Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa
File:                     f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa (raw, json)
Hash identifier:          Sqq5+YZhhqjb5ETkWnu2d/OC4j9TjsL7l+kHmddcvqQ=
Subject key identifier:   37:E2:C6:12:A6:7A:2C:66:C6:46:30:13:52:BB:53:3C:CE:77:1C:F1
Certificate issuer:       /CN=5cc3157b-f4de-42ca-905c-b5c839bb17bb
Certificate serial:       010D0C9F43285849FCAA8422878356D6525F7A80
Authority key identifier: 4C:FD:F1:34:C9:07:89:05:E7:A4:4B:54:DE:35:C0:24:2E:EC:04:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     198949
IP address blocks:        132.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:84:22:87:83:56:d6:52:5f:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc3157b-f4de-42ca-905c-b5c839bb17bb
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=af252607-8c09-419f-bf79-df6f38ee95f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:24:22:67:46:83:97:74:7f:24:4b:80:dc:
                    39:4d:4d:59:3f:25:92:6c:d7:fc:e8:89:bc:cf:9b:
                    fa:5a:a3:18:ea:84:26:3e:ae:01:de:54:dd:63:c6:
                    63:ae:42:8a:cd:f6:a8:40:f1:e8:46:b4:33:dc:63:
                    62:c9:a4:ab:62:15:87:53:f2:83:42:ba:2d:24:ca:
                    f6:d5:4e:34:1c:29:5e:92:b5:2e:ad:98:27:01:c2:
                    36:ca:13:b2:b9:6e:a5:ac:6d:47:7e:04:7c:51:2c:
                    53:a4:14:c4:a5:3c:03:83:d0:47:78:c0:32:0d:45:
                    60:4c:d8:f3:bb:31:71:0a:71:94:a8:2d:20:7d:55:
                    ad:52:ea:5f:35:fc:7d:49:5e:61:54:44:7a:f5:66:
                    5b:c6:08:9d:a0:7d:0b:0f:a2:d7:42:80:03:4c:69:
                    ff:9c:ab:ac:e2:26:b9:48:4d:1a:dc:76:11:66:84:
                    20:71:7f:df:4e:8d:9e:f2:83:07:77:c6:07:d4:c0:
                    95:97:23:19:f5:60:35:ab:d3:e2:47:02:ab:47:fe:
                    1c:df:38:23:5e:a6:13:5e:15:a9:55:93:13:8f:bd:
                    19:04:d8:8d:ea:96:1b:b0:53:cb:23:b9:d3:8b:68:
                    66:4e:18:3a:0d:f8:67:04:f5:eb:4a:81:2f:dc:11:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E2:C6:12:A6:7A:2C:66:C6:46:30:13:52:BB:53:3C:CE:77:1C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/f441e96c-c4e9-3b06-bab4-4a7437df1ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb/5cc3157b-f4de-42ca-905c-b5c839bb17bb.crl

            X509v3 Authority Key Identifier:
                keyid:4C:FD:F1:34:C9:07:89:05:E7:A4:4B:54:DE:35:C0:24:2E:EC:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5cc3157b-f4de-42ca-905c-b5c839bb17bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:8b:5c:d1:47:d1:2f:47:fd:6f:db:1f:8e:c3:10:b0:4a:dd:
         5d:dc:75:3c:bd:5c:51:e9:a6:ec:a5:14:2f:35:16:4f:b7:4c:
         86:94:e3:c8:6e:b3:a5:23:6e:ad:f5:c3:bb:7d:2d:99:2a:5f:
         a8:e2:84:51:48:fa:26:14:6d:50:ca:30:50:4a:49:2b:15:0c:
         48:06:f5:4c:24:82:26:0f:3a:58:9d:6a:fa:90:d5:37:da:0d:
         e1:95:67:6f:36:60:e2:6e:12:2c:91:ac:df:eb:31:3e:1a:d0:
         8b:44:4b:d1:e1:b7:cd:4e:87:4f:c7:cd:e5:fb:91:a9:34:11:
         2b:1d:3f:78:3a:5b:46:8a:58:f1:18:01:48:0e:a7:51:00:7c:
         5f:05:ce:9a:4c:8e:5c:55:5f:94:95:d0:66:60:b1:09:dd:a0:
         fb:7a:af:e2:f1:cb:94:70:2e:01:e5:38:56:c3:b5:8e:a5:0c:
         66:3f:a6:f9:84:48:1d:01:46:3c:f8:42:4d:55:90:bb:d6:e2:
         32:22:c4:16:f8:62:38:8d:b9:f1:c5:8d:65:49:3a:c0:0a:cb:
         d4:64:e0:f6:84:74:1a:39:a3:12:ec:a7:6a:b9:f0:39:0d:e0:
         30:7d:8e:3c:2d:25:fc:9a:53:7c:6f:dc:58:fc:23:a0:f0:77:
         86:ca:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:25 2025 by rpki-client