Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
File:                     01fd164e-7deb-3aca-97b2-be926935c45a.roa (raw, json)
Hash identifier:          DriVm9VxkNY3NDl3zGJLycHFMCbG4zBLE1G0awUQd4c=
Subject key identifier:   C5:8F:A7:C5:65:B1:A1:BF:C8:72:3E:B0:8C:3F:5D:E6:7D:6C:8A:B2
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F43285849D42FAA0A9C6F56B4904B28C0
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     393891
IP address blocks:        198.169.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:aa:0a:9c:6f:56:b4:90:4b:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=405ae4b5-e9af-4a8c-937d-0e0c9103d905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:23:4d:61:d3:77:9b:7e:6d:2b:8e:2f:62:
                    66:df:4f:58:0b:cf:10:33:f9:59:bb:35:48:6c:07:
                    32:a2:19:fb:ac:34:0c:83:ab:f7:78:64:88:fe:e6:
                    46:ab:65:52:22:bc:bd:a8:d3:9c:1a:de:2d:1b:9d:
                    d6:41:f2:de:79:60:4c:64:e3:b2:7f:b3:bd:6a:72:
                    2a:9f:e9:f7:87:ab:61:2e:26:70:48:be:82:3c:67:
                    08:4a:00:15:5e:34:8d:0b:75:0e:30:18:79:e5:67:
                    99:8a:44:b7:34:50:aa:23:51:ac:56:0b:6b:8d:06:
                    43:95:84:0a:43:17:63:9c:67:1f:8b:92:d3:a3:cd:
                    b5:4f:41:2f:65:80:35:77:df:77:50:b3:77:05:f7:
                    d9:7c:b8:cf:54:83:e2:a3:0e:3d:8a:e8:8e:2c:6a:
                    fe:bc:d2:f2:96:bb:8e:b1:50:a5:92:f1:4d:b9:3d:
                    e3:dc:20:82:b5:09:b5:86:9c:16:d2:52:bb:27:3c:
                    e7:24:80:88:76:b9:3c:e3:06:29:f0:09:54:3e:ae:
                    57:8e:d6:bc:4f:1c:39:d3:b7:d4:1d:ba:0a:c3:4b:
                    d3:a8:fc:dc:2c:1f:ee:79:d6:17:91:f1:fa:3d:91:
                    21:73:d8:39:1c:c6:f5:39:e9:c5:57:a7:98:91:f2:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:A7:C5:65:B1:A1:BF:C8:72:3E:B0:8C:3F:5D:E6:7D:6C:8A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:7e:f2:20:23:31:2f:26:72:33:92:a2:15:15:e1:d9:07:
         a6:4d:15:e1:0b:d9:a8:2b:be:bb:6a:92:70:dd:2c:60:24:37:
         f1:f8:93:28:7a:d7:4d:09:2f:a5:a6:10:73:d2:26:c6:ae:3d:
         24:74:6c:96:fa:53:1b:fa:01:4f:28:8b:9a:a6:f4:bf:28:31:
         e7:33:9a:c2:e7:3b:8a:e8:4a:df:a5:03:30:1f:62:07:a4:4b:
         9b:cb:56:b8:85:5c:57:bc:4d:ca:c3:2f:a6:4b:4d:ef:c3:eb:
         36:36:8a:7f:6a:a0:49:42:65:1b:8e:16:13:7d:72:e0:3c:f0:
         56:74:ec:2c:25:c3:13:c6:55:b7:2a:0f:fe:6e:ac:8c:4d:61:
         b4:aa:d8:e3:8b:fb:d9:51:02:f2:f1:50:cf:01:81:c1:ce:e2:
         ba:2f:ed:37:cc:eb:1b:e4:f5:f3:99:1a:80:4c:e8:b2:ee:10:
         7a:df:bc:d3:14:cf:f6:93:23:ff:c6:8d:0c:1a:93:d2:1b:96:
         d6:c0:7b:38:c7:93:c7:a8:26:fe:08:82:c5:b4:ba:2c:75:99:
         18:0d:22:39:72:f1:f1:f6:0c:30:74:f6:86:cc:73:95:76:d6:
         df:34:ab:33:ce:a1:d7:2c:c0:b7:b7:f3:7d:c6:2a:af:37:90:
         4e:7b:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:09:52 2025 by rpki-client