Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
File:                     9279ec8c-949c-346a-89f2-5cf679fad74b.roa (raw, json)
Hash identifier:          5k3yjQwAdT0JOS3RIFEJwu1ypZLkY8DngZPqGnUzY+g=
Subject key identifier:   AB:53:86:FF:50:87:87:3E:B6:EB:67:D0:F9:0C:9F:C1:37:E2:F4:C8
Certificate issuer:       /CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
Certificate serial:       010D0C9F43285849B149F45C58C9791F5E19B600
Authority key identifier: 74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     25710
IP address blocks:        24.38.160.0/19 maxlen: 19
                          2606:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f4:5c:58:c9:79:1f:5e:19:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=acc6273b-4d0a-467a-a334-dedfe19a491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:7c:0e:04:ec:04:88:73:07:82:48:36:24:
                    d9:35:0e:5a:cc:6b:fc:be:0d:02:71:fc:ce:95:40:
                    68:76:d3:5b:9b:cb:aa:43:5c:5e:91:88:1f:ab:07:
                    6a:c3:be:4f:18:94:e7:4d:a8:47:52:b2:7f:13:95:
                    13:9c:1c:7f:45:bf:97:4d:70:84:72:5e:22:bb:db:
                    73:1a:de:e7:ca:bb:ac:fe:ff:a7:2c:51:e4:20:49:
                    d5:f6:c2:d3:f2:36:fb:ae:ca:15:06:2e:64:dc:59:
                    c5:5d:5f:ac:95:8d:0a:a8:b5:32:a3:e9:ad:a0:d5:
                    1d:41:6f:e0:76:58:44:5b:40:d5:d9:fa:f9:98:ba:
                    54:14:19:9f:e5:3f:3a:11:8c:77:ba:d9:15:1e:63:
                    e0:ea:88:f6:21:a8:73:55:11:38:56:d6:77:17:d8:
                    ec:82:9a:41:2c:c3:b6:d1:c2:4f:3f:86:49:6e:f2:
                    e1:fe:b3:e8:49:12:56:cd:e3:48:11:0f:fc:ac:eb:
                    20:13:c7:c8:44:19:1b:ed:b6:51:eb:dd:22:18:5b:
                    16:44:c2:83:01:64:d6:03:ea:5f:c0:bc:2b:25:e2:
                    5f:2e:e1:2a:94:8b:9d:a5:e7:73:c1:e0:8d:1f:1a:
                    f6:ea:6f:54:39:1d:1a:80:e0:10:48:fc:8c:dd:88:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:86:FF:50:87:87:3E:B6:EB:67:D0:F9:0C:9F:C1:37:E2:F4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl

            X509v3 Authority Key Identifier:
                keyid:74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.160.0/19
                IPv6:
                  2606:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:3e:c6:13:9e:ab:2f:72:93:75:72:32:44:5a:95:9a:c7:
         56:61:6c:ac:d4:3c:61:c0:e3:bb:bf:b4:64:62:c3:c5:60:81:
         1c:7f:67:33:72:2e:ee:23:97:dd:2e:35:f9:80:19:eb:92:ed:
         5c:eb:5b:0c:bc:0d:c8:43:59:10:3f:53:db:27:0b:18:60:d5:
         82:92:d6:e9:5d:f9:b5:bc:e2:f8:b0:c9:ef:ee:07:e5:53:93:
         6d:99:e4:22:7d:4b:df:b3:26:c6:5b:bc:cc:b2:02:8e:e6:95:
         60:2d:af:ca:9b:93:f9:4d:b1:b0:96:88:59:87:98:98:3b:bb:
         d7:1b:d1:b6:41:b7:2a:0e:20:6b:64:00:9f:fb:14:72:66:f0:
         08:8b:6e:df:82:21:88:36:02:c5:98:d5:31:b2:87:a4:a3:f7:
         1d:77:2a:b2:ba:db:a1:c1:f7:d8:e3:ba:e3:3a:60:e8:dd:95:
         7b:1e:9f:e3:67:e0:34:5f:fd:b1:6a:61:0d:a1:8f:fc:f5:7a:
         29:2f:fe:5f:23:33:b7:5d:02:4b:27:63:fc:f5:1c:ff:0a:a1:
         19:ee:f1:34:2e:38:d8:3d:7c:cc:82:8c:0e:a8:76:eb:31:97:
         80:f3:67:89:c3:22:f9:3a:12:fe:9c:e0:9d:7d:f2:65:4c:45:
         de:97:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:39:10 2025 by rpki-client