Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa
File:                     b1906766-5f73-30cb-86c2-006e76cc7689.roa (raw, json)
Hash identifier:          PuxNKMdgz0TpnY8/OZ9HarNhQr2gDSJ5eI3BcMHVhzk=
Subject key identifier:   C9:B7:64:C3:48:CD:5C:54:98:F0:E2:ED:BC:68:A5:58:FB:CF:78:60
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1BBAE94A828DAE2C63EDDC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa
Signing time:             Thu 24 Apr 2025 11:17:07 +0000
ROA not before:           Thu 24 Apr 2025 11:17:07 +0000
ROA not after:            Wed 23 Jul 2025 11:17:07 +0000
asID:                     12041
IP address blocks:        199.182.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:bb:ae:94:a8:28:da:e2:c6:3e:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:17:07 2025 GMT
            Not After : Jul 23 11:17:07 2025 GMT
        Subject: CN=35bc5fa9-44f8-439d-9eca-424a293549e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:7c:7d:59:d2:c4:f0:35:35:0c:6e:ea:31:
                    a0:06:86:4d:2f:a6:fc:c6:85:3e:7a:0d:fb:63:3b:
                    61:52:57:0a:a4:30:74:d0:d2:15:b2:90:86:50:0f:
                    39:c6:fc:71:7f:a4:04:36:a4:35:d3:40:5b:56:72:
                    21:1a:ef:55:cf:8b:03:2a:1c:aa:7d:cc:05:cf:70:
                    61:2f:7f:f5:44:d6:df:6b:ab:fb:64:12:c8:ea:2b:
                    ae:e5:72:4c:10:cc:28:92:24:09:09:6c:e2:dc:4a:
                    1d:33:01:af:6c:d1:97:7a:e6:07:19:03:21:2f:8d:
                    e3:f5:fa:5c:43:ce:da:e1:49:aa:25:7d:c8:68:2a:
                    eb:c0:d1:d7:c4:d9:94:c1:21:7f:20:1b:c2:f9:81:
                    39:2c:5f:0b:49:9e:3d:d7:90:1a:d4:bf:3f:dd:84:
                    3c:a9:c7:9a:79:2b:f0:0e:0b:c4:e7:80:9b:70:27:
                    c0:44:12:de:ff:0a:5a:f2:61:c4:96:76:85:22:25:
                    f4:d0:2b:f6:6c:0a:35:1f:35:12:3f:fb:30:f8:7c:
                    7c:78:64:e7:07:d5:e7:76:97:78:16:a8:95:d0:e9:
                    03:94:38:5b:98:5f:ed:1e:24:78:6f:a6:16:f6:ad:
                    c4:af:7f:f4:0a:ef:16:b7:41:40:53:de:02:70:e4:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B7:64:C3:48:CD:5C:54:98:F0:E2:ED:BC:68:A5:58:FB:CF:78:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b1906766-5f73-30cb-86c2-006e76cc7689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:2e:92:ba:1b:64:a2:da:db:26:40:c0:4b:27:7e:be:32:
         40:fd:d4:e9:54:83:bf:a0:ec:61:23:c4:12:a7:86:65:ae:74:
         e1:33:e4:0c:a1:ac:ac:4e:0b:fe:7b:58:f0:62:fe:33:91:c6:
         53:9a:ac:62:d2:af:50:f9:b8:dc:58:86:78:8c:53:30:83:51:
         5c:0b:92:79:89:d5:62:0c:23:cf:6c:eb:ef:49:fe:e8:61:db:
         cc:a7:7c:77:10:74:b2:86:d7:34:81:d7:52:e8:3f:45:b9:4d:
         4a:99:d3:89:63:1e:92:44:85:3c:9b:7b:7b:55:26:1d:87:9f:
         35:7a:8a:e6:70:60:f5:9a:88:7c:ff:b8:09:78:7e:67:76:03:
         40:fe:1e:82:2d:a9:2d:26:f5:95:ff:d4:52:f8:3a:c7:c0:98:
         db:03:d9:2b:1a:d6:8e:ce:6d:ad:0e:56:aa:3b:4d:93:fc:c4:
         3b:15:1d:ee:4e:85:ea:dc:43:8f:f1:b5:2c:61:66:2c:c7:55:
         a7:a7:98:18:a3:16:13:1c:0b:d1:25:90:51:ef:97:79:68:82:
         64:fe:2b:4a:4e:95:8b:4c:9b:fe:53:6f:8d:7e:b6:96:d2:b0:
         2c:97:9d:af:61:e1:71:57:23:a7:0c:80:fc:18:97:cf:de:3f:
         b8:07:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:22:04 2025 by rpki-client