Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa
File:                     1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa (raw, json)
Hash identifier:          gVjirhJX6pxjx3n69n2rYQxcBdJlWJgW42D/1fcuoGY=
Subject key identifier:   AB:3C:AD:87:3E:6F:67:AA:8C:9F:EB:9C:00:19:13:AC:56:42:C6:A1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA354509A03C5892C766C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     47065
IP address blocks:        199.36.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:35:45:09:a0:3c:58:92:c7:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=fe3022e9-b070-4b8b-ba45-ff6c4b523673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:95:c6:fb:56:b0:87:27:69:9c:65:66:91:
                    5d:0b:42:4b:3a:cb:2e:1f:0a:80:94:af:a9:e3:ae:
                    3d:c2:29:bc:68:2b:3e:eb:ca:ff:ed:c4:3b:33:a2:
                    67:4c:32:c1:46:e0:e5:79:04:3e:34:c2:2b:d3:de:
                    99:e1:74:6d:bc:b8:e1:19:ba:0e:3d:35:c2:71:20:
                    56:b4:ac:9f:0b:42:15:aa:f3:e4:2a:0c:b2:e1:a1:
                    46:be:cc:93:16:24:b1:db:cf:3b:de:1b:4d:fb:c8:
                    27:40:8a:61:62:e4:ee:ca:a4:72:8d:60:76:7c:52:
                    90:63:99:8c:d5:ff:19:c5:30:1c:3b:92:08:8c:a3:
                    c7:f5:b4:ef:07:67:83:92:ec:a0:bc:9f:23:cf:2f:
                    10:41:52:ff:39:9a:07:7f:07:dd:8b:17:3e:af:c7:
                    9f:01:aa:90:9e:cd:62:5b:d9:46:74:3d:62:2e:6c:
                    90:8a:f0:5c:7c:b5:12:4b:aa:1c:da:86:68:2f:f9:
                    c5:cb:89:a5:9b:bb:52:87:52:bf:2b:5e:2f:88:3c:
                    6f:08:83:47:37:db:99:d3:3a:06:2d:c9:cd:6f:3a:
                    2f:2e:bc:d6:a5:04:de:71:93:f4:34:ad:ca:77:9d:
                    9b:ff:28:ba:c8:55:0e:b5:35:33:1c:4e:31:71:25:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:AD:87:3E:6F:67:AA:8C:9F:EB:9C:00:19:13:AC:56:42:C6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b6306bb-908a-35bd-bde1-32ffee8aedf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:a6:64:e6:1d:4a:95:f9:81:98:88:11:7d:2d:b5:ba:79:
         df:af:2b:a6:2f:02:d3:4f:8c:fe:93:5d:65:83:96:6f:17:85:
         f5:06:a0:fa:8e:d4:8c:35:ee:4d:82:33:c4:f0:1f:59:49:80:
         54:4d:1f:07:c8:37:84:98:4f:9b:54:d2:9c:f8:93:24:58:b2:
         02:66:1c:08:bd:8e:00:6c:ec:22:80:76:66:82:9b:51:38:65:
         02:a8:79:d6:2f:7f:74:66:73:50:20:1a:c2:83:38:ec:8c:8a:
         76:f3:6a:3c:b0:29:6f:06:4f:0e:cf:78:7c:32:b4:56:d5:1a:
         fc:c0:e5:ca:bc:2f:f7:1b:7e:8c:4a:c6:3f:80:de:5d:a5:ea:
         93:78:23:03:44:47:39:d0:79:9b:80:f2:a1:9e:5c:61:6f:d4:
         71:48:c4:55:a3:d8:e6:3e:e0:98:c5:74:ec:f1:d0:ee:ec:69:
         89:4f:bf:c8:8d:f5:fc:18:87:5e:b8:2d:bb:b5:89:97:9e:54:
         06:2b:11:87:5e:4a:d9:7e:ee:24:8e:20:a3:20:dd:8c:74:33:
         53:3a:b6:93:20:9c:81:aa:68:c9:2e:ee:ac:8b:fa:ff:38:b1:
         ab:fe:cd:a4:f7:c1:c6:65:23:b0:8c:c7:02:a6:58:db:6e:47:
         c8:9b:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:25 2025 by rpki-client