Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa
File:                     f5b01191-47b0-3e8c-bc59-76444f781269.roa (raw, json)
Hash identifier:          uX4i52DP+sjpgfVoz0HtguCieLJUSIWyvbB21EJlrTk=
Subject key identifier:   48:DA:AB:32:2B:03:7A:81:E0:4B:EB:81:C1:7B:4C:18:3F:CB:89:9A
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F43285849B6DF5A2A962A091EA194CF80
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     3851
IP address blocks:        207.197.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5a:2a:96:2a:09:1e:a1:94:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=41f38435-8187-475f-b2fb-6ad056c47d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:6e:98:fc:dc:4b:3e:12:29:bd:99:a7:55:
                    ac:4b:b9:f6:cd:01:81:a2:6b:1e:9f:98:b6:8d:46:
                    1c:50:d9:57:13:0e:d9:2e:1e:52:fc:1c:76:ba:db:
                    39:9c:c4:58:88:77:11:56:ad:8d:f5:ea:20:3e:1b:
                    a6:44:16:c1:de:5f:d0:89:8e:01:5b:28:a8:eb:4d:
                    49:d5:88:8b:0b:78:d9:49:61:d5:9f:0e:91:fc:b9:
                    ef:99:39:14:be:b8:80:37:7b:04:f4:d4:96:24:01:
                    fa:dc:74:12:85:0a:93:dd:3b:35:98:44:a3:8d:e5:
                    71:fb:85:26:0f:b8:c8:2d:1f:78:f0:a5:59:81:08:
                    2a:e4:48:9d:5c:7b:ac:d3:95:a9:66:91:29:e2:e7:
                    3d:bc:90:76:32:0f:9d:c2:a4:32:5d:41:79:c7:9c:
                    55:d8:c2:50:79:d9:8e:fc:e2:fc:d8:95:e0:04:08:
                    19:c4:de:ab:34:4f:24:d7:83:7b:3c:12:dc:a0:0a:
                    17:b1:9b:78:86:76:44:04:ab:30:fe:5b:0d:1b:21:
                    97:dc:ac:f4:d0:1b:32:8a:cf:e4:d7:b5:f5:26:e9:
                    b2:bc:b9:b8:96:4d:63:f6:ba:cb:fa:ca:d8:32:72:
                    64:fc:3c:ae:5b:88:51:75:1d:81:f0:b5:e2:ac:06:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DA:AB:32:2B:03:7A:81:E0:4B:EB:81:C1:7B:4C:18:3F:CB:89:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:57:b2:33:49:99:72:ff:75:71:97:a3:ae:4c:22:6c:32:
         2c:87:72:d7:5f:d2:87:91:4e:08:61:97:16:b4:23:87:8e:59:
         f8:4c:03:d5:ee:1e:a7:20:8b:ac:73:49:e1:fd:63:24:d7:6b:
         86:f1:cf:8c:ad:fd:42:54:e8:21:c3:18:4d:0d:c7:38:7b:94:
         fa:e8:09:b3:e9:21:c5:27:c2:e3:73:17:7d:8e:55:35:57:60:
         3f:b5:21:4b:b8:2c:c1:ab:33:31:ff:60:10:55:b8:22:05:80:
         6d:dc:1f:35:33:5b:b5:6b:52:d3:0a:09:1f:78:7e:79:d4:ff:
         5d:dc:e5:50:38:6d:5b:d9:d9:76:fa:65:6f:c1:d1:de:b8:78:
         23:c9:ab:16:23:d3:cc:bd:33:42:dd:60:b5:db:82:12:58:89:
         67:fd:4c:00:75:81:28:73:37:20:56:36:4d:fe:1b:6c:a8:b9:
         81:66:35:be:39:f1:b2:eb:5f:61:fc:43:97:5a:48:bf:a8:ca:
         6f:9d:8a:5d:2b:ff:95:f1:0f:af:5a:6e:d5:1b:af:07:fc:59:
         ff:ab:24:37:a7:76:df:f9:53:f4:43:01:2a:56:d9:3f:e7:50:
         92:82:7e:91:59:49:91:59:b6:bb:9d:f3:ad:cf:f1:ff:d0:a1:
         04:77:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:28 2025 by rpki-client