Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa
File:                     a32eae39-94aa-37fa-bd74-50b883837770.roa (raw, json)
Hash identifier:          nF9lsqlqcn2BVOrG0x2Zy0VUTC1lAc37zOnQGlDjcCM=
Subject key identifier:   09:AE:09:64:F5:41:65:C2:CF:1E:13:4F:F2:64:9A:D5:F9:50:AB:75
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285849BB0F74FF1B285EDEC3FD0C00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     19637
IP address blocks:        192.19.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:74:ff:1b:28:5e:de:c3:fd:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=81a6d88b-58c0-481c-9008-4dbef2991633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:7e:43:68:17:a6:5f:9b:7c:38:5e:e7:65:
                    1a:22:05:a9:1b:46:19:17:68:69:60:7f:bf:be:5b:
                    e8:85:99:ee:0b:88:e1:97:13:ca:5f:75:68:aa:ad:
                    05:75:0d:86:7c:11:47:c2:a3:4d:09:0a:00:aa:b1:
                    2b:d8:b6:eb:3a:56:33:84:44:ec:ce:4d:4e:a4:76:
                    ce:fd:9f:24:6d:45:9b:ef:b6:f2:29:0a:72:ae:14:
                    bf:ee:17:00:63:26:bb:0d:01:7b:05:89:c3:36:d1:
                    a1:65:5f:f4:91:5f:3b:61:d9:0e:8f:a0:2d:37:70:
                    50:94:0a:fb:ec:56:a5:b0:73:5b:45:da:68:07:d3:
                    71:23:85:ea:16:dd:b1:fb:fe:ee:99:4b:2e:64:c9:
                    71:61:55:04:0c:8e:bf:81:3c:f0:65:58:30:00:aa:
                    93:1e:90:b7:92:9a:3f:8e:bd:a8:73:18:1e:fd:b0:
                    24:36:a6:91:1e:62:c4:20:ba:b3:78:ac:77:c9:69:
                    88:ac:6f:c8:01:95:22:a7:8b:61:2e:1a:ad:15:fe:
                    a7:f8:34:3b:36:7d:14:8e:c0:f6:6c:56:8b:bc:b7:
                    c4:40:1b:ca:b6:87:cc:62:e6:20:5c:70:de:dd:ab:
                    7e:ed:3a:d7:e6:08:32:e6:b4:af:8d:cc:22:d4:ce:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:09:64:F5:41:65:C2:CF:1E:13:4F:F2:64:9A:D5:F9:50:AB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:74:0b:37:95:69:48:a7:a2:99:ab:e6:48:8d:48:dd:9a:69:
         16:cc:dd:9c:1d:3d:1c:4d:b4:0b:82:40:ec:db:39:05:4c:93:
         16:86:78:cb:8c:64:15:89:02:55:9f:5a:92:1d:04:c1:4e:7e:
         08:e6:98:80:25:87:49:1e:9d:a0:ec:d6:db:35:6b:4b:b8:9e:
         bd:02:d7:85:32:52:b1:02:d2:68:ad:70:c8:0f:dc:79:8f:ee:
         a2:a5:97:1a:ae:d6:af:69:b3:ca:b0:df:ee:0f:96:f1:6d:60:
         95:8e:b3:c1:9b:76:40:9c:16:03:99:1b:00:ad:e9:7b:50:6a:
         37:20:f5:b4:aa:16:3e:c3:9f:ba:1a:da:50:1f:6c:5d:5d:c3:
         bf:5c:a2:a3:49:3e:d2:9c:72:3b:95:81:a4:f8:39:f0:94:6a:
         53:da:6d:78:1c:e4:d0:a6:31:7a:05:42:c2:87:0d:eb:62:c9:
         68:38:24:91:b4:48:5d:02:47:9e:30:15:f1:33:14:c7:71:46:
         a3:0d:53:0a:45:a2:eb:00:23:55:38:8f:d8:29:3f:af:bd:1b:
         25:c3:8b:4f:36:3a:03:93:74:99:0e:ef:98:34:c2:1c:8e:71:
         a5:67:18:36:6f:e1:2e:4b:7e:1c:a6:86:ec:19:93:82:c1:af:
         a5:57:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:34 2025 by rpki-client