Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa
File:                     db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa (raw, json)
Hash identifier:          S5KMWnnBxGfEUKFTxgTvyagiQi9j95IRBywyMDAD3OU=
Subject key identifier:   C0:84:CD:4A:64:14:8C:D9:EE:08:7A:62:5E:5E:8B:78:66:3F:98:1B
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285849C0A4E4732BF88DCA73A09300
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     19281
IP address blocks:        9.9.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e4:73:2b:f8:8d:ca:73:a0:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=a93ffb3c-6eed-4cac-add6-31afffe662ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:5a:3e:72:ab:d0:7f:78:48:52:05:17:25:
                    c9:83:a4:eb:96:46:2b:10:91:6b:b9:00:6f:51:66:
                    1d:de:f3:95:c9:c9:9d:4c:6b:e2:3a:1d:27:36:1e:
                    f5:d2:c7:39:2b:14:38:26:43:1c:cf:60:f9:ec:3e:
                    56:1b:24:f6:51:f3:7f:48:98:6e:ad:ef:70:c1:d6:
                    2b:c3:4f:3a:8e:f1:f1:4c:db:4c:73:ce:05:80:3d:
                    ea:29:47:a7:5d:77:53:57:3d:a5:76:7a:90:5d:b7:
                    6a:22:a6:82:06:fa:95:c5:f9:e2:a7:93:89:46:d5:
                    1e:7b:32:e4:dd:fd:02:aa:c6:72:c0:5c:c1:0d:6e:
                    18:2f:a2:34:5b:ce:cd:11:0c:24:6c:b0:1e:2f:da:
                    9d:5c:2f:a0:84:c8:1d:5c:32:c4:83:32:cc:92:6c:
                    7c:f2:18:d1:e7:b7:70:52:26:86:4a:80:30:e2:cb:
                    d4:da:5b:27:6d:bb:a9:b6:21:8a:07:d4:54:4c:71:
                    f8:c5:82:db:27:65:40:fb:59:a5:34:c8:f6:d3:dd:
                    9b:5a:8a:0f:be:59:92:45:dc:8c:e6:d8:47:23:97:
                    be:46:a6:59:38:23:ba:d2:cb:76:d4:cc:1f:98:c3:
                    3c:f9:ae:ee:8f:ef:e7:53:fd:a2:5e:64:49:51:6b:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:CD:4A:64:14:8C:D9:EE:08:7A:62:5E:5E:8B:78:66:3F:98:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.9.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:2b:44:4a:61:9d:04:8a:a9:62:08:37:c5:4d:3f:db:af:
         61:b6:2c:7d:c4:4a:54:75:cf:33:5c:78:c9:68:42:1d:21:24:
         1f:f5:74:e7:6d:cb:4a:79:6d:70:8f:f5:ec:9c:2c:51:a9:4d:
         e5:74:f3:20:2f:d6:92:8d:53:97:35:9e:f4:56:f6:55:af:cc:
         44:f9:79:bf:ce:56:9c:36:d7:e0:ec:80:d0:63:b3:9b:e9:6a:
         df:28:66:fd:22:a8:c2:68:1e:e9:a1:e3:2a:33:ef:bd:c3:69:
         f6:42:d6:4c:43:90:5f:16:fa:66:4e:ae:fd:36:32:92:28:55:
         d4:be:e8:30:56:90:d3:fe:7f:78:78:05:72:92:94:85:89:05:
         79:39:e0:18:76:6e:45:fc:f6:d5:6e:c6:c1:86:2c:7f:78:c1:
         05:90:f1:68:89:a6:77:10:d7:65:12:c8:f6:bc:d5:fb:b7:50:
         5a:a3:9f:52:14:f3:32:96:80:f7:58:7d:96:d4:de:45:9c:80:
         fe:94:3f:fd:09:05:7e:9d:a5:5e:8d:c8:9b:54:af:38:48:de:
         ab:33:6d:27:49:60:29:63:09:43:f6:74:4f:55:5b:40:cc:7e:
         0c:82:4f:35:a1:e8:52:d2:c0:84:a9:91:fe:4e:23:fa:c1:d9:
         aa:90:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:42:16 2025 by rpki-client