Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/aee92311-6303-3a0a-b76f-ff54733bf3bc.roa
File:                     aee92311-6303-3a0a-b76f-ff54733bf3bc.roa (raw, json)
Hash identifier:          abEkpr0FipbpDl5cuqUxfdX9fw7l9ROus7WMafQA3PM=
Subject key identifier:   5F:08:4B:F0:88:55:BD:4E:68:81:21:BE:21:D6:78:AF:4C:31:1F:BD
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F4328584991CFA90F72CBA7A5D5C294C0
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/aee92311-6303-3a0a-b76f-ff54733bf3bc.roa
Signing time:             Fri 18 Apr 2025 18:24:27 +0000
ROA not before:           Fri 18 Apr 2025 18:24:27 +0000
ROA not after:            Thu 17 Jul 2025 18:24:27 +0000
asID:                     54730
IP address blocks:        199.21.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:cf:a9:0f:72:cb:a7:a5:d5:c2:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Apr 18 18:24:27 2025 GMT
            Not After : Jul 17 18:24:27 2025 GMT
        Subject: CN=d40a739a-ed70-4691-b744-433fba58477d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:c6:26:f6:76:ce:9d:af:9d:a5:ce:3f:36:
                    96:2a:22:93:7a:47:c2:51:0e:35:ca:72:25:07:e2:
                    b7:1b:26:45:0e:39:8f:06:df:a8:f6:40:77:28:cb:
                    df:36:9b:42:1a:29:91:01:e0:4f:1c:fb:9c:75:e7:
                    ef:70:af:12:59:d7:1c:81:ce:74:bd:d9:78:bc:62:
                    69:d4:d6:67:8d:69:5d:6d:f5:1d:d3:89:52:d7:db:
                    c3:99:c5:09:74:58:40:d2:3d:22:f2:3a:c1:0c:95:
                    03:16:f1:07:7e:78:03:35:0f:4b:d1:14:ad:24:af:
                    fd:fc:31:33:6e:d6:0f:90:d7:c9:1f:21:bf:8a:3d:
                    e5:d1:a1:0e:8b:3e:94:ee:cc:c8:5f:30:e7:b5:a1:
                    79:3b:4d:98:f4:f0:6c:df:2d:26:13:f2:08:95:97:
                    0e:37:0a:9a:71:68:de:fc:fc:c1:59:26:2b:40:0e:
                    06:e0:5b:b3:86:a8:d4:2a:0a:5a:5b:5e:d2:20:7f:
                    83:a4:bc:52:75:a8:a4:95:0f:6a:bc:02:d4:e4:34:
                    55:57:7b:51:fd:8a:b8:a7:52:0c:3d:0d:9e:b3:84:
                    3f:92:dd:05:da:50:e6:e6:40:e4:54:b5:92:18:26:
                    f3:1a:ff:97:1e:bc:b3:e1:6e:bc:ef:12:70:f4:f2:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:08:4B:F0:88:55:BD:4E:68:81:21:BE:21:D6:78:AF:4C:31:1F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/aee92311-6303-3a0a-b76f-ff54733bf3bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:47:8d:fe:61:27:ed:2a:3f:8f:b2:9b:3c:aa:70:05:2a:20:
         a8:ee:d0:39:3e:fa:67:9c:7c:51:52:11:28:26:a9:ba:ec:63:
         7e:55:d5:3d:e2:87:6c:ee:c3:cd:95:da:52:95:5d:8d:d7:be:
         5a:fb:e9:63:2c:36:24:d0:27:10:8f:e8:59:69:ce:3b:57:63:
         aa:27:77:eb:47:54:24:53:00:5f:77:4b:c0:4e:71:78:8a:2b:
         32:d3:46:41:85:a3:34:19:48:70:45:25:be:ce:f8:1e:39:85:
         46:be:7a:e6:0c:c2:b5:f2:b9:6e:66:87:2d:55:bb:ff:a0:b4:
         ec:c3:da:92:fa:74:cc:bc:65:51:a3:b5:2b:fd:da:f7:de:89:
         78:ff:44:81:59:47:5b:07:1c:50:37:21:5e:b3:2a:c7:6b:83:
         8e:de:38:85:bf:4d:b3:8d:63:8c:ac:f7:8c:69:be:5f:4f:3a:
         c0:fd:32:23:8f:4e:71:76:a9:04:ec:21:ac:d7:c3:72:ef:95:
         89:9f:a2:62:36:af:6c:4b:15:59:a1:ce:c0:f2:88:ef:be:a6:
         25:cd:3b:ad:38:38:ac:e0:7f:54:50:1a:f2:04:2b:44:b3:19:
         ec:85:33:9e:2e:64:45:b1:14:34:68:7f:90:f0:aa:04:66:b5:
         2b:f0:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:10:39 2025 by rpki-client