Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
File:                     8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa (raw, json)
Hash identifier:          BJdx1sePyHTOY4iWxmc6hSagV8j6Cm9zebhYzPhK48M=
Subject key identifier:   4E:39:52:60:4E:F1:97:5D:99:10:34:B6:FC:54:5C:9F:9F:83:88:FD
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285849C904EF4D8C8B0E7E21C45DA0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     6208
IP address blocks:        199.116.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ef:4d:8c:8b:0e:7e:21:c4:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=332d4d2e-b234-4210-9e51-da63d3dbb372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:5b:32:a4:81:18:48:de:34:27:81:34:7a:
                    71:4f:4c:d0:64:84:a7:90:e6:c3:7d:d4:6e:9b:88:
                    6f:2f:34:da:34:27:28:d6:d6:e4:0b:68:20:dd:5d:
                    35:0b:ef:e6:e6:1f:29:ed:a7:ce:41:ed:c5:c7:c2:
                    2a:ac:23:95:dd:55:bf:9e:22:f2:4e:51:82:87:63:
                    2f:ab:a0:f5:e9:f0:86:3d:d1:21:bb:f5:69:2b:3b:
                    2b:cb:46:b4:77:e6:72:e8:33:6c:d7:7f:2a:4a:7c:
                    ab:4a:78:8f:02:62:ca:a1:07:f5:28:23:54:14:99:
                    b7:43:be:67:39:03:7c:32:c2:cd:00:88:5b:a1:a6:
                    cd:6d:a9:2c:b3:c6:ec:ec:f3:3e:65:e0:b0:99:e2:
                    b2:21:d0:0d:1f:6b:c7:51:6a:a7:3b:14:47:27:47:
                    91:4b:6c:49:84:4d:e5:5b:db:ed:2c:96:46:19:58:
                    62:2e:f5:2a:89:f6:47:81:c3:fd:d2:36:50:77:c1:
                    0f:bf:22:f2:28:ef:ef:fa:8e:c1:b2:d9:93:46:dd:
                    48:1d:05:53:af:99:0d:b5:ea:92:76:7c:82:ce:17:
                    54:8b:47:b6:a9:e5:8f:e4:84:8a:48:3c:47:a8:45:
                    77:4d:ff:48:e8:53:06:be:d9:9d:5c:7b:22:6d:8e:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:39:52:60:4E:F1:97:5D:99:10:34:B6:FC:54:5C:9F:9F:83:88:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:93:1f:c0:79:ef:e0:cc:7c:61:b0:b1:d8:94:f5:8d:69:f8:
         59:19:7c:66:8d:e8:1e:e1:67:66:9d:56:ae:8c:e6:41:a7:be:
         3e:82:94:92:bc:6d:ce:52:7c:bb:90:49:99:52:09:e9:87:f0:
         6a:fd:3a:e3:1f:a3:c9:95:b6:b2:70:80:30:5e:07:55:b1:45:
         55:e9:98:da:a7:ee:db:d7:90:8a:70:b9:cb:49:e1:f2:50:d1:
         94:cf:87:85:af:c6:e3:9a:35:d4:7c:90:16:23:f5:ae:f4:f0:
         e6:44:89:88:2c:c6:67:93:d3:52:b8:1e:05:99:a9:d5:80:b6:
         cf:3e:1c:6d:4f:d7:be:54:44:12:10:5e:3b:fd:5f:44:97:dd:
         c8:f3:cf:7e:01:fd:44:7f:84:7f:c8:40:ee:19:e2:67:f2:bf:
         b0:7d:b8:b8:c5:12:ae:25:cc:67:51:e1:d5:72:83:f4:81:30:
         79:85:0d:9a:c8:0b:53:6b:3b:2d:af:89:fe:64:f8:91:fa:b3:
         74:2f:14:4d:d4:bb:ee:6b:3b:fb:9b:86:73:75:07:9b:56:ae:
         30:66:6b:de:38:0f:2b:84:39:73:1e:01:f5:2b:b1:45:10:c1:
         69:9e:84:b6:e4:c4:62:2e:59:f8:b3:0c:a7:2c:9d:b9:1d:50:
         6c:46:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:19 2025 by rpki-client