Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
File:                     9bf1544b-0e9d-317d-9cc7-e389479204f4.roa (raw, json)
Hash identifier:          KjVyuBIa0/ujOEoVPVdjw5jOezI4agAcdXSoPoSXh2w=
Subject key identifier:   C6:4E:1E:84:F3:97:72:C2:E3:F3:71:25:99:EB:BD:2A:9A:02:62:E3
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F43285849C4D4B5FFB111704BF9B30300
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     36321
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b5:ff:b1:11:70:4b:f9:b3:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=73c80305-45a8-4029-97f6-db4b0266334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:0e:95:81:1a:d8:05:64:c9:b7:e7:94:75:
                    b7:15:21:29:79:06:ad:54:06:bb:fa:bc:7f:3c:11:
                    fb:d3:bb:04:02:23:3e:ee:da:53:21:31:93:c0:98:
                    a6:15:d3:1e:d4:20:2b:20:ed:22:e8:92:2d:e0:25:
                    3b:4c:b3:67:77:b1:c9:e0:7a:29:ea:7d:ce:66:9a:
                    80:8f:e6:e4:16:11:61:8d:4d:05:74:8c:e5:76:67:
                    20:6a:86:76:8b:b3:f4:51:b4:6f:2a:6a:92:5f:19:
                    bb:d4:f4:87:37:d4:e7:df:58:49:f4:61:07:39:ab:
                    05:33:ff:8e:91:cc:71:71:95:25:4e:63:42:d4:a9:
                    83:77:3c:93:dd:3f:f5:92:d7:10:09:86:25:93:e3:
                    1f:10:5e:d6:bd:ca:61:95:30:c3:34:3c:92:80:15:
                    f5:a8:28:83:08:86:81:39:6b:b1:f3:d5:cd:f5:a7:
                    80:e6:34:e6:14:9b:76:87:2c:02:33:cd:76:c3:0e:
                    ee:a7:8c:a9:8f:73:ea:d3:d4:08:9a:ab:a7:7c:17:
                    bb:71:82:cd:34:31:92:19:63:27:77:89:1b:f3:dc:
                    5b:e4:61:3b:c2:37:c2:7b:7e:3a:0e:28:9a:65:25:
                    1d:2a:63:8a:54:37:85:4d:0a:10:0c:e1:39:38:fc:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4E:1E:84:F3:97:72:C2:E3:F3:71:25:99:EB:BD:2A:9A:02:62:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b9:35:86:89:d3:74:a4:5a:7f:7d:21:c1:db:67:c6:53:51:
         74:ac:1f:2f:de:66:6c:69:8e:e9:52:fa:08:ec:47:4e:bd:b5:
         f9:86:fb:ce:dc:ee:24:d1:7b:ef:cc:a9:9c:4c:72:e9:f9:54:
         38:e7:0a:a2:9f:c9:cf:0b:52:10:85:62:f1:22:57:1c:af:94:
         90:57:64:78:b8:d4:bf:d4:bf:f2:60:1e:11:87:a5:53:18:95:
         ef:ad:f6:87:8c:7f:d5:1b:40:18:34:bd:04:0e:ac:8d:b9:62:
         94:32:5f:a8:13:ba:da:57:06:08:b5:5b:10:37:d8:cc:d8:b8:
         17:e9:08:83:20:cd:24:85:ca:4e:cf:f2:df:cf:79:e5:be:88:
         03:fc:78:9e:ed:97:c4:25:42:2d:16:dd:44:bd:22:9b:86:89:
         83:4c:ff:1b:f5:82:27:ce:df:62:f7:94:21:a6:d2:04:26:9d:
         37:bb:63:be:63:a4:a2:95:80:bb:64:0b:b1:d2:f9:6b:8a:a7:
         02:71:8b:ef:b2:d4:a2:5e:c9:53:c7:30:02:8e:31:32:bc:ef:
         52:d2:f2:c9:b6:a0:de:70:e6:60:65:b3:61:ce:cb:c8:46:a6:
         06:75:9a:dc:b5:53:7f:2f:7e:28:26:b9:09:a7:87:6d:3a:ab:
         fe:20:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:54:01 2025 by rpki-client