Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
File:                     ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa (raw, json)
Hash identifier:          laqoMqA4m6rCvwDtEURKYA0x2TZQ63+KJMduCeuj86U=
Subject key identifier:   96:A1:D1:4A:D7:CE:E6:3D:F4:20:A5:FE:3D:BF:43:F3:EC:97:0A:98
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F43285849E4EFB0E756D7845327F26F00
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        199.47.128.0/24 maxlen: 24
                          199.47.129.0/24 maxlen: 24
                          199.47.130.0/24 maxlen: 24
                          199.47.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b0:e7:56:d7:84:53:27:f2:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=666887b7-bbe5-42b0-8109-9831622cca14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:4c:1c:29:22:73:32:ea:11:ce:35:0c:f4:
                    a7:da:4a:e1:64:a1:0c:eb:a6:7c:34:5d:3a:0f:b4:
                    58:e5:4e:a0:41:3c:47:51:9b:e1:46:94:40:59:87:
                    e5:79:80:6a:65:92:ee:fd:12:67:d9:ae:b0:bf:16:
                    cc:53:97:be:45:3c:96:4f:9f:73:02:08:dc:28:4a:
                    d5:e6:5c:b1:56:3e:70:fc:52:1d:45:7a:08:c8:fe:
                    52:05:ca:8c:63:0e:3e:c1:cc:3d:7c:3e:03:3c:ff:
                    c8:8a:1a:6b:e8:13:6d:65:f0:28:84:4d:87:73:ae:
                    70:76:d6:ab:3b:64:30:f2:ec:92:36:03:d0:ac:a7:
                    ed:42:dd:54:c0:c6:cc:d4:89:01:21:ca:07:05:37:
                    75:c9:7e:31:6f:ef:76:cc:15:f3:0e:46:16:5c:3f:
                    23:d5:7c:59:7a:67:47:31:49:70:e7:c6:2c:33:77:
                    ea:3f:bf:6f:eb:85:b9:c0:30:cc:b2:2e:88:be:00:
                    a7:a4:96:45:af:20:0e:20:7e:28:ca:35:29:bb:f5:
                    10:bc:93:b4:f2:5a:01:34:9f:4b:7b:15:ba:01:6e:
                    71:6f:3a:fe:30:12:b1:b2:88:99:bf:9b:aa:4b:98:
                    be:e0:f1:af:e3:52:bb:25:e0:50:ca:df:8c:5e:7d:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:D1:4A:D7:CE:E6:3D:F4:20:A5:FE:3D:BF:43:F3:EC:97:0A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a7:4b:95:ca:2f:35:3f:91:9f:22:70:e5:19:c9:94:04:cc:
         f3:68:32:35:8a:08:ee:c8:af:ab:7c:20:9d:5a:8c:09:46:f1:
         33:5e:38:44:11:d4:d8:f0:79:ba:21:08:cf:d1:8f:34:11:66:
         3a:0f:c2:90:aa:a5:0d:45:dc:a1:0b:75:b6:52:47:c3:e1:13:
         6f:b5:3c:ed:ea:bf:e5:20:f3:68:6c:36:9b:97:2a:70:5d:74:
         6b:f0:f1:d0:5a:12:72:45:ad:ec:d7:29:e6:6e:0b:44:97:39:
         d7:86:5a:47:a7:c0:3a:df:74:02:3c:00:01:98:7c:89:5b:84:
         d8:6b:25:a7:e7:dc:f3:e2:98:4a:37:4b:63:78:b2:18:9e:59:
         e9:cc:6d:c7:0f:ff:4e:e9:46:e2:95:a7:0f:56:fd:63:88:4c:
         b9:69:25:4c:ab:f9:92:3e:e6:94:07:2c:a5:f6:7a:70:d3:69:
         9c:00:99:7e:51:77:79:31:c2:c4:d5:d3:4d:fd:d7:75:22:b9:
         57:06:95:e4:17:7b:6f:56:67:41:e7:61:2c:18:62:32:05:11:
         f3:e5:1b:c9:55:ef:db:0a:4d:39:c2:f6:a6:5d:ec:28:d2:d4:
         75:b4:e9:be:de:3d:59:27:ce:1a:2a:ad:0b:f5:26:70:a2:66:
         26:15:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:53:21 2025 by rpki-client