Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa
File:                     889697ca-e8be-368c-b18c-6c8efb18f082.roa (raw, json)
Hash identifier:          yivuIeMx1jaAIk3ZKMgr7Sv0IWa9dHA/o6BjaHHgCO8=
Subject key identifier:   05:4F:EA:70:70:CF:A6:69:5D:D1:89:C7:04:F7:7B:B2:75:FD:4F:BE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B9AA00369D09B35E741DF140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397422
IP address blocks:        206.192.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:00:36:9d:09:b3:5e:74:1d:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=a82c4e16-ad21-4b48-9d69-d0d74530611d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:d4:b1:a2:cd:3d:bc:2d:69:38:ad:37:89:
                    32:1e:04:f9:36:c6:42:3d:05:a5:1c:41:1c:e2:5d:
                    75:b2:c6:e9:d0:4a:7d:e3:24:bb:23:fd:00:6a:fb:
                    e4:51:9d:33:1b:35:65:25:f6:aa:44:ea:f5:1c:59:
                    e9:bc:c2:cd:77:10:59:2b:15:22:55:3d:c4:59:57:
                    b8:a5:2e:2f:be:af:49:c9:44:8e:68:cb:7b:3b:f5:
                    39:c0:7f:de:95:db:8d:c0:50:b2:06:1c:c7:8a:43:
                    69:d0:92:c5:08:8b:31:e9:a6:78:68:06:1b:fb:ad:
                    8c:54:6b:db:72:72:b1:d5:dc:b1:98:87:07:7c:7d:
                    37:a1:ea:f6:91:dd:5b:65:c4:83:01:14:0a:f4:2d:
                    d8:dd:0c:4c:9f:c6:21:9c:05:e8:54:66:76:49:d4:
                    7e:d8:7d:f8:3c:0d:5f:fe:48:5e:57:23:48:98:93:
                    c9:cf:0e:b7:4d:03:81:0d:29:f0:7d:0f:44:b3:81:
                    b6:1c:49:e7:0d:c8:0f:97:33:d9:16:bc:d3:2e:d5:
                    c7:8b:2c:07:ce:4f:67:c5:84:55:74:25:6a:d1:ff:
                    58:38:9c:c0:5a:30:3a:24:ba:a5:a6:e8:be:9f:99:
                    87:9c:29:40:54:e2:69:07:88:f1:b0:1d:f7:ce:5d:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4F:EA:70:70:CF:A6:69:5D:D1:89:C7:04:F7:7B:B2:75:FD:4F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:8d:8a:36:dc:07:32:d0:fa:60:9e:1f:3a:3a:96:6d:ba:
         8f:1f:fc:68:fd:d7:8d:fc:d0:b2:9d:9d:a4:d6:1a:61:ae:93:
         30:1b:81:62:25:25:f9:d5:f8:d5:e8:91:ee:34:c0:a4:d7:22:
         d3:3a:5c:b1:2d:0a:f1:fe:bf:d3:b2:01:fb:b3:2b:b5:53:b9:
         8b:e7:19:5f:2f:e5:b5:eb:9f:94:ed:b9:8f:e0:66:3a:d5:87:
         9d:3c:64:58:52:6d:c0:1a:5e:e7:f9:2e:79:16:ab:0c:a9:05:
         0e:95:90:a7:7d:24:b8:d8:e1:4d:5f:0c:1b:da:d3:d1:c0:24:
         4a:0e:02:f3:45:75:61:98:24:7b:76:0d:42:21:9a:c9:a9:34:
         47:1b:09:e7:f7:6e:66:5a:18:54:44:cd:50:9c:ec:8b:1f:ce:
         39:9d:73:d2:07:7d:dc:eb:ba:ba:73:c0:93:86:c5:68:c2:e9:
         95:55:5d:a4:c4:67:1f:ba:fe:45:e5:cd:0e:e2:f0:f6:1c:88:
         f8:9d:63:f2:4f:cf:06:76:34:46:72:ca:25:86:35:de:73:31:
         a7:08:97:cc:d3:e1:ba:f7:f6:d9:c7:e7:3c:65:d2:7d:ad:94:
         02:bf:3a:28:36:e3:a4:c3:4b:3c:66:47:9c:95:a5:12:71:ca:
         cf:cd:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:55:29 2025 by rpki-client