Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa
File:                     94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa (raw, json)
Hash identifier:          rl/JbHLA/dZotc500l3JJbbFZB00gqdkxz41hCuELq4=
Subject key identifier:   C4:F3:03:02:25:6B:52:EE:80:DA:04:FA:E5:26:B3:D3:89:1C:40:CB
Certificate issuer:       /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
Certificate serial:       010D0C9F43285849BDDA3BBF511925B753BCBF00
Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     26938
IP address blocks:        199.47.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3b:bf:51:19:25:b7:53:bc:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=32948286-5537-4be2-8040-131ff9673499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:88:b9:75:d0:3d:f1:96:24:cb:61:4e:25:
                    45:8e:67:27:ab:03:cd:94:10:39:ae:60:24:64:c9:
                    56:60:92:fa:41:c7:1f:d2:1a:34:d4:79:58:0a:14:
                    fb:be:46:c4:13:a0:2c:ad:1c:a7:e5:46:3b:6a:55:
                    da:4c:fd:af:a7:d2:72:96:ef:05:0b:0d:16:41:ba:
                    65:7d:ac:ea:29:ac:a9:b8:38:48:50:ba:b4:9a:80:
                    6b:54:fc:ca:55:83:4d:fe:eb:e3:4f:5b:4d:f8:1f:
                    5b:95:67:80:05:b5:98:13:d0:1e:25:dd:12:aa:00:
                    ca:7b:bb:91:3f:ee:fc:34:5b:ae:73:85:3c:f9:cd:
                    00:5e:fb:92:e8:f8:26:8b:10:41:d8:5c:32:9f:91:
                    04:f4:b3:c5:90:d1:20:b8:3d:ac:5e:49:f4:9b:70:
                    1d:25:87:c3:ae:cd:15:68:ce:5e:59:80:15:0c:74:
                    f8:b8:8b:87:20:d6:58:ca:80:69:43:99:b4:75:82:
                    5f:02:ad:bb:01:8b:18:05:64:0d:46:fc:af:62:0e:
                    f4:eb:df:bc:f2:a9:e0:42:1b:37:4a:05:38:17:d6:
                    38:a8:fb:5c:68:f0:6b:34:16:7c:4b:dd:b4:2e:29:
                    1b:e9:84:dd:45:dd:ba:d1:0d:b5:01:02:9a:13:d7:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:03:02:25:6B:52:EE:80:DA:04:FA:E5:26:B3:D3:89:1C:40:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/94dd1d9f-3480-30ce-91f9-0b243e4cec0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:69:f7:33:42:9f:97:93:9d:6d:9b:0e:28:70:41:0f:5c:69:
         95:e0:3b:4a:31:d8:9e:fd:b8:69:84:81:9e:3f:cf:30:4c:11:
         aa:0e:19:71:0a:72:79:8f:b6:40:1d:d8:1b:24:44:2b:25:d0:
         15:75:30:e6:79:b5:7d:1e:61:87:47:b9:d2:cd:0d:99:d3:6a:
         ba:ca:63:57:5a:48:2b:5d:d9:96:6a:e4:8f:17:30:74:22:ee:
         63:a2:6f:8f:b4:cf:a4:7e:04:86:73:60:39:1d:28:0c:87:ff:
         69:cd:97:05:3e:26:50:38:ef:bb:2f:01:50:43:4b:98:76:8a:
         f1:98:fb:3a:2a:d5:70:21:29:fb:70:11:e1:8c:b0:2e:8f:54:
         66:ca:df:32:e1:83:83:2d:30:29:c0:ac:32:d9:41:65:00:35:
         03:08:41:e7:60:1b:f7:34:d3:30:2a:5f:da:0f:0a:4d:74:ad:
         46:9f:02:f7:8a:75:c0:b6:3f:df:74:65:c1:ed:21:43:47:b3:
         bc:22:51:e8:24:63:fc:17:d9:d1:88:27:48:a1:dd:2c:b1:28:
         9b:21:35:c8:c8:d5:9c:f8:8e:fd:6a:c7:a7:0f:54:7a:7f:e2:
         ad:b6:b8:f6:4b:db:7d:7a:70:26:42:1a:08:90:9c:99:cf:6a:
         1a:73:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:24:07 2025 by rpki-client