Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/e4299bfe-0416-30dd-91b8-66d5bf6738a9.roa
File:                     e4299bfe-0416-30dd-91b8-66d5bf6738a9.roa (raw, json)
Hash identifier:          ZtFp/Efr+d54RNC0WudtznMYACWbJ/dR2EbDKTmDkG0=
Subject key identifier:   93:AA:87:7D:4C:F5:89:32:FE:F6:57:53:B0:41:1E:BC:14:9D:B8:12
Certificate issuer:       /CN=679734dc-7b32-421c-926d-8816be2f5e3b
Certificate serial:       010D0C9F43285849B3F52493B7E927EE36E9E880
Authority key identifier: 30:21:69:01:B6:1B:1D:09:B2:94:7C:EA:FE:8A:8D:64:46:61:76:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/e4299bfe-0416-30dd-91b8-66d5bf6738a9.roa
Signing time:             Wed 30 Apr 2025 23:57:27 +0000
ROA not before:           Wed 30 Apr 2025 23:57:27 +0000
ROA not after:            Tue 29 Jul 2025 23:57:27 +0000
asID:                     23370
IP address blocks:        199.167.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/679734dc-7b32-421c-926d-8816be2f5e3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/679734dc-7b32-421c-926d-8816be2f5e3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:f5:24:93:b7:e9:27:ee:36:e9:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679734dc-7b32-421c-926d-8816be2f5e3b
        Validity
            Not Before: Apr 30 23:57:27 2025 GMT
            Not After : Jul 29 23:57:27 2025 GMT
        Subject: CN=f80223c5-4ee4-481b-b400-c6bdd4b6587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:8d:8d:4c:33:be:c3:10:40:0a:47:39:ee:
                    0d:b2:e7:18:8e:0f:bc:12:23:0e:44:b6:67:76:34:
                    a9:a9:4f:f8:73:fa:87:ed:c1:59:2e:1f:23:ec:77:
                    84:84:d4:8c:58:18:a7:f4:4c:cc:62:73:f7:3f:41:
                    29:6d:89:06:75:f1:96:ff:88:12:43:7a:b2:25:87:
                    44:a6:66:cf:c2:91:98:f7:13:b7:ba:a1:94:ea:72:
                    be:8f:6b:cc:e7:c9:83:13:3c:82:57:17:95:a1:d4:
                    f2:d2:70:1a:34:9e:9e:9e:63:c0:76:59:f9:69:de:
                    24:8a:cf:9e:a4:89:8a:c5:fa:b4:05:d5:6b:78:65:
                    ed:b9:72:e9:99:97:7a:cb:f2:e7:fa:d5:6a:66:5d:
                    52:9a:dc:fc:8f:73:10:19:2d:0b:07:c4:11:21:a9:
                    92:26:89:23:fb:60:19:59:c4:09:8b:77:db:c5:88:
                    72:21:7e:51:77:f2:1a:55:60:86:ed:b3:9f:1f:e0:
                    c3:a1:90:37:df:8c:1a:27:78:55:39:86:b7:d1:79:
                    78:86:7d:10:26:b4:f7:23:4e:f8:37:a9:57:e2:67:
                    de:f6:11:d0:e7:6f:9c:b0:28:c6:c5:eb:e3:15:a5:
                    5d:07:3f:1d:67:40:0e:55:8c:33:b5:a3:23:af:af:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:87:7D:4C:F5:89:32:FE:F6:57:53:B0:41:1E:BC:14:9D:B8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/e4299bfe-0416-30dd-91b8-66d5bf6738a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b/679734dc-7b32-421c-926d-8816be2f5e3b.crl

            X509v3 Authority Key Identifier:
                keyid:30:21:69:01:B6:1B:1D:09:B2:94:7C:EA:FE:8A:8D:64:46:61:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/679734dc-7b32-421c-926d-8816be2f5e3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:26:84:53:ca:7e:1b:3d:e4:f3:37:7e:56:a2:4a:25:d6:
         60:00:d5:4c:7d:91:02:cb:0c:ea:7e:ff:92:44:58:52:3b:8a:
         cf:01:3f:9d:58:51:a9:5b:6f:8f:5e:07:f1:05:97:79:43:3a:
         c2:7f:45:da:95:11:27:98:73:fe:3f:66:20:23:f7:fc:ee:0f:
         bf:1a:bc:05:42:fe:d6:bb:fb:1f:5c:10:94:8f:20:e2:ff:01:
         5e:af:ab:2d:0e:56:ae:98:3d:e7:7d:17:27:48:27:91:ed:c1:
         9e:aa:5e:75:74:2a:c5:39:e5:1d:26:7e:72:58:19:de:b7:8d:
         59:39:11:41:23:ca:6c:e7:df:80:8c:1b:a5:66:e1:62:ec:42:
         0a:60:b6:b8:d7:b6:a1:55:11:e4:2b:47:da:bf:9f:6f:91:48:
         9b:3a:b1:b6:3c:a8:82:d6:2d:dd:75:9d:f4:67:36:5e:b9:25:
         8f:1e:97:8d:ef:fd:00:c7:93:17:01:20:8b:73:76:c6:2f:9a:
         f1:c7:a7:1d:a2:40:e0:b0:b4:8f:71:81:93:66:9e:15:e3:53:
         f4:d7:cd:c9:13:9c:01:72:d2:16:b6:08:98:24:7c:68:a3:4a:
         d8:f3:0f:d9:c3:a7:2a:15:fd:4e:65:c7:30:da:71:82:cd:80:
         03:3b:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:01:36 2025 by rpki-client