Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa
File:                     066c6246-b5fd-3b0e-8433-62fba46d7e33.roa (raw, json)
Hash identifier:          dzTsK0oNF/0xeHMYe2c6/JiHqu8xJRWbZXW2jQr/KgQ=
Subject key identifier:   90:AF:CE:A7:86:95:88:09:CB:00:34:66:63:AB:55:A1:AB:16:C4:4D
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285849BDDA2B00ED6830A2E72D0040
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     13807
IP address blocks:        199.182.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2b:00:ed:68:30:a2:e7:2d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=0845efa1-578c-452b-bbac-bca87fa11ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:62:20:be:1e:01:ca:02:db:59:e9:95:e6:
                    58:de:4a:5d:2d:60:8f:94:cf:6b:a8:68:c4:24:01:
                    61:df:28:7d:13:ea:26:3d:cf:20:b5:a2:8a:27:44:
                    6e:8a:3d:fb:53:2c:8b:35:cd:3e:b4:ca:78:85:28:
                    76:e5:c7:ad:fa:57:c1:f4:d5:22:f7:8d:5e:80:0e:
                    4d:e3:fb:27:c0:3a:08:71:c9:e3:ef:57:57:7e:40:
                    0c:2c:77:5b:5a:97:2b:b2:84:d6:07:3b:e7:31:18:
                    bf:d3:42:ed:c8:2d:6b:2c:27:06:fe:44:19:ed:3f:
                    cb:fe:59:b1:f8:00:43:e0:4f:59:0a:ef:9b:d3:fc:
                    8a:be:f0:60:6c:7c:e3:fa:4b:26:6c:00:5a:24:8a:
                    9a:e3:6f:b5:89:fd:5d:0d:75:9f:37:37:53:e5:44:
                    64:f8:de:b4:65:c5:fa:1f:8a:59:7d:4f:11:13:41:
                    3c:5a:2c:09:bf:98:4b:05:78:a6:5f:f8:3a:86:c0:
                    59:59:7c:b5:f4:c3:ff:09:8a:7b:43:8d:29:12:96:
                    4a:b5:f9:da:4f:f3:b0:99:71:a2:8f:32:8a:e6:a2:
                    7a:a1:37:86:cc:ba:10:d5:7a:17:be:25:55:46:98:
                    c9:55:31:ba:c1:8c:39:68:fd:cc:66:ca:0e:c8:9b:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:CE:A7:86:95:88:09:CB:00:34:66:63:AB:55:A1:AB:16:C4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:68:39:99:5b:74:fa:47:96:64:97:68:93:f5:86:f9:dc:99:
         ae:79:d3:4b:bf:8e:98:3f:5d:2b:e1:af:52:5e:2b:d5:e9:5d:
         99:a9:03:26:8b:b3:87:51:a0:84:ae:f9:af:87:91:dc:cb:e1:
         b5:55:34:65:0a:da:18:33:bf:f2:72:5e:40:16:23:14:b2:b0:
         94:5a:25:ba:a4:80:41:08:33:3e:53:aa:4e:81:15:af:49:83:
         a4:dd:07:c6:f6:33:9a:e1:e7:92:bd:27:57:9b:53:f8:4e:e0:
         16:05:a7:35:1e:e1:39:c0:3c:a4:10:20:5b:68:19:95:be:cc:
         06:e4:5d:c9:ab:28:00:ca:c4:04:91:e2:be:98:da:6c:f9:3e:
         4d:e0:3a:f1:e2:b4:0b:99:e7:74:3f:3d:36:fc:e6:af:17:3d:
         f3:ce:28:35:70:23:67:0e:76:22:fe:63:01:18:8e:5e:26:a9:
         71:e7:cb:48:a4:56:2b:1b:28:6f:d8:d0:e8:86:e2:8d:f9:20:
         52:e1:3e:39:6c:5e:e7:f4:f6:2a:cc:3f:15:20:73:d9:76:26:
         ef:0f:d8:dc:c4:7e:53:7e:91:94:6f:ed:53:0e:f1:bd:99:48:
         db:1b:93:fd:9e:2d:bf:32:ea:3f:c1:ff:f9:67:4f:29:a3:10:
         5d:56:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:24:35 2025 by rpki-client