Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa
File:                     f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa (raw, json)
Hash identifier:          GgmDE7NC9jVflxqQd/ZzwZI2CMhU3KxJ9nbGL7574ac=
Subject key identifier:   E6:DE:63:7B:AA:4B:4D:C9:E7:8F:BA:16:C2:47:6C:10:1E:71:87:8C
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584A3A1572AF014C4E03C37AA980
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     40816
IP address blocks:        199.184.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:72:af:01:4c:4e:03:c3:7a:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=32cd48e8-75e6-4e29-aff0-f8c7934a72b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:fc:90:c4:41:7c:3e:4c:0e:ca:e8:b7:41:
                    d0:85:a3:62:63:8c:5c:86:47:1e:08:fa:a5:99:b3:
                    12:d2:91:28:17:1b:93:05:ae:9b:1c:d4:21:4d:29:
                    b5:a5:96:89:1e:02:41:26:c8:91:7f:41:77:0d:13:
                    8a:de:5f:1d:69:14:75:21:da:08:96:12:f6:91:8c:
                    d0:e8:aa:14:8d:91:31:f2:d4:fa:b6:59:a6:57:d4:
                    a9:a2:a1:a3:ee:5e:6e:8a:25:91:39:ef:ce:a0:19:
                    33:93:47:67:26:2b:7d:ff:32:c0:8c:14:21:aa:d5:
                    72:aa:3e:af:a9:1c:1d:0a:ae:2d:94:f5:f1:1e:26:
                    3b:c9:79:ef:7f:37:8c:2d:ba:b7:b1:c4:6c:c8:34:
                    b9:22:ec:14:30:6c:69:dc:c8:6e:e5:cb:e9:cf:2a:
                    fc:b3:78:05:94:4d:00:de:54:50:04:6e:b0:b7:00:
                    46:ce:f9:1a:e1:72:3d:e5:07:20:c5:36:96:54:1a:
                    04:68:2e:a5:46:59:e1:52:bb:ed:53:3a:6f:48:fe:
                    ea:5a:9b:ad:21:aa:78:93:70:e5:ee:be:2b:c4:84:
                    c4:2f:83:76:d9:1d:75:19:43:cb:d0:d6:69:ef:de:
                    5d:a4:7a:8d:10:39:15:ec:33:76:7f:d0:f4:24:ea:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:63:7B:AA:4B:4D:C9:E7:8F:BA:16:C2:47:6C:10:1E:71:87:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/f2e09a55-01f3-3d7c-a88a-1f96fac8d1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:eb:77:2b:00:f3:0f:da:6f:15:ea:cb:88:3b:f8:65:f6:d7:
         91:13:f7:b2:15:76:90:5d:15:01:30:85:b9:4b:c9:a4:96:65:
         7d:26:09:02:59:7d:87:3a:9b:92:ca:b5:bd:d2:f1:47:9b:f7:
         58:1c:70:a1:f7:de:3d:0e:34:f8:74:58:68:d9:85:20:b5:df:
         8a:42:14:e5:cd:27:62:75:2a:ec:73:37:70:7a:d8:bf:fe:a8:
         b1:aa:4d:a0:be:3d:55:6e:4b:25:4f:07:48:54:3a:24:72:1b:
         04:01:8a:4c:f0:61:0a:38:aa:82:cf:a7:10:ba:f6:28:a5:8e:
         84:71:38:9a:44:e7:51:91:5e:ea:e4:42:ba:7e:dc:f0:c5:04:
         47:dc:de:65:19:3e:70:41:16:2e:fb:50:31:0b:ab:82:65:2c:
         9d:b0:ca:64:d3:94:ce:c6:f8:d3:3b:6e:a4:af:5f:7d:21:36:
         80:36:62:17:5b:25:5d:b2:03:3b:1c:d4:4c:af:0b:e0:39:6d:
         cb:a4:0b:e0:0e:69:8a:2e:33:b2:88:30:a2:25:45:b2:28:65:
         e1:70:25:43:d4:c9:73:d3:db:b5:80:5f:14:d2:08:90:5f:fc:
         e6:4b:f3:29:cf:42:f2:07:0a:59:44:6f:4a:96:90:2d:f2:11:
         84:65:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:15:03 2025 by rpki-client