Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
File:                     bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa (raw, json)
Hash identifier:          Rzso1phmvix7A0BeyuKPceFmZpckNhaEoTEcMVYxuZg=
Subject key identifier:   9D:EC:EA:3C:45:E9:E5:5E:DC:D1:4C:A2:EE:3B:A8:42:52:34:72:F3
Certificate issuer:       /CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
Certificate serial:       010D0C9F43285849B14A0A61A5ABB3E74E0EAC00
Authority key identifier: FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     400686
IP address blocks:        134.195.19.0/24 maxlen: 24
                          2602:2d6::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0a:61:a5:ab:b3:e7:4e:0e:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c64f1a-22fa-4091-9f9d-42edbc6aefff
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=ddc25995-519a-4bf6-96fc-3310a9f5a011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:5c:91:06:ae:2e:17:2f:1b:42:da:5f:7e:
                    3c:11:39:71:37:a4:89:9f:ec:f9:e7:1b:66:d6:17:
                    3d:f5:08:7d:ba:1c:d5:79:16:6b:7d:f8:d8:cd:aa:
                    4c:15:16:29:dd:a9:9c:46:a1:75:c0:9c:55:fa:e6:
                    25:d7:23:b4:9e:07:92:f8:b9:66:3b:38:84:98:1e:
                    c0:6b:10:3b:e8:76:5a:68:2f:e0:f8:4f:32:e9:4e:
                    d7:0c:92:54:5d:15:44:d5:ff:5a:11:8c:8c:ea:4c:
                    4a:bc:96:91:bc:82:f0:e1:d8:9b:d0:b5:e3:e7:7d:
                    10:85:de:dd:05:cf:2e:80:af:a2:28:2e:de:b8:d4:
                    f7:c6:af:92:ee:30:e0:91:e5:ad:43:68:5b:ae:ad:
                    0e:27:2e:ac:a0:a2:ec:c9:8f:3c:03:6a:cb:78:4b:
                    86:c9:ec:88:72:b3:8a:2d:d9:9b:9d:e5:66:69:81:
                    07:21:4b:36:72:4a:f6:3d:47:0d:d6:cf:40:23:0c:
                    b5:c7:9f:31:46:54:de:34:4c:a3:07:c8:44:07:2b:
                    5d:28:af:3b:17:3f:be:49:c8:ea:97:ac:55:28:8b:
                    8b:ef:82:91:f5:e7:fb:59:2d:5a:4e:b4:0f:a3:a8:
                    7d:36:f0:35:81:2c:23:53:90:1d:f8:4d:c5:26:18:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:EA:3C:45:E9:E5:5E:DC:D1:4C:A2:EE:3B:A8:42:52:34:72:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/bc2cb9c6-7705-349c-9102-a6741ccef7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff/11c64f1a-22fa-4091-9f9d-42edbc6aefff.crl

            X509v3 Authority Key Identifier:
                keyid:FF:F9:D5:A6:43:BF:DB:EF:1C:56:31:0D:DF:04:B8:1E:07:47:A0:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/11c64f1a-22fa-4091-9f9d-42edbc6aefff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.19.0/24
                IPv6:
                  2602:2d6::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:a9:8d:94:9e:10:c0:d5:c2:06:e5:2f:fb:9d:63:36:a4:
         1b:5b:86:5a:51:a3:08:35:f8:06:aa:81:05:d0:61:ca:4a:1c:
         77:89:37:28:98:35:aa:cb:27:e2:42:b4:f8:11:ec:2a:44:fb:
         f5:c7:26:75:fc:36:73:21:f2:e2:77:d3:19:a5:f2:c7:4d:0e:
         e1:84:35:3f:70:c5:16:bf:0a:9d:c9:5e:4a:8c:f0:c2:9b:b7:
         0d:85:25:7f:de:76:ad:e8:df:36:5b:25:6d:b6:4d:fe:a8:e8:
         d8:c6:92:92:8f:4e:19:21:7a:6d:8c:ae:ac:f3:9b:01:6e:ce:
         7b:1a:77:7e:5e:34:bd:3a:79:50:59:47:d7:0d:a6:df:34:ff:
         d1:66:68:8d:11:fa:04:ab:2f:19:71:2c:34:d4:99:0a:0b:ee:
         99:34:c1:7f:3f:71:f4:bf:cb:b5:60:9c:ae:c8:af:9c:88:7b:
         20:98:11:e8:cb:03:38:f3:2a:0b:c5:ac:cc:6e:c2:fd:59:ac:
         37:98:4f:64:8a:dc:da:8a:1a:a6:35:14:6e:50:1b:2d:7d:be:
         b2:66:8c:f1:80:67:59:d8:01:79:6c:e4:bc:ad:b6:b3:0b:d4:
         53:58:d5:9f:62:5c:6b:df:bd:70:2d:92:f1:8a:5a:b9:38:16:
         1f:08:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:08:11 2025 by rpki-client