Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa
File:                     897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa (raw, json)
Hash identifier:          v1T1RDrMWo0nfoi3d1VRjSKFRug4tpZGHV/bom5KQn8=
Subject key identifier:   59:F0:AF:66:26:C5:B3:CF:CD:42:07:28:60:80:FB:67:6C:5A:7D:3D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1BC327E4B462AAD46437EB0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa
Signing time:             Thu 24 Apr 2025 11:18:10 +0000
ROA not before:           Thu 24 Apr 2025 11:18:10 +0000
ROA not after:            Wed 23 Jul 2025 11:18:10 +0000
asID:                     12041
IP address blocks:        199.254.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:bc:32:7e:4b:46:2a:ad:46:43:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:18:10 2025 GMT
            Not After : Jul 23 11:18:10 2025 GMT
        Subject: CN=d21bbce6-5178-47b2-8797-6ce5ec8833e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:ac:67:c1:9a:86:2f:ff:40:11:04:cf:7d:
                    78:49:13:bd:e1:5a:97:94:7e:84:93:5f:6b:d5:43:
                    d4:b4:18:31:5a:90:b5:35:f3:29:53:10:f2:1d:24:
                    4c:d6:3f:76:12:96:93:f1:38:1c:6c:65:61:19:96:
                    5c:7f:32:7e:8c:82:ab:b5:1d:4e:1f:f7:ea:6f:92:
                    da:18:56:1d:3f:01:b2:bf:03:27:02:76:15:03:29:
                    01:74:ba:fb:bd:61:b1:8f:c3:a6:ba:55:99:bd:be:
                    41:2a:e4:1d:5b:a8:62:0e:8f:00:cd:7a:d6:6a:04:
                    e7:39:ca:79:b5:97:8e:9b:1a:b5:9b:af:95:e4:e1:
                    e4:92:d6:e0:47:96:34:7c:da:52:b4:04:66:b1:5c:
                    16:32:db:9f:e4:a3:f2:9e:d5:f8:1a:27:81:25:67:
                    76:64:55:d7:36:a9:51:f5:0c:70:5a:86:51:f2:b2:
                    71:ee:6f:38:b6:0b:06:66:45:2b:b1:ca:8b:57:f1:
                    2f:bf:f6:fc:b5:da:ad:92:87:8a:4e:c8:11:9e:a7:
                    2e:35:2b:23:8e:79:84:76:d9:82:e5:30:37:69:5b:
                    32:73:e7:70:25:de:f0:1c:4f:35:04:c1:3d:62:9a:
                    11:a5:cc:ea:ea:62:89:c8:1e:9e:47:d4:b8:04:1f:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:AF:66:26:C5:B3:CF:CD:42:07:28:60:80:FB:67:6C:5A:7D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:a4:ae:cd:77:df:f1:e6:03:2c:63:3f:ee:98:e9:82:30:
         82:e7:b0:99:5f:6c:48:29:af:3f:29:50:eb:d1:8c:ca:6e:bc:
         a2:56:3e:0d:f8:9d:51:38:7d:f1:46:3b:3a:8f:bc:3a:e1:f6:
         18:e8:3f:43:a4:ea:82:1f:b0:aa:e4:8e:9f:29:87:45:ba:27:
         b6:53:c1:3e:b4:d1:01:78:97:c4:6c:fc:ad:59:4a:a6:f0:d6:
         cb:c2:53:ba:c1:34:f7:69:66:c4:59:1c:f0:8a:5d:d2:13:20:
         be:d1:79:2e:79:fd:9c:b1:ab:af:86:df:0d:54:2d:03:78:58:
         0a:37:24:1b:b0:6e:65:46:e9:69:7f:df:73:aa:cf:69:6e:56:
         87:a1:4a:be:c2:30:8d:a3:9b:ab:23:f0:ba:13:02:0b:f5:4a:
         3f:f7:4d:2a:5e:5c:0d:d9:ad:89:96:6e:80:18:92:e6:85:e9:
         61:5e:5c:0b:7a:95:2a:a1:2b:59:b2:23:ac:cb:66:df:70:51:
         89:3d:fc:63:0a:e8:b4:ab:37:e9:bc:ae:ce:4c:53:ca:2f:16:
         95:cf:a2:77:d4:ec:66:99:64:22:d2:cf:95:2c:c6:a2:9b:91:
         69:bb:1e:1f:79:3a:05:ec:11:fb:49:c0:9e:eb:b5:42:ec:de:
         1d:1b:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:37:37 2025 by rpki-client