Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa
File:                     fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa (raw, json)
Hash identifier:          g4YKJcdvBDV6RJCpsWW1f7Z2GcePyt/07HpBVavvN8M=
Subject key identifier:   32:29:9D:4C:C1:17:1C:93:00:CE:BB:D6:EB:D3:D3:C6:2F:C9:CA:6B
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584986C4B9796AB82B46F55D2A00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa
Signing time:             Mon 14 Apr 2025 19:28:31 +0000
ROA not before:           Mon 14 Apr 2025 19:28:31 +0000
ROA not after:            Sun 13 Jul 2025 19:28:31 +0000
asID:                     26502
IP address blocks:        137.239.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:c4:b9:79:6a:b8:2b:46:f5:5d:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr 14 19:28:31 2025 GMT
            Not After : Jul 13 19:28:31 2025 GMT
        Subject: CN=462c10f9-e2e2-42af-9bc1-331a3ca3d4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:9a:9f:9f:cd:86:66:7e:13:e8:09:03:9b:
                    42:34:f6:3e:0e:db:0b:ab:ab:a0:44:ff:95:2f:81:
                    c1:be:8a:18:18:d3:c9:d0:86:b2:af:aa:b8:03:57:
                    e3:79:39:67:69:f6:0e:cd:97:2e:0c:8d:98:20:98:
                    47:5d:30:bd:70:8c:f3:fb:b2:de:04:51:28:81:bb:
                    81:53:8b:f1:10:b7:b8:04:d0:e1:c0:55:34:66:25:
                    2c:ca:34:49:4f:63:d3:cd:71:32:a0:a7:07:e8:a1:
                    71:d8:4e:92:58:6c:f6:ea:02:a5:88:07:05:b6:8a:
                    46:8a:85:a1:65:59:25:4a:59:17:06:3e:03:49:b2:
                    48:cd:93:97:90:d8:d4:ab:00:f5:27:ce:30:c8:d0:
                    89:56:6d:b5:d6:43:d5:08:31:1f:9d:96:65:eb:c6:
                    73:75:98:72:f8:ed:54:ca:32:b4:36:be:d9:8f:ea:
                    85:38:5c:d8:fe:85:8d:1f:01:48:30:46:90:b6:81:
                    b0:99:08:18:ea:f5:6c:4e:de:31:c8:65:1e:0e:c1:
                    07:5a:9c:c7:d5:02:1a:fd:f1:7e:c2:c9:84:76:25:
                    31:d0:67:a8:a6:b3:da:78:dd:24:48:43:ce:bd:4b:
                    45:04:97:70:f8:9b:d1:ca:06:dd:a5:ee:dc:b3:72:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:9D:4C:C1:17:1C:93:00:CE:BB:D6:EB:D3:D3:C6:2F:C9:CA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fc913166-5b9c-3757-bb3a-6ed5ad983dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:de:fa:3b:85:0b:2c:db:1d:f2:62:6a:69:3c:99:ce:07:8a:
         5a:a6:78:31:fa:be:48:30:86:78:5e:59:14:2e:fa:61:ea:ed:
         22:63:f8:7c:ba:a1:02:42:d1:ec:6d:b5:33:4e:42:26:df:fb:
         6e:40:0c:fa:b2:0e:1a:b3:bc:23:f5:28:e4:97:51:05:76:e8:
         db:ed:24:d0:95:f1:66:fe:bd:ac:8e:f8:4a:45:d2:9a:a4:15:
         ab:65:8f:4c:89:db:1b:ac:34:fe:52:ec:6d:bc:db:c4:ab:9c:
         7f:c5:95:f0:44:8f:1b:0c:10:c1:83:8c:a0:cf:f2:60:87:bb:
         99:90:59:63:b2:52:0b:15:c3:bf:00:34:bd:bb:51:02:c9:9d:
         e0:a3:02:11:64:8b:da:ed:0f:96:24:50:28:ec:8c:21:25:8c:
         30:89:4d:60:08:50:47:de:5f:a8:00:23:4b:3d:c5:1b:3e:2a:
         e8:58:2b:65:20:c2:a0:50:87:86:17:87:0d:8b:fc:e8:b7:87:
         34:98:d2:35:ce:ed:0c:5f:1a:36:f6:09:20:a4:7c:3e:e9:f7:
         39:98:51:23:2c:03:90:5d:70:26:68:5f:ec:fd:58:ba:9b:f9:
         bd:bc:14:d2:80:06:75:42:9c:d2:35:7e:a7:d2:79:32:df:eb:
         9a:d6:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:54:21 2025 by rpki-client