Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
File:                     01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa (raw, json)
Hash identifier:          SYd3aq9SV18gL0ES3+Foerj2J2heDOJwtEoea95EA/A=
Subject key identifier:   D9:DE:56:30:4B:ED:12:EB:92:A7:6A:94:06:63:B6:9A:47:AC:32:73
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F43285849CBCFA7363E3B3097A3138F00
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     399337
IP address blocks:        209.151.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a7:36:3e:3b:30:97:a3:13:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=dc6eab54-bc88-4a13-a933-ec8775d51ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:5f:bc:53:3f:39:32:3c:24:27:f8:20:d3:
                    c5:6a:99:d8:ee:65:67:e6:ba:07:f8:04:04:88:4d:
                    35:48:f7:ef:85:a3:d7:9d:ae:38:7e:90:be:fa:5f:
                    01:be:22:c4:e9:8a:2e:55:f9:23:95:c3:cf:75:5c:
                    1f:56:77:fd:3f:fe:0d:1f:76:22:05:a9:f5:e2:d3:
                    41:14:78:b1:42:76:1e:8b:2e:f5:41:83:3e:dd:9f:
                    71:8e:a7:2a:f4:c8:db:3e:ca:72:e7:df:68:9b:10:
                    dc:ee:9c:f1:52:86:6a:33:71:f8:f5:86:23:1f:6f:
                    97:9f:8c:08:ea:11:ec:3b:16:d4:ae:7d:b4:d8:45:
                    bc:54:44:40:c4:36:4e:0a:2c:1c:52:e0:f3:93:78:
                    6d:28:9d:59:80:1c:cb:6c:ea:3f:7f:ab:73:d3:45:
                    86:28:e7:1c:d6:cb:f9:4c:ee:1a:d8:84:0c:b4:e6:
                    b8:af:d1:8d:f9:98:70:37:f4:d4:fc:0c:95:df:b0:
                    05:c3:11:32:02:60:a4:c4:0c:4c:84:4d:e7:ac:b3:
                    48:38:cb:8e:b2:d9:d7:f5:84:ce:ca:0e:37:7e:af:
                    7f:aa:b7:40:1d:05:91:cb:8c:f7:8a:77:99:2c:e5:
                    2d:7a:71:c2:8b:4a:6b:56:54:ff:9d:b2:40:bd:c0:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:56:30:4B:ED:12:EB:92:A7:6A:94:06:63:B6:9A:47:AC:32:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/01931ad3-30f4-3bfc-845d-d0f6a389b93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:27:95:09:78:71:77:5a:ee:8a:a2:53:d5:33:8d:48:81:
         b0:cd:19:8f:8c:7a:08:dc:71:bc:1e:1a:d5:d7:4e:ef:06:65:
         1f:e5:13:2b:f4:d7:33:c4:8e:08:3c:8d:a5:b7:82:18:45:b9:
         b1:62:e0:6a:27:96:59:f6:99:4f:39:79:20:38:c9:65:4d:ca:
         6d:4d:dc:b3:9a:5c:96:f8:84:40:0a:ca:77:11:a6:7c:7e:ce:
         54:67:25:fa:c5:33:f2:45:03:23:44:83:ab:a6:ec:d4:eb:13:
         c2:8f:76:92:fe:8b:86:06:f8:5e:db:5e:5f:57:08:c5:69:17:
         16:4c:3a:63:91:dc:26:7d:52:c8:36:b1:22:d8:35:ca:63:71:
         ba:96:8a:55:9e:8a:29:3f:9f:7a:48:95:de:58:1d:06:1d:9e:
         a1:f4:46:c7:b7:3c:09:0b:42:56:17:9a:cc:31:e0:a9:50:2b:
         d8:28:88:cc:69:91:22:a9:da:ff:f9:bd:f4:ff:68:29:59:48:
         78:75:4e:3e:a1:c9:dd:48:dd:99:8e:18:d7:f6:a7:f3:b8:3b:
         eb:91:c7:95:e2:c2:6e:10:b2:85:24:5d:7b:01:da:cd:10:80:
         59:54:e5:54:48:65:bf:b3:6f:b5:e1:1e:e1:4d:0d:c4:2d:75:
         cf:0e:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:30:47 2025 by rpki-client