Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/773609b9-ad2f-3312-bedb-e9c3a9fea7ed.roa
File:                     773609b9-ad2f-3312-bedb-e9c3a9fea7ed.roa (raw, json)
Hash identifier:          E4ZINaNhS+ihpQe8DyVJve+AhTuUL3yY+FjVfwue464=
Subject key identifier:   DE:8C:88:CF:90:9E:72:07:19:D2:A5:02:98:37:AD:C4:23:0B:45:3E
Certificate issuer:       /CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
Certificate serial:       010D0C9F43285849C4D4B9C49D7959C0AC22D480
Authority key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/773609b9-ad2f-3312-bedb-e9c3a9fea7ed.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     393451
IP address blocks:        198.28.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b9:c4:9d:79:59:c0:ac:22:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=ef38a204-9050-4562-a22d-afcd56d4d67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:cf:24:3f:af:ed:37:75:7e:a8:81:b5:51:
                    ff:e8:34:c9:0c:c7:7a:b1:1a:6d:6f:75:08:59:6b:
                    a7:f8:6b:47:7a:b2:c5:10:92:19:32:21:f2:82:27:
                    ee:28:6c:ed:66:16:f5:a1:57:2a:7a:4c:21:d2:1c:
                    ae:30:5d:6a:01:d5:e9:4d:8f:44:24:27:05:05:03:
                    88:cf:4c:a7:0d:fd:ac:3c:cd:28:ae:b3:4a:18:2e:
                    bb:6b:4f:04:e6:9b:db:2a:b0:a7:ab:3a:e0:59:89:
                    ab:c0:74:a6:66:06:68:51:b8:1c:2c:22:21:b4:23:
                    2e:9b:db:8e:55:bb:f8:f6:f7:3a:27:d8:41:2f:55:
                    6c:ad:c7:81:66:4f:86:6f:5a:2b:1d:d5:9c:23:80:
                    e2:aa:bb:49:70:a8:95:f0:1e:4c:4c:02:31:84:b0:
                    e7:bf:fc:3c:79:a6:7b:6b:4c:08:54:12:db:b6:62:
                    7a:52:8f:1f:1c:90:e5:3b:fe:60:aa:00:79:02:76:
                    ff:e6:9f:d5:ec:73:50:1c:87:f8:85:26:2b:2a:3f:
                    bd:e6:51:df:4e:95:d6:7c:f2:5b:bd:42:53:bc:f0:
                    c9:a5:9b:5a:9b:90:56:e9:b1:7f:08:72:57:7e:1f:
                    80:fe:24:c2:81:65:60:b0:81:8d:52:13:7f:1a:af:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:88:CF:90:9E:72:07:19:D2:A5:02:98:37:AD:C4:23:0B:45:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/773609b9-ad2f-3312-bedb-e9c3a9fea7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl

            X509v3 Authority Key Identifier:
                keyid:5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:9f:77:89:0b:56:d4:fb:ed:2c:37:b8:1e:a4:51:96:7d:
         39:5d:99:f1:78:95:dc:61:7b:fe:ff:d2:f4:3f:51:02:71:1d:
         03:ef:03:38:0f:d1:d6:44:63:18:f5:c2:db:72:50:56:85:42:
         07:7c:30:f3:10:60:54:01:b9:81:f9:cd:b6:ee:03:55:8e:00:
         44:9f:02:a6:b4:b5:75:8c:d9:6d:cb:d0:9e:f0:ac:96:eb:44:
         4b:22:63:67:0f:0a:f2:5c:20:fc:8e:55:ad:d8:53:cf:00:5a:
         66:fa:40:a6:63:6c:ff:24:2a:93:88:9c:2c:8f:17:65:f7:33:
         56:3c:2b:53:09:4b:29:38:6c:b3:25:c9:8c:52:d0:cb:f9:d1:
         21:ca:c6:06:af:13:db:c6:bf:75:ef:65:d4:0d:20:e3:3d:85:
         91:aa:4f:53:0d:f7:56:bf:01:c7:62:a5:c8:c2:cd:1a:7e:71:
         43:70:16:2c:e7:4e:0e:fc:65:1b:24:4f:1d:c6:9c:f3:19:d2:
         42:78:e9:1f:c7:de:d7:06:49:fa:2a:00:95:d1:db:9a:c3:9b:
         6a:a9:96:ff:09:78:b3:4f:8d:4a:f5:c8:6a:8d:40:5c:af:8b:
         b5:66:0d:b8:e2:16:1a:f9:c4:06:6d:97:8f:bd:fe:b3:b0:47:
         ee:21:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:16 2025 by rpki-client