Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
File:                     7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa (raw, json)
Hash identifier:          vkf0a03DnTEgqta2/xyDF5UHVb2S4eqKvhFY26oMuq8=
Subject key identifier:   ED:B3:FA:B9:73:1F:57:26:E9:44:95:97:1C:65:A7:30:B3:E9:BC:EC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F90926AB3BAC8BA069780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     17359
IP address blocks:        199.200.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:90:92:6a:b3:ba:c8:ba:06:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=91f07678-02bc-4386-a32b-5ed680103c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:59:e1:dd:46:d7:9c:3b:b0:03:e3:b2:62:
                    4b:a1:17:25:28:0a:23:b1:de:91:a5:fa:2c:17:2e:
                    47:9e:bd:8d:23:03:3a:06:3f:3e:62:a6:5a:cb:57:
                    9c:42:8e:21:1f:08:78:9e:09:fc:3a:b3:93:2c:c2:
                    cd:e5:81:50:79:4c:d0:17:83:08:8a:95:86:bb:fb:
                    fa:18:81:3f:f4:6c:2e:7e:c0:fd:0a:1b:0f:92:2b:
                    c9:c8:d8:9a:bf:29:cc:e2:b1:d1:80:87:bf:30:c6:
                    19:0e:22:56:fa:f7:92:81:0d:95:e6:1c:d5:92:b8:
                    e9:e6:ac:5b:f7:22:02:d7:09:13:3e:23:f4:41:21:
                    7e:23:5c:f7:a6:21:15:4f:17:07:20:fe:a5:6c:11:
                    5e:e2:c5:93:c5:08:49:30:e8:d8:49:b9:f7:90:9a:
                    71:5b:9f:00:bd:22:29:a6:73:d5:71:bb:4f:90:5c:
                    9d:46:b8:c1:80:24:97:1a:7f:b9:5c:ee:53:74:b0:
                    97:96:f6:0b:9e:24:d3:6e:01:0e:49:a9:00:12:8d:
                    73:24:21:17:c1:0b:bf:92:a8:ab:75:1a:8d:f4:e9:
                    dc:18:4c:b4:8e:01:02:b9:e2:e3:71:c9:69:a8:6d:
                    ee:b4:1b:8d:57:97:56:13:0b:29:e9:1b:fe:06:05:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:FA:B9:73:1F:57:26:E9:44:95:97:1C:65:A7:30:B3:E9:BC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:ec:1f:81:d2:c7:d5:f3:63:63:a6:c9:59:67:e2:37:b7:
         6f:08:d0:69:4e:5e:eb:08:2d:bf:33:29:5e:12:5a:75:62:5c:
         b7:b3:a9:e4:04:1c:2d:5a:4d:41:0f:ab:be:62:2c:96:39:0c:
         53:54:82:d1:d2:04:25:98:94:ce:a6:18:81:80:86:46:c3:62:
         86:e8:3e:6c:07:2b:ae:3f:8e:da:2e:d9:40:db:07:56:7e:a1:
         2c:05:c9:db:34:ce:6f:60:94:7d:81:68:84:ec:14:b5:de:f7:
         9a:9c:ff:af:d7:c3:84:e5:a7:3b:71:e6:12:f4:15:7c:3e:ff:
         6a:f5:9f:53:53:ac:21:51:fa:c9:a9:d1:72:09:a4:e3:79:7d:
         14:78:77:89:0c:2e:84:84:6c:eb:c5:e0:c7:a7:89:fb:b3:10:
         b0:e8:03:cd:2f:d7:42:ce:1a:aa:7f:71:61:d8:c4:9d:b2:66:
         35:af:75:6c:1f:1b:bd:d6:c5:70:7a:bb:45:c4:6e:a9:14:45:
         b6:b9:e7:48:a7:02:d5:a9:ce:a9:5c:b7:e8:0c:b9:8b:ad:55:
         91:47:49:a5:d7:67:c7:17:3f:19:5e:64:25:a9:c8:39:fa:10:
         f6:29:3a:d4:19:86:00:d5:b8:64:68:16:4f:5c:b3:f6:ec:1e:
         5c:67:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:38 2025 by rpki-client