Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa
File:                     5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa (raw, json)
Hash identifier:          FXm25W3BuFd48OQWoicFzsoLBdu9B9lSbEQMpy/Z7AA=
Subject key identifier:   C2:F6:A4:3B:29:1A:F6:AC:93:A4:CF:04:B0:55:0F:62:86:63:14:27
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971142FCDC6A9ADE3420474DA
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        198.154.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2f:cd:c6:a9:ad:e3:42:04:74:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=8ed5ea9e-79ce-47f7-9a33-776b7c89f38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dd:9f:d2:d2:fd:c0:2a:fb:de:73:4f:d1:f3:
                    0b:24:3a:55:aa:5e:2e:61:3e:ae:6c:b5:3b:4b:36:
                    42:d2:0d:ad:43:32:56:dd:bd:c0:67:95:68:1e:15:
                    5b:c7:03:b3:33:45:02:71:9d:00:92:cb:c9:e8:ae:
                    8e:13:c5:32:56:d0:ed:e9:3e:70:50:04:d5:e9:84:
                    82:2e:63:bb:41:63:6e:6a:7e:c7:fb:45:34:a7:43:
                    3b:73:e6:91:dc:b2:92:6f:55:44:c8:25:a3:45:06:
                    fc:23:39:2d:81:42:35:4a:e1:6b:f3:29:6d:1d:0a:
                    ad:ed:54:9a:2d:0c:f5:88:b9:f3:40:a8:32:7e:c0:
                    ce:f5:bf:c0:c2:ef:82:f5:1c:03:ff:6e:9b:f3:09:
                    8e:16:10:eb:b4:1d:15:1f:54:b4:03:45:63:e3:ac:
                    9e:82:30:b7:74:6d:02:ea:2b:8a:03:5a:07:41:d5:
                    5a:e3:93:3c:9f:18:8e:12:c8:c5:59:23:23:e4:aa:
                    e0:d4:9e:a8:db:50:9e:72:bb:bd:8a:64:70:40:7d:
                    72:b3:28:cd:fc:59:00:d8:ff:43:ad:95:c0:ce:b2:
                    da:26:6f:07:c0:58:11:b6:09:38:8b:7d:29:ef:d2:
                    24:1c:c8:cc:d4:ee:ed:13:12:91:58:67:ab:8b:6c:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:A4:3B:29:1A:F6:AC:93:A4:CF:04:B0:55:0F:62:86:63:14:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:af:30:67:cb:ad:32:46:a4:30:a9:a6:3c:5d:37:67:4a:
         0f:22:c9:6f:14:cf:d4:06:55:92:cb:82:52:70:8b:b1:e8:9f:
         cc:9e:ee:b3:cc:86:c7:c8:80:79:ee:22:c0:24:6a:bc:ff:f8:
         84:0b:80:83:fb:00:d2:04:80:15:29:56:50:eb:cd:0b:93:f9:
         b6:d5:91:2c:13:44:29:07:e8:cb:9c:45:bb:06:71:7e:4e:48:
         85:d5:f4:3f:33:18:34:ab:be:88:b4:08:c7:60:94:39:92:3e:
         f4:9e:e9:47:c1:ed:2f:0c:f0:6c:5f:85:15:b8:c4:87:6b:31:
         76:44:d3:2c:82:8f:dc:da:37:27:e6:99:7d:fb:9f:9a:2a:f8:
         4f:a8:95:8f:b4:4e:dc:a2:93:eb:99:a1:d2:c4:8d:ab:41:9d:
         ad:d8:c2:96:ad:7f:b8:b7:21:19:8f:12:31:43:ee:60:1d:a7:
         67:81:ce:87:83:cf:0a:c2:7b:bb:31:5b:2c:f1:60:a5:5d:6e:
         78:00:92:09:66:94:8a:30:87:80:85:b1:50:69:5b:e5:5e:00:
         c3:39:1d:a3:5d:92:95:ee:04:c3:6f:0e:a3:f5:31:d5:9b:57:
         19:7b:1d:d5:dc:ef:3f:18:03:5e:44:db:ec:f8:d4:28:df:50:
         5c:5d:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:22:51 2025 by rpki-client