Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b0680413-d3b4-337b-b399-86b112b57bef.roa
File:                     b0680413-d3b4-337b-b399-86b112b57bef.roa (raw, json)
Hash identifier:          ZGhVm8GvNDcBdD9bVK9Zql7N6CCsISdGv+EfSUMmYME=
Subject key identifier:   14:18:17:BC:83:95:7B:3F:4A:97:51:04:0D:89:3C:9E:3F:92:23:0D
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F43285849C0A4ED3CE3DA4177714E1300
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b0680413-d3b4-337b-b399-86b112b57bef.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     32592
IP address blocks:        199.187.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ed:3c:e3:da:41:77:71:4e:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=4f822487-55b5-4fe4-89d7-39bae4f771cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:e7:8c:3e:7c:f3:50:97:4c:48:e1:c9:b9:
                    a7:30:b8:ad:c3:e2:74:7c:66:14:ff:3a:68:01:66:
                    37:14:80:be:87:f5:93:27:f9:af:ac:76:37:d5:1f:
                    ed:95:ef:90:10:a4:b5:07:20:ec:a9:ef:70:f0:e5:
                    d5:af:1b:5b:bb:89:a1:47:48:fb:23:a0:11:0e:be:
                    67:5a:e6:b5:f7:d3:0f:f7:90:15:a7:a2:23:f5:e8:
                    59:81:7e:4c:e4:8a:58:27:c5:b2:33:7b:de:69:f7:
                    b8:aa:49:fe:88:82:7d:36:11:f2:fd:ed:4c:55:f6:
                    d8:7a:24:a0:9f:33:58:fc:47:29:5f:5a:82:ff:aa:
                    f7:b6:8a:7d:c3:54:fc:e0:f7:86:af:f2:02:1e:af:
                    a3:75:62:27:81:63:7a:f0:5f:8d:05:35:60:40:bb:
                    8f:e4:0d:81:85:72:b3:73:65:40:58:43:c6:dd:fd:
                    2c:cd:14:3d:cd:89:ad:99:55:b1:93:b0:03:4b:ad:
                    d8:b3:f8:3f:d5:24:34:a5:ec:03:eb:a3:17:d2:2f:
                    38:a0:ff:70:31:f6:c0:07:56:1d:bf:a3:16:18:ee:
                    1f:d1:d3:9e:fc:bd:f4:0a:ce:7f:6a:b0:41:46:1b:
                    71:c1:6b:9e:b0:84:88:e5:03:a1:1f:aa:28:7d:35:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:17:BC:83:95:7B:3F:4A:97:51:04:0D:89:3C:9E:3F:92:23:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b0680413-d3b4-337b-b399-86b112b57bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:01:27:b7:23:26:39:45:9e:b1:9d:56:b3:a3:2c:ab:91:
         77:82:f9:83:05:e6:db:7c:47:62:c7:24:69:8c:67:8a:81:a1:
         d7:ba:dc:51:ea:c2:3b:41:a1:6c:49:e9:77:dc:3a:58:c6:4e:
         cf:5e:d1:db:0e:4d:3f:0d:c5:da:bc:ae:7a:45:21:2f:6f:c8:
         79:2d:be:32:48:48:35:47:3a:69:96:49:18:37:57:4e:90:3b:
         a8:27:73:55:8e:bb:64:71:76:a4:88:77:09:39:83:07:08:50:
         19:5b:c9:e1:d3:47:35:2c:28:58:70:1b:02:2e:4a:42:f0:a3:
         a1:ce:92:5d:5d:4e:78:b4:99:d4:59:fd:36:aa:0e:e5:6f:3b:
         e8:db:71:c6:aa:e0:10:6d:9e:77:99:8f:37:b3:df:e3:a8:10:
         20:f1:5a:b0:4d:23:f4:26:2d:89:27:16:36:c5:75:1b:2b:a8:
         3f:26:6e:87:e0:7e:e9:6b:90:88:e3:d4:75:97:75:e9:0a:cf:
         4a:8b:b2:c8:38:fe:08:63:34:59:ce:14:df:43:47:f5:35:83:
         fe:70:48:28:72:ba:e9:b4:d6:0e:cc:6f:25:30:94:ed:e8:67:
         64:9d:d1:6d:89:af:07:2c:3c:be:e1:3f:66:a4:de:0e:c5:53:
         5d:61:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:34:33 2025 by rpki-client