93:6f:cd:56:60:65:eb:42:67:72:74:
         dc:0e:63:02:28:69:ea:7a:7a:92:ee:80:79:fb:0e:15:bb:53:
         4c:91:bb:be:ff:c3:a8:ca:8e:e0:95:49:09:08:d6:61:66:c4:
         5d:d3:7a:be:dc:f9:01:c5:de:af:ab:0a:ee:ec:11:4a:29:e4:
         72:70:4a:16:e8:42:0a:6a:0b:b3:7b:b9:f0:30:28:c2:47:e9:
         15:44:b4:a1:ec:44:20:ee:4f:58:02:21:38:3d:0a:99:9d:50:
         73:05:55:a3:87:e3:3c:5d:8b:48:45:da:f8:a7:12:40:50:f1:
         88:7f:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:13 2025 by rpki-client