Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa
File:                     a1c3adb2-519c-3bee-967d-701809825e21.roa (raw, json)
Hash identifier:          AfqSmJr2BghXYpq+M3NzhKoasbxGLHosq8vL6cu29gM=
Subject key identifier:   B7:DE:56:4C:22:CB:46:2A:7F:81:FE:4E:C9:CE:90:E0:8B:48:0B:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849B9A9FABA8E9B72623B311350
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     3855
IP address blocks:        199.172.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fa:ba:8e:9b:72:62:3b:31:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=d4e9c21a-3250-4781-a318-3212f034ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:83:12:9e:ac:fd:4d:8a:00:a5:52:0b:d0:
                    a3:73:44:0b:3f:85:52:00:65:76:68:b6:c5:cc:ec:
                    fc:1e:6d:e7:d7:94:0e:2c:97:78:dd:3a:25:20:3d:
                    b1:f7:dc:d4:94:20:21:48:ee:05:ae:11:05:23:f2:
                    6d:fd:6f:9e:9f:ad:10:97:a7:34:06:1f:4a:2f:2a:
                    42:9e:7e:c1:fd:fd:50:28:43:43:ad:a3:5e:06:c1:
                    78:97:96:f4:c4:0b:38:76:ad:01:4e:e7:94:71:97:
                    65:8b:f1:59:d5:67:f7:bd:38:43:8c:87:87:94:33:
                    0c:ae:3c:af:36:23:89:a6:59:e3:32:fc:63:73:59:
                    9f:e8:52:de:fd:a2:99:d1:f0:c0:2a:b1:32:10:00:
                    5c:7d:60:31:1d:bd:15:da:76:34:9c:5b:60:7e:8d:
                    67:1e:c2:a4:f4:7e:86:63:e0:8f:9f:cc:99:a5:62:
                    33:bf:97:31:93:6c:08:1a:5f:39:fd:83:0e:14:b0:
                    0b:b4:0f:39:2e:2c:d1:ba:b4:3b:70:d5:bf:d4:94:
                    16:99:52:a7:4a:3f:21:a9:7f:7b:16:b6:4d:21:5e:
                    dd:9b:d6:53:af:f6:91:8d:01:35:1d:95:50:b3:81:
                    bd:24:04:ad:27:95:92:6c:a4:f7:bf:c7:0a:52:4c:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:56:4C:22:CB:46:2A:7F:81:FE:4E:C9:CE:90:E0:8B:48:0B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:22:7c:7b:e6:9f:3a:54:38:2e:36:2c:4c:78:c0:0f:ac:
         2c:f7:4e:ef:9b:b2:86:02:77:5a:d3:8e:95:cf:74:0a:6a:5c:
         05:08:5c:46:31:ad:6e:01:eb:8d:29:71:8b:3c:85:70:ea:ad:
         18:14:3b:0f:a8:41:e7:e3:fa:a7:21:88:43:82:ec:02:6c:6f:
         65:2f:a4:2c:b4:37:a4:35:70:1a:7e:1a:a2:f3:8f:7d:74:a5:
         ef:e0:25:7e:22:c2:e3:90:f6:57:f2:99:c7:93:cc:e6:de:33:
         da:72:e1:cf:dd:da:96:46:9c:7e:e2:8a:c2:59:e5:3d:73:7c:
         fb:90:75:12:77:9f:49:f3:66:f6:7d:ca:7d:da:51:38:76:54:
         91:aa:fa:fe:bb:ea:b6:29:aa:0c:18:aa:ec:5f:8f:62:bd:20:
         fb:7e:d8:4d:18:31:83:f9:72:69:09:fc:c5:0a:0e:6f:e1:29:
         e8:ec:9c:ef:40:ae:cb:f1:a1:ed:6f:ca:b5:ee:bf:35:bc:e3:
         74:86:ec:f9:fd:4d:57:ac:0e:95:bf:85:b4:b4:b8:4b:c5:5c:
         ef:e7:c8:b3:93:92:4e:98:7e:a0:af:4f:6c:db:0d:3c:4e:f8:
         60:69:fa:ed:a1:37:84:a1:b7:39:ac:10:33:b8:cc:ba:0f:41:
         c3:0d:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:10:58 2025 by rpki-client