Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa
File:                     9d9939e1-e7c3-3ea6-a720-303f759b790e.roa (raw, json)
Hash identifier:          tt82b9nLJkHNJDIE7hLIry8HG6A5o40KMRm3sc3u8a0=
Subject key identifier:   3C:87:4A:AB:9A:2B:74:F2:04:5D:50:C9:AE:C3:CA:34:41:FA:9D:93
Certificate issuer:       /CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d
Certificate serial:       010D0C9F432858499829C5BE9B205B280BCCF780
Authority key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        199.180.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c5:be:9b:20:5b:28:0b:cc:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=b029a8d4-5e9b-4d7d-b440-b91093308b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:59:ef:a9:8b:16:e3:61:ce:bf:3e:c0:8b:
                    ca:94:3b:2f:99:0e:41:30:02:69:45:d1:53:bf:21:
                    59:a1:e4:a5:32:7c:a5:f9:a7:c4:47:0d:40:40:fc:
                    f7:89:76:f8:1b:2a:ad:27:d0:00:a3:63:18:32:79:
                    9d:c4:08:57:ce:52:f3:0c:29:de:94:fc:f6:e0:a2:
                    1c:e2:34:ac:0c:cb:76:99:31:5f:9f:3d:05:09:71:
                    80:96:a0:32:6b:3e:6c:95:02:96:0c:ee:df:91:0b:
                    07:68:40:4f:19:c6:d6:ee:05:b8:0e:95:d4:28:4e:
                    34:84:53:00:52:ac:cd:13:d1:bb:0d:c9:ad:03:ce:
                    1b:74:2c:ee:e8:09:66:1a:61:d6:59:32:00:30:d7:
                    90:b5:06:dd:2c:77:12:29:68:db:ef:69:b7:b0:6f:
                    0f:5d:b9:53:83:39:6e:94:64:f0:0a:a7:e3:32:b6:
                    99:e1:20:50:e5:d3:04:c1:6d:e4:43:ea:81:47:b8:
                    1d:be:da:1d:aa:b6:67:51:4d:dd:ac:43:df:2b:fb:
                    8d:46:f2:3b:fa:c8:4d:43:af:81:aa:81:02:86:20:
                    ec:5c:42:8a:9d:36:c9:8f:a6:76:ca:8e:6b:43:0d:
                    32:8a:b4:c9:5e:c2:ae:64:66:c5:d1:d5:32:f9:03:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:87:4A:AB:9A:2B:74:F2:04:5D:50:C9:AE:C3:CA:34:41:FA:9D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0b:59:5e:59:07:7e:8a:8e:5a:17:ac:bf:4f:d3:05:c2:03:
         cd:c6:40:a9:2f:6e:55:9c:0e:67:08:f3:c4:2a:e5:79:17:f6:
         b6:8c:76:9c:4d:70:b0:84:3c:5b:2f:64:1d:71:23:d6:9e:75:
         1d:dc:a4:f0:ac:65:04:6b:5e:b2:28:6b:e5:a1:fc:28:6c:55:
         c6:fb:81:63:fe:ef:5d:7b:59:8c:2d:11:34:fa:c1:c6:40:dc:
         aa:9e:fd:a9:08:11:27:23:52:8c:f5:0d:70:4e:d7:f0:c2:12:
         4d:21:00:d2:ed:b3:fa:80:e4:b0:10:a5:e3:56:db:ba:f7:5f:
         69:cb:09:70:ef:7b:de:3f:25:9e:d4:70:36:fc:c3:62:38:39:
         01:57:6c:10:bd:ac:f6:22:29:56:ca:7c:18:32:b0:d0:e5:6b:
         bb:2a:21:22:da:50:94:e5:e9:f9:85:a2:ab:23:7b:54:a9:e1:
         1b:03:f8:b8:96:89:11:56:77:c6:e4:63:2f:95:e9:b6:a8:75:
         13:a4:7d:61:ea:eb:62:9a:26:ff:cc:29:ce:17:a8:f9:ac:1c:
         ed:30:8e:3b:d2:31:3b:3e:96:3a:90:41:01:c8:c4:c6:6c:d7:
         43:a0:fb:30:98:6b:7d:55:86:f4:d6:25:6e:e2:d3:b3:8a:9a:
         c0:f4:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:55:48 2025 by rpki-client