Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa
File:                     ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa (raw, json)
Hash identifier:          +/FxSQzpjvpzw9sQWlzNz/DuKU5kQdqi+ILPMkvThUQ=
Subject key identifier:   DC:01:8E:57:8E:47:99:46:AF:CB:71:F2:F0:7E:4E:4B:88:D7:6A:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB565D4CE7398EA40781C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        198.45.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:56:5d:4c:e7:39:8e:a4:07:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cd322f49-7fe6-4bd8-a72a-be530bba398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:c2:6f:57:49:01:19:32:dd:68:bc:f9:9c:
                    e7:37:83:7f:64:91:32:c2:6c:94:f0:d3:83:b9:a9:
                    19:b4:fb:63:9d:f3:33:0f:67:3e:4b:a5:ed:69:99:
                    d3:04:b0:6a:4f:b0:2b:0f:69:24:41:77:46:f5:75:
                    1e:55:8b:94:12:59:ce:4a:b8:44:5a:76:12:ba:db:
                    ec:3a:7f:2f:f7:b4:9d:05:6f:8c:f5:a9:96:89:56:
                    da:a8:74:90:e3:73:44:e5:9a:e3:45:11:de:3f:7d:
                    65:24:39:f5:53:33:10:30:9d:16:03:81:37:a6:11:
                    32:d6:6d:fa:4a:b6:88:97:00:e7:06:29:42:91:8d:
                    85:77:66:71:79:4b:ef:aa:a1:38:1d:15:5e:e5:82:
                    cd:b7:21:fb:02:ad:76:4d:4b:cc:3a:d7:d4:de:d2:
                    ac:9f:21:70:ff:5c:80:a5:62:74:0f:3e:ba:0b:04:
                    25:af:da:8c:3e:bd:a2:0b:76:d0:fa:41:35:c4:18:
                    7c:ea:1e:8d:ed:c1:ea:78:bf:93:43:03:5a:3e:41:
                    12:a9:44:e8:98:90:45:8f:6f:9e:10:0e:10:33:4a:
                    d3:58:37:39:75:79:2d:c0:52:0f:c4:48:25:d8:a0:
                    a1:a1:94:67:36:bc:13:7e:ce:ef:48:14:4e:13:71:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:01:8E:57:8E:47:99:46:AF:CB:71:F2:F0:7E:4E:4B:88:D7:6A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce5e8c71-13be-370d-8f6c-11fcb70fbd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:df:9f:26:3d:a2:6b:51:2b:c0:7a:bf:66:19:16:b1:1c:5d:
         85:f8:1a:2c:df:c4:14:93:48:05:77:71:8d:11:28:dc:6c:03:
         95:a2:00:61:6e:0f:d7:58:7b:40:3e:00:6d:ac:ff:0a:33:fc:
         91:0d:2e:4d:d8:cd:ec:27:7b:e1:97:9d:cc:c7:e1:d9:46:c1:
         b3:43:d2:ea:b0:33:45:f7:ff:e8:bf:4f:2c:fb:c3:94:cb:65:
         92:29:85:35:fd:2d:61:44:0d:f3:09:65:50:c2:b2:c0:d7:9f:
         83:10:cc:b7:ce:7c:86:0c:f0:74:96:c1:e1:75:b8:be:a9:e0:
         1b:81:94:14:66:a4:75:1a:5f:3a:e4:a4:ce:ff:37:b5:00:ac:
         7d:ad:34:db:5b:3c:ba:af:bb:36:3e:27:0d:8e:c2:b8:32:d0:
         57:c1:7c:b3:97:a4:fa:0d:26:9b:13:4a:21:97:1b:db:4a:72:
         09:e2:00:ee:42:43:78:fd:bf:25:33:e6:7d:3d:b7:3f:4a:6b:
         f3:ce:5e:f7:89:9c:98:1c:5c:ce:96:ff:38:04:fc:92:7d:6c:
         35:f2:78:26:c5:d5:a4:b4:db:83:3f:f9:db:3a:c8:53:70:6e:
         02:dd:8b:05:07:5c:0e:94:9d:69:d4:99:34:0b:c1:af:b5:22:
         a2:6f:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:56:26 2025 by rpki-client