Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa
File:                     e0c14b23-aac9-399f-8a12-33d4be6204b6.roa (raw, json)
Hash identifier:          DTZTv3wm6g+bih7c8efi+1yHRcnKKOY6Mpqeno6ZDHI=
Subject key identifier:   C4:AC:6F:4C:05:38:48:44:60:8B:A8:4E:85:8E:8E:03:C7:30:10:73
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499CD6FA5AC666B8EB2DB09D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa
Signing time:             Tue 22 Apr 2025 17:13:05 +0000
ROA not before:           Tue 22 Apr 2025 17:13:05 +0000
ROA not after:            Mon 21 Jul 2025 17:13:05 +0000
asID:                     401152
IP address blocks:        199.115.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:d6:fa:5a:c6:66:b8:eb:2d:b0:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 17:13:05 2025 GMT
            Not After : Jul 21 17:13:05 2025 GMT
        Subject: CN=5f1c310e-80b4-4fee-ab9c-5d84d73c22f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:b7:4d:44:31:9e:b8:7f:40:5f:d0:53:57:
                    f6:b2:cd:06:8d:38:ce:cd:96:ef:51:fc:a4:f1:81:
                    89:e6:c1:bc:77:72:b8:3d:17:bc:cd:2d:76:3a:ea:
                    35:9f:42:b6:2c:a6:dc:82:de:4b:07:50:f1:37:a0:
                    27:c5:ef:28:31:72:53:16:67:f4:8a:35:89:19:e2:
                    5f:18:18:42:09:80:50:f8:dd:7b:38:d5:1e:96:0f:
                    1f:42:2c:2b:6d:5d:97:97:bd:e8:f8:8e:7d:23:c4:
                    e8:a4:ad:fc:9b:06:87:ec:18:09:26:f4:b6:60:58:
                    30:15:3d:b0:83:23:22:60:82:7a:f3:3a:f9:9a:f3:
                    07:eb:95:84:1f:c4:ee:f1:4e:b2:cc:ee:81:8c:8f:
                    b5:ac:69:02:e8:1d:d4:75:2b:8b:66:ed:d0:0e:d4:
                    26:47:97:2f:24:1f:4a:14:77:14:b3:8a:d5:8e:9d:
                    c0:6e:5b:23:e6:91:a0:c9:0a:3f:ec:10:62:e2:e5:
                    18:14:aa:21:05:e4:e9:7d:5e:05:50:f4:96:46:83:
                    8b:59:49:40:a1:6d:d1:f1:8f:d7:10:c2:c5:cf:7f:
                    8e:69:88:47:2b:56:eb:ab:35:71:54:c0:c7:b7:44:
                    56:cd:0a:13:c4:57:75:41:c4:a1:08:b6:24:2d:70:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AC:6F:4C:05:38:48:44:60:8B:A8:4E:85:8E:8E:03:C7:30:10:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:cb:4d:ab:34:1d:23:4e:a0:2a:85:56:90:fb:2d:09:80:
         af:63:f6:dc:8c:9d:41:70:77:2f:bd:20:58:8d:50:d4:19:d1:
         5e:2c:88:f5:b7:57:37:57:4d:f6:b4:7c:14:e6:49:ad:52:b0:
         8e:17:f6:36:33:0e:3b:33:51:e6:70:a3:67:e4:f1:91:4d:a7:
         bd:55:47:53:36:75:16:b8:ee:02:7a:b3:26:98:63:3e:25:36:
         71:28:93:63:ec:18:22:c8:df:61:71:88:7d:d5:fa:d9:dd:a7:
         26:e9:f5:1c:ca:70:de:55:c9:77:7a:0c:85:2b:b3:97:54:e0:
         16:39:d3:c6:93:0a:81:4a:8d:1f:80:ac:7f:8c:67:7a:86:5e:
         78:1d:f6:fd:b7:68:7f:bf:90:52:4c:ba:b7:e0:f1:bd:2c:75:
         64:69:a5:d0:c1:58:5c:63:c5:55:cf:1a:ae:9f:b8:ce:cc:e5:
         5a:c2:91:3e:1f:c1:96:8b:58:22:5c:18:2b:db:a2:a3:21:73:
         48:88:82:e2:b0:39:d3:df:1a:00:b3:43:90:83:cb:6f:c4:29:
         1a:8d:9e:84:e9:63:d5:6d:2a:2d:6c:87:d3:85:8e:93:69:12:
         34:32:ee:c2:88:50:9e:31:6b:43:cd:09:9b:a1:31:27:f7:23:
         4c:30:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:44:34 2025 by rpki-client