Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7426e25a-973d-36dd-b23f-81045251ef91.roa
File:                     7426e25a-973d-36dd-b23f-81045251ef91.roa (raw, json)
Hash identifier:          /FM9zbZxZU45UKdHPwYr9rp3zdNu1ZioR0XQKbHEFwg=
Subject key identifier:   EE:A1:AE:C0:85:6E:49:CF:5B:BA:33:B3:0D:EC:D5:87:91:61:18:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD1DBA8EB21B8F2D5BEF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7426e25a-973d-36dd-b23f-81045251ef91.roa
Signing time:             Thu 24 Apr 2025 11:52:15 +0000
ROA not before:           Thu 24 Apr 2025 11:52:15 +0000
ROA not after:            Wed 23 Jul 2025 11:52:15 +0000
asID:                     19905
IP address blocks:        173.19.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:1d:ba:8e:b2:1b:8f:2d:5b:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:15 2025 GMT
            Not After : Jul 23 11:52:15 2025 GMT
        Subject: CN=1e8cbfb9-d51f-4967-ac15-6f43131424a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:39:8b:df:67:cc:9f:19:44:3e:02:c4:7a:
                    a5:2e:7d:76:2e:78:ae:9b:e7:7a:05:1e:ee:4e:b9:
                    0c:e0:1a:a7:04:f5:53:38:77:66:21:cb:aa:fd:8e:
                    6a:72:e5:33:95:cb:4c:94:6e:85:36:ae:b2:ac:e9:
                    54:ce:92:1f:7a:19:ec:89:29:48:04:24:a6:98:dc:
                    97:82:17:4a:85:55:fc:f8:21:4a:a8:15:89:e9:2c:
                    6d:e9:db:8e:02:1f:cf:48:84:24:44:b6:eb:48:ed:
                    51:65:ac:57:49:a6:41:39:ed:da:d0:6e:e8:be:d0:
                    c3:d2:11:d8:2a:b6:22:ba:fb:64:86:37:d6:9d:c0:
                    99:ef:9e:dd:14:bd:34:99:fa:58:e1:c6:1e:8d:a6:
                    b0:67:f0:d2:94:1f:f6:5e:15:ca:d6:85:e5:30:46:
                    ac:c7:45:89:e0:e9:bf:2d:c8:0d:97:7c:76:82:4a:
                    54:1c:b7:53:6a:9c:48:b1:5e:4b:8d:a3:55:d4:98:
                    71:76:27:ea:5c:c0:9e:02:6a:bf:34:0d:0d:5b:9e:
                    5f:24:1d:a0:f8:33:26:ba:2b:5d:a4:87:52:d3:a8:
                    75:a4:1b:aa:8f:6d:3d:03:7c:5d:b3:42:80:ff:49:
                    d1:d4:77:63:e8:19:57:cd:21:aa:e1:12:1f:b7:5d:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:AE:C0:85:6E:49:CF:5B:BA:33:B3:0D:EC:D5:87:91:61:18:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7426e25a-973d-36dd-b23f-81045251ef91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:9d:22:03:59:ba:be:97:77:c1:25:46:4f:6d:7e:9f:6f:
         1a:aa:80:9c:ce:a9:f0:58:aa:32:5a:87:64:1f:83:90:ab:53:
         4f:5f:fb:f8:cc:d5:cc:2f:1b:3f:1e:40:d3:19:b0:e9:17:e5:
         6d:e2:c8:ab:3a:36:32:1e:d3:c5:49:43:2b:47:91:f1:26:72:
         64:c9:45:0d:4e:35:f5:67:e0:16:6e:e7:6e:3d:fe:97:0c:93:
         00:aa:24:b7:94:79:ca:2c:11:d1:ab:3c:29:4d:0c:6e:29:69:
         11:b6:38:a1:ce:84:49:01:3c:11:71:6b:e3:3e:76:08:be:dd:
         9d:24:fc:cf:a9:b8:dc:bc:1d:db:d7:bc:18:a6:50:7d:9a:32:
         05:87:79:f4:59:95:f5:a6:03:16:92:8f:2b:4d:a2:07:18:22:
         81:08:56:c9:2d:2b:d3:c4:10:80:62:ab:ef:89:f1:70:5e:05:
         1b:9e:8a:57:2c:03:d5:1a:86:7d:ef:cd:9b:16:33:cc:5e:dd:
         66:c0:e3:bf:64:90:29:41:0a:7d:cf:83:0d:b0:3f:2a:cd:49:
         8e:6e:b9:35:c5:28:11:20:73:05:77:f0:0e:cd:06:fa:27:d5:
         ab:cc:97:b8:e8:50:f1:12:db:62:80:5d:7e:3f:9a:66:a5:d0:
         73:ab:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:32 2025 by rpki-client