Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa
File:                     96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa (raw, json)
Hash identifier:          UgbHhp6nqMGqLFkoblg2iwLpePtReDt8gYKKP1+YWpg=
Subject key identifier:   64:D5:ED:6B:03:A4:78:3C:79:7A:0F:60:5B:15:E2:36:32:8F:2C:25
Certificate issuer:       /CN=bcd833da-718f-40bc-8c07-110428cd6881
Certificate serial:       010D0C9F43285849B14A0EE4E0441153F5888B80
Authority key identifier: 78:6A:68:4F:55:E6:86:EB:3B:7A:8B:B8:1B:A1:46:DD:E4:77:8E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     398777
IP address blocks:        199.164.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0e:e4:e0:44:11:53:f5:88:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd833da-718f-40bc-8c07-110428cd6881
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=89b79dec-ab62-4aab-b450-98f45b78ca3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:da:b5:23:84:88:76:75:2b:7f:0b:f5:7a:
                    35:85:6b:35:ea:08:5f:03:2d:85:bc:6c:f5:72:f3:
                    28:28:fe:9b:90:90:df:7e:6f:48:48:2a:f6:f6:95:
                    98:54:70:82:be:1a:d9:14:59:44:b8:73:79:b1:47:
                    3f:a7:dc:f2:42:9f:d3:e9:7d:63:d4:fc:5f:f3:fb:
                    ea:93:a1:09:6f:5b:65:76:c6:dc:59:f6:5b:ca:59:
                    b8:06:a0:a1:10:5a:65:19:3a:10:c5:dd:cd:62:1a:
                    33:bd:47:e3:80:1c:9a:95:4e:9f:ac:56:d5:95:11:
                    75:2f:4d:fb:e8:52:16:f5:e7:c7:f2:d2:48:0f:95:
                    68:9b:99:04:0c:b3:02:61:b1:2e:63:96:ee:88:26:
                    a0:6f:6a:c3:5a:97:0a:c1:60:00:13:d9:09:d7:d1:
                    2d:85:5e:ee:31:b2:22:91:d3:5a:e4:5d:f2:ee:b7:
                    04:3f:45:83:74:64:94:6a:c2:b2:81:08:1d:79:65:
                    d4:43:c2:b4:d6:89:4d:e3:0e:17:32:25:12:c8:90:
                    15:ab:26:0f:12:c4:ac:01:a0:41:5e:80:78:86:62:
                    45:09:36:ae:2d:c7:de:85:6f:de:a1:9d:53:cb:40:
                    ef:80:e4:75:aa:89:e7:b9:5e:5a:9f:b4:ed:91:05:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:ED:6B:03:A4:78:3C:79:7A:0F:60:5B:15:E2:36:32:8F:2C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.crl

            X509v3 Authority Key Identifier:
                keyid:78:6A:68:4F:55:E6:86:EB:3B:7A:8B:B8:1B:A1:46:DD:E4:77:8E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.164.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:df:57:ae:ba:c9:2e:22:5d:34:17:fd:c4:1f:b1:46:b4:
         03:36:c7:3e:f7:02:e9:8b:e4:78:c1:1b:16:76:49:28:e7:67:
         30:45:03:64:c2:5a:12:d1:d9:83:23:c5:27:b4:0a:27:a7:cf:
         44:1d:18:6a:03:cb:25:aa:1a:03:de:8b:4f:1e:d5:54:b1:0c:
         48:3a:f4:a3:93:61:9b:68:f4:4c:66:28:e1:e3:21:6f:0b:de:
         9d:15:66:d3:df:81:fd:d2:9f:11:50:14:8f:ba:3b:80:7d:4a:
         0d:1e:8e:95:10:a7:4a:e2:7a:11:08:2d:51:7a:54:8b:31:33:
         e3:d2:03:80:34:45:f7:d5:d1:fb:29:cf:7e:3f:4a:6e:b6:03:
         89:32:32:ba:2e:2a:99:66:c3:89:33:df:b3:a4:ad:e7:15:e4:
         bb:50:9e:af:b0:c6:53:7b:53:1d:be:4b:7b:1a:a3:af:a5:a8:
         5e:1a:10:80:08:29:b0:08:d8:1b:7c:8a:24:85:7f:d9:86:ca:
         bf:9e:70:6a:2b:d0:1d:e7:57:e5:9a:07:d6:0e:bd:36:9f:27:
         d9:3a:91:0a:50:61:54:ed:50:31:79:ed:f1:c7:cc:0e:90:53:
         0f:f2:bf:1c:1e:8b:37:15:1c:7b:b4:ea:08:06:9f:e9:42:ac:
         c3:26:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:04:50 2025 by rpki-client