Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/7ea05555-4f94-3a12-ada0-528c4bc38a44.roa
File:                     7ea05555-4f94-3a12-ada0-528c4bc38a44.roa (raw, json)
Hash identifier:          Y/h4cUHPzXrQY46n5ArAW8BWXsodlpaO2/ZI7OODpeQ=
Subject key identifier:   E8:A3:17:BB:0C:54:4E:92:AF:9E:3E:CA:67:EF:7A:3B:BB:94:0A:E6
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F432858499EC6DD0D630B81FCBA74BD80
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/7ea05555-4f94-3a12-ada0-528c4bc38a44.roa
Signing time:             Wed 23 Apr 2025 09:52:14 +0000
ROA not before:           Wed 23 Apr 2025 09:52:14 +0000
ROA not after:            Tue 22 Jul 2025 09:52:14 +0000
asID:                     11426
IP address blocks:        199.255.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9e:c6:dd:0d:63:0b:81:fc:ba:74:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Apr 23 09:52:14 2025 GMT
            Not After : Jul 22 09:52:14 2025 GMT
        Subject: CN=fb224d98-670b-4794-9a00-619a70c616fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:dd:f2:8f:cc:ec:45:7e:bf:81:0b:84:f3:
                    c1:94:02:68:2e:51:b4:9c:96:47:80:25:2d:eb:10:
                    d3:09:4a:70:ed:2a:df:33:b3:a3:7a:b7:cb:16:2a:
                    00:0a:db:25:c3:1a:4b:b9:9e:77:6c:66:7b:53:93:
                    f9:59:1a:49:3d:3e:39:ff:b7:49:5d:da:8e:51:cd:
                    c3:ac:69:89:2e:28:43:1a:71:0a:3e:3b:a2:11:5f:
                    c2:9e:f7:2b:2b:72:f3:08:f8:e9:08:c0:de:71:9b:
                    b5:b8:e8:a9:63:fa:7c:70:12:e7:9b:b8:32:da:f7:
                    e8:94:2e:31:f7:0a:ea:82:92:af:3f:3e:e7:ab:29:
                    14:a1:af:f8:80:0b:da:75:2c:2f:7b:e9:bc:f9:13:
                    cc:c0:36:69:58:b9:f4:5f:73:02:32:7d:e8:87:f7:
                    e6:14:a1:fd:bd:27:c5:4f:d0:ba:56:32:13:1c:49:
                    9c:bb:a4:c4:d8:47:f5:b4:64:56:15:4b:da:0e:14:
                    54:cf:63:53:72:d7:ca:1f:8f:30:2d:25:ca:0c:88:
                    75:df:4c:fd:77:af:c2:a2:63:65:f2:c6:52:72:a1:
                    5e:db:8b:f1:48:a6:19:82:78:3b:4f:02:e9:e0:55:
                    5b:fc:de:d7:0b:5c:68:37:29:1a:87:e9:cd:5c:13:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:17:BB:0C:54:4E:92:AF:9E:3E:CA:67:EF:7A:3B:BB:94:0A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/7ea05555-4f94-3a12-ada0-528c4bc38a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:87:c2:44:ce:27:5a:1d:bc:9b:05:df:45:64:df:7b:21:
         0e:0b:e5:d6:63:ff:4a:53:60:0c:20:ef:31:3d:cd:36:63:07:
         ed:78:2f:91:9d:22:0f:c3:02:3d:c0:a3:26:f2:6a:b8:c3:5d:
         65:32:05:2c:ff:6e:98:1c:8f:dc:71:99:82:fe:25:d2:c0:6a:
         8a:f9:58:a3:55:09:d3:10:89:83:0f:bd:e0:53:4c:a9:a9:f0:
         1e:05:3c:77:cb:c7:c5:69:bd:ff:a4:5e:f0:7e:a9:9d:78:3b:
         0a:e1:c2:fd:47:57:0c:50:6e:8d:eb:4d:31:01:a6:1d:d2:ed:
         02:2f:5a:05:52:c3:6e:a6:5c:d5:db:2a:ea:a6:4b:72:a9:63:
         66:70:74:a9:0b:1d:92:f2:17:d8:49:88:d7:cf:06:56:f7:bb:
         89:91:e5:be:c7:fb:f7:f9:be:33:b3:d7:68:16:c0:b2:39:8c:
         97:61:fb:fc:5e:23:9d:bf:d7:e4:57:2d:d2:6c:b9:29:7c:26:
         e3:72:8f:2a:6f:5d:f9:a8:61:ca:54:f4:72:a8:e4:d9:4b:44:
         68:b0:4f:2d:f8:a8:3f:b7:2f:d0:9c:a2:cc:32:e7:59:44:5b:
         8c:cf:72:2a:02:48:c8:d7:16:12:fe:5b:d8:da:f4:a7:8b:af:
         4b:b0:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:43 2025 by rpki-client