Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa
File:                     17434baa-24ec-3b10-8b27-65cb30058e9d.roa (raw, json)
Hash identifier:          IARnZbzbXNsJl2lx/JzRTLTqv+ubQglVypM64MSO5AM=
Subject key identifier:   2A:0B:72:FF:04:E1:29:73:62:94:62:0A:9C:BC:32:48:C5:06:D0:89
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285849948CD514AD1359847C6BBE00
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa
Signing time:             Sat 19 Apr 2025 17:57:13 +0000
ROA not before:           Sat 19 Apr 2025 17:57:13 +0000
ROA not after:            Fri 18 Jul 2025 17:57:13 +0000
asID:                     7029
IP address blocks:        199.102.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:94:8c:d5:14:ad:13:59:84:7c:6b:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Apr 19 17:57:13 2025 GMT
            Not After : Jul 18 17:57:13 2025 GMT
        Subject: CN=d9f6b2d5-332a-42b2-af18-e65074b1dc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:eb:8b:d4:ae:91:b5:41:35:e5:44:34:af:
                    f8:e9:d4:1e:0a:18:91:77:60:09:35:da:d8:31:b7:
                    27:50:17:6c:48:ab:bf:c7:ec:7c:27:cc:ca:61:fb:
                    1b:25:48:3f:d2:0d:59:95:e6:e4:94:f4:8d:50:f7:
                    81:78:69:c0:22:e6:fa:99:91:fd:d0:7a:59:0e:4c:
                    7c:f7:70:fb:d4:f8:58:1f:a5:58:dd:c1:09:7b:23:
                    ec:45:d4:3b:31:8c:f0:e5:c0:89:ad:fe:b6:89:bf:
                    d4:d8:0c:9d:c4:99:79:cd:11:d5:c9:8a:de:1a:0d:
                    eb:78:e6:d4:b8:d9:41:3d:f6:05:52:e7:aa:26:09:
                    8f:1b:72:9c:b2:dd:d5:f3:e8:6e:cb:d0:9a:bd:c9:
                    f2:54:29:82:0e:c3:0a:0b:1f:56:56:7c:c2:79:65:
                    29:9c:9f:f4:c5:5e:d4:2f:bc:79:cf:be:bf:13:28:
                    03:f1:c9:6e:4a:37:35:73:a4:5e:ab:a2:03:89:86:
                    08:a4:51:28:05:d4:6f:93:f1:7a:42:03:64:8b:16:
                    0e:15:5e:ec:5c:5f:22:be:45:74:66:5c:98:7f:da:
                    0a:14:59:89:f4:77:75:03:24:7c:51:6a:58:59:66:
                    7e:d5:2e:cb:72:14:68:fa:95:b4:b1:c4:d7:77:20:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:72:FF:04:E1:29:73:62:94:62:0A:9C:BC:32:48:C5:06:D0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:45:cc:41:fa:3f:5e:2b:56:89:0c:3f:b8:69:cd:52:f0:
         81:d0:f8:4c:32:b6:0b:75:e3:33:95:af:70:79:33:0d:78:11:
         f8:7b:eb:3a:41:c7:6d:8f:86:3c:18:92:60:f2:cd:13:a6:eb:
         c4:39:0d:48:a7:27:70:90:9a:a7:2d:21:c8:7c:50:f4:7c:98:
         f0:95:f4:2a:09:80:1d:38:47:11:81:ad:a3:03:9c:cf:9f:c2:
         e3:63:9c:f0:36:8d:3a:9e:5c:f7:a4:3b:6b:a5:18:6f:c2:d5:
         d4:6a:19:01:ec:92:32:e9:74:b2:3c:8e:0b:86:67:1d:90:d4:
         17:ad:17:46:9f:0b:6d:71:f2:7f:cb:07:06:cb:4d:e1:99:cc:
         c3:53:d6:74:86:82:37:ea:ae:75:81:0c:81:bf:b9:50:07:c8:
         da:c5:e4:56:8b:c2:6f:5d:b2:36:75:ac:8f:99:e0:14:81:97:
         6b:61:4d:9d:5b:73:73:19:cc:e0:0a:88:97:18:06:8d:4f:05:
         5e:2e:93:b2:31:bc:a6:9e:9a:ea:24:d9:c8:f3:f9:24:ef:af:
         ce:d6:c8:b5:b2:41:7c:f4:0a:a2:ee:c8:6c:d3:10:e0:47:a2:
         fc:a3:29:b6:3e:b0:d4:4e:04:4a:94:ee:2f:cb:07:5c:df:b3:
         f7:c3:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:48:50 2025 by rpki-client