Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/639dbfc8-8285-36ba-b92b-6acc426a9ea8.roa
File:                     639dbfc8-8285-36ba-b92b-6acc426a9ea8.roa (raw, json)
Hash identifier:          bWsG583253AaDyCc7q82DyWHwMuP8wmTtSB6VpNv4bA=
Subject key identifier:   CF:D8:04:03:6A:48:B8:3E:6B:27:05:B3:11:1E:81:19:F5:C7:6C:00
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9AAB205B23C9CD0AE980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/639dbfc8-8285-36ba-b92b-6acc426a9ea8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        97.69.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9a:ab:20:5b:23:c9:cd:0a:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=63b0e08b-8a66-45cb-877f-0cfae53655d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:a3:fc:dc:52:4d:03:0b:d2:7a:ea:00:0a:
                    b5:f9:fe:bc:94:91:8d:10:3c:01:4b:8f:9e:22:eb:
                    81:b2:de:0b:15:4d:a5:33:20:94:88:1e:05:c2:d2:
                    38:e8:6a:8b:6d:cc:3e:83:e1:3a:11:d3:f7:1b:18:
                    8a:9d:2d:cd:c3:b0:1b:65:ed:4c:7d:9a:e6:57:60:
                    d4:f9:34:c7:a4:78:fd:b5:80:f8:13:82:b6:4b:88:
                    a8:14:9d:0b:eb:57:be:0c:bd:8d:87:5b:e9:c1:43:
                    f1:29:8c:18:5c:74:29:97:92:eb:8d:1e:f7:49:a2:
                    c9:7e:83:c5:ff:ee:80:59:fd:72:09:ca:74:6b:89:
                    4d:c0:56:42:7c:96:ab:60:82:61:5a:e4:23:e4:f2:
                    ac:24:50:db:ba:c9:ef:74:cb:60:c3:e1:7d:87:d1:
                    93:2f:15:80:6e:c4:ab:97:22:48:6f:93:c5:56:56:
                    3e:c7:ed:27:f4:e0:c5:d7:d1:3c:da:40:6c:3c:c2:
                    d1:fc:33:eb:99:ef:73:6e:b7:d2:2d:e6:82:f1:60:
                    2c:0c:ed:c4:8f:6b:b4:88:5a:c2:a7:a2:35:b9:34:
                    a8:d4:81:be:be:a9:5c:1d:d4:49:1c:8d:91:a6:62:
                    f1:aa:66:96:03:76:f7:35:69:96:e7:6d:86:c2:9c:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D8:04:03:6A:48:B8:3E:6B:27:05:B3:11:1E:81:19:F5:C7:6C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/639dbfc8-8285-36ba-b92b-6acc426a9ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:44:de:90:e9:be:b9:38:0c:68:57:d9:6c:e8:3f:89:d4:
         97:cf:bd:b2:5c:85:4a:2f:51:f5:cf:31:27:e7:06:a9:07:25:
         f4:e9:a1:25:3d:58:86:22:07:25:cc:56:03:48:04:61:57:b0:
         81:4d:8c:ee:5f:3d:31:49:d1:b2:97:01:92:2b:7c:d7:fd:db:
         6e:d9:33:40:03:d1:8e:de:a0:8a:90:15:9d:3f:7b:c5:20:34:
         1b:a0:48:1e:f1:70:bf:3d:7d:ab:6f:a7:30:b0:da:3b:c0:74:
         1a:f6:da:c2:6d:9d:f9:9e:d9:2a:d2:8b:00:84:df:c3:10:ea:
         df:7c:16:1d:c0:36:e8:7e:2a:96:95:f0:3c:2d:9b:ef:92:32:
         36:97:ab:0a:00:eb:93:cf:37:bf:40:09:3f:43:28:87:4a:30:
         5d:52:7f:bf:83:d3:f3:5b:f9:e5:2e:e3:02:d1:33:4e:e3:c6:
         ab:58:10:94:14:e7:8c:8f:ec:41:2f:e5:2d:57:e9:e6:bf:cd:
         87:6d:b1:d2:03:ad:77:f6:76:49:38:35:55:1f:a9:18:f7:60:
         39:52:72:d0:10:96:fa:05:7b:74:db:ae:5c:32:ab:e1:f4:32:
         b5:02:39:4a:23:e1:94:fc:59:80:87:15:9a:ea:0b:62:74:ec:
         66:6f:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:00 2025 by rpki-client