Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
File:                     307496da-fe61-363a-a8e1-2546045308d5.roa (raw, json)
Hash identifier:          5xF2Nbmh3e37K9qxxkrTFZJMPoyLslyGYk6e/iZ6gnM=
Subject key identifier:   09:C6:3F:DC:8E:0F:87:9D:09:51:E4:2F:9A:7A:EC:40:C7:EE:1E:1C
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849D594E6F2A85F637A3EBC6B80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     12129
IP address blocks:        199.249.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e6:f2:a8:5f:63:7a:3e:bc:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=6225f5ef-218b-4e25-9c95-9eadb0c565d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:c0:31:13:ae:d0:8f:b7:35:32:6a:a5:9a:
                    ce:bd:1f:56:9a:f8:93:5e:4e:40:d8:e4:3f:6a:b2:
                    b4:ac:3b:e3:b1:43:21:e6:0d:04:c9:28:6d:c4:72:
                    f1:51:a5:86:73:a9:4e:00:7f:e8:b6:d3:bb:0f:46:
                    38:50:ea:cc:ba:46:1f:e1:c1:8c:31:b2:b4:de:40:
                    c3:9b:62:c9:23:60:cb:51:ea:8c:cf:71:38:a7:50:
                    4b:08:95:e2:b8:e1:ee:96:b0:14:06:0b:9d:4c:9c:
                    f3:b2:6d:4b:06:24:20:e0:02:3f:0d:6a:0b:f4:10:
                    34:a1:44:77:fd:2d:12:a7:c7:dc:c8:4a:81:71:69:
                    c7:8b:a5:89:6e:eb:20:bd:33:89:08:71:02:78:d7:
                    78:c9:5f:db:ab:e1:48:3b:1f:bd:e5:7b:ef:64:02:
                    7a:8a:7d:7b:a3:fc:cb:f3:12:3e:fc:71:47:89:c5:
                    8c:75:12:c0:84:c4:38:38:18:d8:31:58:03:ab:95:
                    6d:b5:e9:83:eb:3c:98:f0:99:ae:62:22:14:3f:3e:
                    11:cd:2e:77:82:9e:cb:ac:b0:22:e9:cb:bf:fb:08:
                    e5:c7:a1:6b:e2:9f:0c:3b:b5:1e:44:23:29:02:a2:
                    71:8e:f6:cf:04:6a:d9:87:4e:31:3b:83:87:6d:04:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:3F:DC:8E:0F:87:9D:09:51:E4:2F:9A:7A:EC:40:C7:EE:1E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:63:f0:d0:c5:7e:31:76:a2:2b:c9:4a:0c:d9:f0:a5:3b:ae:
         d2:10:d8:e3:a1:3c:94:22:c5:c3:47:e2:c9:60:39:90:ad:65:
         4e:c4:56:dc:c7:2e:57:84:ff:d7:90:f0:47:d3:26:15:db:93:
         26:28:35:ae:a5:80:b6:6f:c9:35:66:27:9c:04:74:d9:bc:46:
         31:2a:e3:c1:48:39:ca:17:aa:8d:8d:86:89:69:dc:c0:81:19:
         a3:c7:13:3c:b4:ea:f3:9a:06:35:a8:51:6e:76:ed:ca:cc:2c:
         09:fb:92:b2:29:82:34:8b:e3:3f:6d:9c:52:5f:aa:d1:ae:b9:
         ae:ed:ae:9d:d0:af:9f:07:2b:c4:44:c1:d3:32:0c:30:a0:98:
         b6:c7:fe:20:b4:c4:60:cb:78:44:33:2a:13:19:82:02:d9:51:
         f2:6f:0e:d9:e9:17:00:d4:43:da:d4:34:f0:5b:d3:9a:15:c4:
         ed:61:b5:9f:90:38:76:01:a2:f0:d4:e2:c4:7a:3f:ae:60:7c:
         a4:c8:f7:ee:81:0d:fb:e5:d7:97:1d:55:5e:de:3e:cc:98:67:
         63:38:9b:da:f8:d9:29:71:b7:06:d4:c0:7a:fc:c3:a6:25:87:
         ab:42:36:a5:13:35:db:8a:b2:a8:50:a2:c7:82:cd:8f:8c:02:
         c8:2d:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:10:02 2025 by rpki-client