Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
File:                     0c921e76-6576-3175-8c68-8b8667dfc669.roa (raw, json)
Hash identifier:          QrGdIe0gwBHpL5Pr7zIaG5WBfMYjCYGWeC65/X6LKT0=
Subject key identifier:   D8:DE:06:0E:29:00:18:27:02:2D:B3:93:70:64:39:C1:D2:73:AE:38
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B9A9FFECE15E398D8395B1E0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397422
IP address blocks:        199.193.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:ff:ec:e1:5e:39:8d:83:95:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=c8fcabb3-956b-40f3-bc07-429b5ac7290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:47:85:77:33:38:97:e4:c3:31:e9:d0:93:
                    ea:c4:c5:68:71:fe:f8:4d:b1:3e:c5:66:8e:cd:f8:
                    7a:44:69:6e:e9:55:85:27:8a:b1:59:93:7c:ec:d9:
                    fd:a8:a8:de:60:51:d9:5a:09:16:34:ed:5d:a2:f6:
                    f5:8b:92:da:67:9c:91:58:c1:ac:45:dc:22:36:50:
                    c0:b0:29:76:43:13:bc:59:97:27:0c:73:68:2b:58:
                    e6:16:a6:8a:63:b4:38:89:17:2e:6e:aa:82:fc:60:
                    9c:1a:4c:40:f8:28:a8:01:5b:1e:08:4c:bc:33:b4:
                    30:0b:18:70:e8:c1:ec:34:ef:0a:cd:7d:2a:2b:ab:
                    ae:b5:5a:1d:91:2d:0e:c3:71:33:2f:d4:1b:91:89:
                    58:48:96:a4:77:20:35:30:6e:a9:55:ca:c4:e8:29:
                    5c:04:41:b4:d2:d1:55:35:0f:22:7e:a4:d8:88:70:
                    74:4c:18:3a:bf:9d:f7:d9:ee:a2:3d:6f:08:90:1f:
                    d1:24:b0:4c:66:3a:94:fa:a7:60:39:6f:2a:9f:c1:
                    c5:14:9b:1f:53:61:0f:9a:33:3e:83:ea:8b:b9:f0:
                    8b:36:04:96:2d:76:05:62:50:19:30:27:99:ed:0d:
                    81:f4:10:28:88:82:b8:0e:a2:f1:cc:0c:0f:2f:e4:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DE:06:0E:29:00:18:27:02:2D:B3:93:70:64:39:C1:D2:73:AE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0c921e76-6576-3175-8c68-8b8667dfc669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:a5:d1:e3:a5:6e:b9:39:08:22:57:51:1a:a2:af:c7:49:
         8c:5a:b9:c1:f8:31:46:49:7c:7f:1e:e4:ad:72:c1:21:5a:50:
         13:b5:bf:f4:8f:f8:0c:fe:b2:6d:0d:3a:8c:52:2c:d3:92:30:
         e1:7d:9c:ee:26:ba:a0:e3:b1:f0:11:e6:1b:dd:7f:95:5a:fc:
         17:69:c8:2f:68:18:85:c2:f6:cc:12:e6:6c:6d:56:16:ba:17:
         1c:03:3a:b1:ca:aa:61:fa:be:78:9a:92:25:14:8b:15:8e:be:
         69:82:fc:37:13:e3:0e:81:37:34:61:c6:01:f8:2c:85:81:5d:
         df:db:42:73:33:da:b1:6a:2c:3a:b7:dc:6e:0b:96:5a:22:32:
         d0:eb:27:de:23:de:51:eb:a3:4b:fb:8a:67:27:6d:56:12:85:
         3f:ba:fd:9c:3b:f8:90:32:41:49:0a:97:61:9b:c6:23:bf:fb:
         b1:2f:11:34:24:51:5d:b3:ea:ce:39:7d:cd:b2:65:02:3a:02:
         38:5b:e1:3e:b3:eb:cc:62:9d:1e:cd:c9:0e:ae:40:bc:6f:03:
         f3:b8:9c:f2:fc:3e:74:9f:2a:c2:aa:b2:56:0c:f2:97:3d:d4:
         38:4f:2c:30:06:50:50:fb:b6:e0:1a:a1:5a:ed:13:74:66:cf:
         cf:89:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:09:32 2025 by rpki-client