Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa
File:                     3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa (raw, json)
Hash identifier:          WjkXIIzg88RIflGWbcTb3T+Zc5xbSfhwRoQx6ZEMQM4=
Subject key identifier:   54:05:03:A3:DB:8C:C3:47:69:D2:1A:6D:92:F1:F5:16:F5:5E:29:D6
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F43285849AFE49B800981B52D6B7DD900
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa
Signing time:             Tue 29 Apr 2025 13:00:52 +0000
ROA not before:           Tue 29 Apr 2025 13:00:52 +0000
ROA not after:            Mon 28 Jul 2025 13:00:52 +0000
asID:                     36734
IP address blocks:        216.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:e4:9b:80:09:81:b5:2d:6b:7d:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Apr 29 13:00:52 2025 GMT
            Not After : Jul 28 13:00:52 2025 GMT
        Subject: CN=02440791-9771-490b-9491-af047f2d3796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:97:7a:13:59:8f:42:3d:c2:7d:40:bd:4a:
                    75:5c:03:a5:11:73:27:01:66:5c:ca:85:2c:ce:5c:
                    55:c6:25:13:bb:d0:b9:a9:ff:2f:92:dc:f6:a9:ad:
                    cc:46:50:73:ed:c1:cd:89:5c:a0:80:d7:07:6c:dc:
                    6a:b9:81:78:64:d6:1c:ad:a3:c5:58:ec:b4:50:b2:
                    6c:e2:35:e7:04:11:3d:ac:0b:6c:c6:ab:ae:8d:fc:
                    e1:52:73:62:12:58:2b:7d:fd:e1:c5:5d:b7:f1:57:
                    57:5e:c4:72:3e:6f:d5:41:f3:57:1e:da:48:86:65:
                    b4:a7:d4:22:64:39:4a:d2:46:d9:65:2d:62:7e:3b:
                    41:fd:70:ef:28:d6:76:c3:cc:7c:7d:70:4a:ac:5f:
                    b5:60:c4:f8:b1:4f:94:d4:9d:7d:19:c9:1b:82:43:
                    42:44:d1:60:ee:dc:f5:e0:34:e3:a0:5f:d3:d4:e2:
                    15:cf:f6:70:02:70:ca:60:f6:a6:43:01:e9:f6:f4:
                    2f:90:ac:42:b9:d3:41:87:ef:ba:74:68:58:83:a8:
                    ab:e0:f7:de:3a:0a:e3:cf:95:02:9e:01:f9:f7:41:
                    0c:ab:c1:63:c5:26:52:6d:bd:a8:92:f6:e1:24:58:
                    6f:44:a7:ba:a6:27:12:2c:74:3a:1f:a6:c5:5a:61:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:03:A3:DB:8C:C3:47:69:D2:1A:6D:92:F1:F5:16:F5:5E:29:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:f8:7f:af:fe:6a:b7:65:ed:ce:64:43:12:f6:bc:c4:9a:
         25:2d:69:0a:36:32:67:2f:fb:a0:de:b6:7c:30:f0:26:8c:f6:
         03:0f:70:0f:d6:a2:9f:1b:40:85:3c:65:43:57:3d:e6:03:f3:
         6d:83:6b:73:cf:e9:88:ad:4b:bf:e1:01:06:8f:d1:26:fe:e2:
         b6:ce:0c:a9:4b:62:1b:73:54:2c:31:21:10:28:21:66:5b:38:
         9b:01:81:f6:5e:76:77:e4:33:3e:2e:6a:10:33:24:01:ec:08:
         48:5d:1e:e5:6b:d9:51:45:27:a6:f2:81:9c:53:2e:53:f6:bb:
         7d:e4:aa:f5:a5:c6:03:ef:60:9a:48:6f:44:9a:e9:a6:c0:a7:
         02:d3:e8:74:ba:85:c9:bc:fe:9d:72:30:6a:2d:27:40:b5:3c:
         33:90:13:09:1c:23:97:3f:15:2e:d0:9f:83:bc:e5:28:64:40:
         ba:25:5b:a3:0d:6d:95:7e:bf:32:bf:fd:ad:f2:52:29:89:37:
         9c:05:36:75:7e:bc:c5:d9:d1:53:20:be:2a:50:ac:3b:85:e2:
         dc:1c:a3:65:32:80:ca:9b:2c:95:a2:62:4f:8a:b6:0f:f3:7c:
         b6:86:1b:2d:45:75:2c:bf:7d:32:2d:91:09:5a:e3:05:48:56:
         cc:84:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:16:19 2025 by rpki-client