Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa
File:                     1913c0c7-dc83-342e-a0d2-774b8807756b.roa (raw, json)
Hash identifier:          R/8TnD+Asg4ZzSFdRfBPCGwYK/uBjpo6iwwCU1kgmVg=
Subject key identifier:   81:A9:7B:12:19:BD:00:68:E2:81:31:05:F2:BE:F3:B7:2F:CA:F0:EE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B57A15CB9EF2744BB6687580
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     55246
IP address blocks:        209.237.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:15:cb:9e:f2:74:4b:b6:68:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=bd0d5495-5c14-4c36-9c79-80358d347ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:68:d3:8c:10:f6:d4:eb:19:b8:60:cf:72:
                    b6:ee:44:53:88:b2:55:02:bd:2d:a7:9c:4a:67:75:
                    a4:09:be:3c:63:ee:60:9a:07:60:15:9d:af:3c:04:
                    a6:84:f3:29:d0:15:2d:14:af:ca:90:ea:b3:65:d5:
                    f9:45:97:7b:ef:aa:a0:97:95:0b:c9:35:ea:f7:21:
                    ac:b1:f8:ec:8f:bd:36:20:67:e6:26:5b:05:cf:07:
                    15:89:f0:f1:6e:d9:cb:1b:bc:80:e8:58:e4:7a:b5:
                    7f:69:c0:20:63:5b:69:56:fa:67:f5:8c:ea:45:a0:
                    e4:7f:38:e8:0c:d7:ab:f3:b2:ed:bf:1f:b9:0d:f9:
                    fc:ab:0e:f2:d2:f3:8e:00:43:08:54:24:ea:6e:48:
                    46:df:e6:1b:4c:13:29:d6:3a:41:a1:54:c0:7f:a9:
                    15:91:8d:40:de:4d:56:ee:27:66:94:c3:d9:b0:52:
                    c6:57:ef:12:45:e8:d4:12:b5:d4:20:92:59:e2:22:
                    02:01:37:b7:3e:f8:cd:76:0b:9d:06:23:e1:35:b9:
                    a4:e2:8a:99:96:fc:16:60:e0:b1:2e:ba:00:e7:dc:
                    f6:3c:cb:27:05:da:69:e5:e0:92:21:28:a4:d2:b5:
                    a2:70:3c:98:19:16:be:e9:ea:d9:63:b8:2a:dd:10:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:7B:12:19:BD:00:68:E2:81:31:05:F2:BE:F3:B7:2F:CA:F0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1913c0c7-dc83-342e-a0d2-774b8807756b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e1:bd:29:f6:58:50:61:6c:ce:f8:7e:29:96:b2:99:d6:6f:
         88:4c:c0:c9:9f:cd:53:5b:24:9b:b2:14:f0:aa:a4:62:1c:3a:
         f9:ad:71:a4:78:f8:27:3a:96:fc:1e:b5:68:21:b6:13:cb:90:
         85:23:9e:65:6f:3d:16:e6:b6:c1:a3:58:3c:7e:21:64:00:14:
         bf:8b:98:b2:77:84:aa:9d:0c:58:25:b9:01:b4:f4:e9:5d:24:
         5c:22:bd:83:78:22:d6:53:fa:f8:47:5e:4e:26:f9:bb:30:f7:
         30:03:e9:d5:e6:cd:0b:5e:cb:b9:1b:d8:78:a3:07:12:21:c1:
         93:65:76:15:8f:f0:a0:04:4b:da:76:3c:2b:fd:f3:f0:f0:13:
         52:ac:a8:95:12:b0:8f:35:88:fc:5f:c5:0c:6d:eb:a0:de:7e:
         1d:8e:b7:15:be:e4:9a:e7:5d:9c:eb:a5:46:ee:67:da:65:9e:
         cc:ce:17:85:40:11:5c:64:7e:33:85:a8:0e:12:ac:24:7c:df:
         c5:7d:f9:53:6f:2b:9b:de:0d:bf:1e:db:c9:1e:9d:80:69:d7:
         d9:1b:24:3a:8c:b6:fb:09:4b:e2:6e:a6:d2:e3:ea:a3:af:1e:
         ee:2c:42:2b:18:a8:48:40:4a:0b:a8:bc:4d:e7:81:5a:1f:4c:
         db:2e:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:44:58 2025 by rpki-client