Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa
File:                     acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa (raw, json)
Hash identifier:          HCoruu0Y8/wkcTHp27x7O5GlcxwHfmblNK3rzdAYE58=
Subject key identifier:   6B:4E:3C:1C:59:8A:D3:F7:8B:15:16:4D:31:69:07:23:61:E0:A2:64
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6BF62D666F2D3B8F8800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        198.100.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6b:f6:2d:66:6f:2d:3b:8f:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=3f86cc2e-ed3c-428b-858c-410d80bec996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:1e:ea:80:fb:93:aa:aa:0d:7e:c3:61:28:
                    7c:e8:ca:33:13:72:16:a9:0c:cb:33:03:52:5d:c2:
                    d9:64:30:c9:59:c9:90:56:6b:fe:3f:2e:58:43:4c:
                    9c:4d:4d:28:bf:79:5d:c8:64:24:b1:8a:e5:ad:df:
                    52:9f:e9:86:55:b7:2a:c8:a1:0d:ed:2f:97:40:b6:
                    21:d8:1b:ee:ff:e8:e4:5d:00:73:07:ae:cd:c5:b9:
                    9f:54:84:68:5e:ec:d1:dd:d0:08:ec:f8:94:23:ae:
                    08:bd:a9:2d:de:f4:da:84:26:77:fe:35:69:1c:94:
                    fe:47:f4:4a:f0:92:78:27:5d:ee:d8:5b:ba:85:65:
                    85:b1:cf:bb:d9:3c:0a:fb:4f:d5:e0:b8:3a:f3:59:
                    0e:43:66:b3:6e:fc:f7:de:16:92:bc:c4:6d:37:c5:
                    80:1c:40:f1:45:13:3a:08:1e:c4:c3:3f:fd:9a:ce:
                    85:88:1b:d7:76:06:55:c6:87:b9:01:8b:42:c1:1a:
                    15:50:7f:90:c5:cb:f4:db:da:1b:c1:94:ed:d1:fa:
                    5a:11:2c:a1:aa:a5:10:4a:f6:32:aa:8d:50:ce:44:
                    65:f3:90:ed:6a:da:dc:ab:08:f3:4b:b5:d1:86:9e:
                    3e:cd:be:37:90:b4:69:77:ec:c0:d9:8d:10:a3:ad:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:3C:1C:59:8A:D3:F7:8B:15:16:4D:31:69:07:23:61:E0:A2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.100.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:00:3b:2d:4a:9c:f0:69:33:2d:63:3f:74:cd:c2:14:73:
         15:c4:27:97:cb:4f:d8:a1:2c:01:ad:5a:41:3c:db:b6:48:cf:
         ef:f2:7e:10:0f:f2:1a:59:92:7a:99:2e:95:47:69:24:d8:c3:
         30:a7:75:a2:a8:40:7c:76:a6:41:2c:ca:d0:c3:df:14:26:01:
         70:1f:9d:be:e7:71:8d:df:a1:bc:01:8c:27:cd:04:21:7a:b0:
         92:af:a4:63:f1:28:99:7a:55:fb:79:ae:8c:61:7c:96:45:94:
         84:a7:2e:e5:03:41:6f:1b:e5:de:ed:e4:e5:b3:45:ae:0a:87:
         af:65:ad:87:d2:37:be:fa:02:e4:c2:b8:55:87:9c:f6:60:ed:
         d0:82:ea:4a:7e:95:fa:de:6a:7e:1e:36:cd:ae:28:14:30:df:
         19:54:f7:90:7c:5c:1b:91:fa:04:32:ee:21:cb:6d:ae:82:26:
         d4:84:12:de:ec:86:f7:a2:21:98:a1:a6:e7:cf:41:f2:c6:5f:
         08:92:9f:fe:16:60:0f:a3:b3:46:b0:cb:a8:51:99:01:bf:ef:
         9e:34:5b:da:37:cb:ce:5f:e6:18:64:52:72:bb:14:28:fd:b2:
         05:c8:ce:db:d9:35:95:3a:8a:c4:f4:be:cd:21:c3:9e:e9:e0:
         02:56:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:06 2025 by rpki-client