Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
File:                     8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa (raw, json)
Hash identifier:          UzO/Kegxk8/2VAcfObkNO1c0nGAoFYVLNgY3t/LT2CI=
Subject key identifier:   42:67:70:76:00:CB:FB:79:02:30:8E:AD:3D:EF:19:7F:8A:31:44:5D
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F43285849A61F34CE0506001DBF269080
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     397016
IP address blocks:        198.73.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:34:ce:05:06:00:1d:bf:26:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=d68498ae-eebc-4697-9c9b-50732834a8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:65:a7:8f:4b:a2:23:f2:c4:98:63:cf:25:
                    be:fe:48:f9:82:d5:35:dd:61:dc:29:65:c3:5a:f4:
                    2e:56:16:aa:34:75:e0:ae:7c:d2:a7:3c:36:ba:03:
                    2d:0f:1a:24:fc:6a:9d:60:4f:b0:91:45:9a:6c:f2:
                    97:59:60:02:f6:f7:6c:cd:75:9e:db:41:81:25:d7:
                    6f:7b:ec:92:69:b3:ee:96:d9:07:1f:c8:59:ae:80:
                    64:88:9d:1b:41:7d:37:a5:ac:6d:a5:9b:29:4b:f8:
                    5e:ec:4b:7d:05:f4:f1:9d:4f:96:f9:5b:74:3f:80:
                    17:2b:88:3a:3a:47:99:6b:fa:07:4b:dc:6a:d4:95:
                    85:47:99:1f:3a:75:64:7b:a1:4d:8e:af:80:a1:b4:
                    df:2d:55:de:c0:e0:05:9b:cf:c7:d0:54:bd:7d:16:
                    b7:d7:62:8a:89:68:49:e0:40:3b:a0:0b:77:09:96:
                    70:61:96:f5:d4:66:4f:47:ca:91:65:b9:ff:0c:bc:
                    8d:51:62:81:2e:95:77:4b:bb:df:6b:db:f9:df:7b:
                    ee:1b:1f:18:e0:32:61:15:f8:9b:64:f5:23:6d:e3:
                    bf:1a:6c:16:4d:4b:34:fb:50:53:9d:10:0b:0d:22:
                    b6:e3:72:eb:ed:7a:18:fb:2b:29:23:94:08:7a:be:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:70:76:00:CB:FB:79:02:30:8E:AD:3D:EF:19:7F:8A:31:44:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:b0:b1:04:1b:ad:ae:1d:2b:4e:bf:23:e8:3c:d1:93:2c:
         fa:3f:6e:4b:d1:ad:51:fc:b8:93:da:02:6e:0a:26:aa:8f:fb:
         fc:16:25:ba:f2:aa:a6:f4:db:97:c9:44:68:14:9b:e7:79:61:
         de:8f:5f:2f:64:e2:e1:7c:dc:88:2b:4c:13:63:14:3e:d0:b3:
         01:28:14:2e:75:d7:42:8e:b0:0f:ec:84:80:97:99:8a:22:a8:
         74:2f:e5:dc:17:87:7d:2a:62:46:6e:57:0b:e1:09:a5:cc:64:
         5b:8e:ae:35:46:dd:63:01:47:79:fd:c1:bc:75:5c:76:79:20:
         3e:2b:18:bd:3f:1c:30:0a:ca:41:8b:c9:54:62:47:74:40:94:
         b0:18:7b:49:9b:ce:54:6e:4d:10:75:34:be:08:6e:5d:42:bd:
         7d:3e:f7:23:7e:6c:31:c5:b1:d5:61:89:4a:d5:a3:30:4f:45:
         5f:90:fa:1b:e7:42:e8:e8:af:c4:94:b6:07:c2:82:60:64:c7:
         3e:ae:f0:bf:e7:5f:91:8b:ef:b6:7a:e2:51:0e:f8:bb:6f:6d:
         de:f8:0b:6a:db:22:36:a4:92:a7:44:d0:eb:84:56:44:f9:b3:
         32:77:88:25:c0:3d:4d:dc:b0:24:d8:dc:ca:ed:ef:02:36:ed:
         dc:67:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:26 2025 by rpki-client