Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa
File:                     fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa (raw, json)
Hash identifier:          XNvalVr2KjWVetXP1yZrr/NkP4UH5Qo/nifzRep2fJ4=
Subject key identifier:   B1:47:CB:A5:90:67:6F:E2:47:3F:2B:D3:4A:22:C5:7E:7D:D5:B7:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB58C8171D57B362516D8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        198.45.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b5:8c:81:71:d5:7b:36:25:16:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=11d95e9e-020e-4759-901b-7b22160e39cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:45:d1:b4:2f:ea:28:ab:be:69:97:a2:10:
                    47:9a:00:90:51:e0:e3:a0:5a:20:77:26:00:8b:c3:
                    b5:30:61:98:c7:5b:1f:50:f1:d3:69:ab:de:28:86:
                    e0:d3:e2:9c:2c:32:e1:d1:2d:90:59:10:34:e3:9d:
                    c8:31:85:20:72:5d:4d:ee:ab:eb:40:36:90:76:37:
                    73:b4:91:7d:20:58:76:58:cb:48:9b:e3:60:32:aa:
                    e1:bf:54:76:ef:a7:73:50:f6:71:25:59:1e:ec:47:
                    8e:22:56:37:c0:1f:5e:6e:bd:6d:7d:e5:51:3b:9c:
                    28:08:83:63:23:51:d6:b5:57:3a:85:17:4f:d2:e3:
                    f2:33:13:d8:cc:1d:a1:e5:7a:28:46:b3:a3:d6:9a:
                    e8:fc:c7:0d:9a:ac:53:ee:a1:2c:69:07:da:8e:96:
                    fc:3b:94:67:cd:a5:ca:dc:38:57:ac:1e:db:5b:25:
                    8e:f4:8c:25:a5:dc:e1:c5:3f:bc:1c:3a:61:03:8c:
                    17:56:6d:95:c5:ab:14:1d:fd:8c:04:5e:ef:f7:75:
                    f7:ea:a8:73:6b:0b:64:23:dd:af:3f:29:d8:3c:9f:
                    bf:ac:25:45:de:0e:c3:0c:2f:ac:3e:b4:19:11:37:
                    13:ce:9b:59:ff:83:8a:25:f9:aa:be:b3:2f:c8:53:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:CB:A5:90:67:6F:E2:47:3F:2B:D3:4A:22:C5:7E:7D:D5:B7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:62:c4:b9:b6:01:2c:ef:2f:1a:62:a1:39:bb:c7:d9:6c:
         3d:43:56:6a:86:ff:65:3e:9d:0e:fc:35:26:e8:e7:6f:b6:0b:
         c4:d0:6e:ac:12:55:74:db:87:ce:4f:d9:21:37:88:63:79:a4:
         ea:63:be:c1:55:96:eb:6a:c7:05:0a:97:46:8e:b7:00:25:ab:
         ee:01:a3:0a:65:02:57:15:e8:2f:ce:23:4c:4e:39:0e:16:81:
         d3:9e:39:f0:ac:d0:db:6b:64:13:4b:d5:1d:67:04:8e:f4:82:
         70:19:14:6c:c0:41:79:76:cb:d7:58:8f:3a:c5:64:62:28:00:
         e3:4b:48:af:bc:47:0d:bf:0f:a3:02:98:b0:b2:d8:29:51:9a:
         23:d5:41:6f:9a:72:34:e4:d3:ee:6d:8d:d9:fb:41:22:74:3d:
         ce:6e:73:92:cf:d2:a4:9f:68:85:04:9e:d0:dd:0a:7f:14:42:
         1c:a0:9d:17:1e:38:96:ea:70:99:2c:df:7a:f6:be:26:9a:a8:
         66:ee:91:c2:de:e3:b1:7f:60:b9:16:75:23:45:9a:b4:f2:7e:
         be:de:13:fe:f3:e0:2b:0b:63:94:8a:7a:6e:75:fe:77:59:e0:
         56:94:80:0f:4f:1c:37:ac:5d:3c:49:af:43:11:4b:9e:0f:44:
         d4:59:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:25:21 2025 by rpki-client