Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/214a12d6-dce0-3381-84ef-60a00f3ff717.roa
File:                     214a12d6-dce0-3381-84ef-60a00f3ff717.roa (raw, json)
Hash identifier:          z2NEIcgegLMgKK1nBorKpTY/2I+H0LRY0oMOheDgiG0=
Subject key identifier:   E0:03:E7:01:5B:4B:02:B0:A3:7B:29:6B:3F:45:EA:1D:60:D8:A9:A6
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F43285849C904F03E4515B69239F9D500
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/214a12d6-dce0-3381-84ef-60a00f3ff717.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     206628
IP address blocks:        198.8.58.0/24 maxlen: 24
                          198.8.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f0:3e:45:15:b6:92:39:f9:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=7499f963-b6fb-4986-945b-20781b2c09fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:1f:69:ee:b4:3b:14:6e:6e:b6:5c:e7:1d:
                    5c:20:19:ad:31:f0:d3:76:60:e5:27:9b:ff:b3:1c:
                    af:08:d3:d3:f2:b3:9b:95:0d:df:6f:67:df:24:83:
                    bd:f8:e7:8d:84:3b:3d:55:44:d4:1f:08:16:34:73:
                    6f:df:2d:ab:d9:5b:ad:f4:aa:b8:cc:21:72:27:d3:
                    10:b3:94:98:00:31:03:3c:68:33:f4:31:41:d2:34:
                    23:b5:3a:65:a6:ef:ad:63:a2:ab:6c:e3:e3:ab:b8:
                    8c:fa:32:5d:5b:08:1d:ca:17:84:4b:89:40:57:c1:
                    4a:2d:b5:94:2e:2a:df:af:45:05:9a:5b:ef:4b:41:
                    e1:66:43:e9:8d:da:78:22:07:d9:bc:e7:53:41:c8:
                    9d:bd:1f:4d:84:e8:88:26:45:a6:b9:c7:3d:58:3e:
                    e0:16:78:30:81:2a:05:65:53:01:b4:fa:05:98:c3:
                    4a:be:8f:f3:ac:6e:5c:5b:c5:04:cb:a8:64:a2:62:
                    c4:5e:cf:2a:f2:17:77:93:88:a7:ed:d0:48:28:2d:
                    b7:90:f5:09:e8:c0:1f:eb:39:63:ed:82:19:31:73:
                    6a:1d:b5:d5:38:e0:f9:53:cd:e4:88:4a:19:44:12:
                    dc:b0:1d:b8:a7:dd:71:23:b0:19:06:b9:88:2c:76:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:E7:01:5B:4B:02:B0:A3:7B:29:6B:3F:45:EA:1D:60:D8:A9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/214a12d6-dce0-3381-84ef-60a00f3ff717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.8.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:98:d7:88:03:1f:82:56:44:ab:93:c2:5a:4a:e8:89:76:1f:
         51:91:2f:2f:e4:c9:28:23:b0:6f:9a:5d:15:39:f6:98:19:70:
         2e:e2:08:1e:27:1e:eb:be:0a:69:80:26:be:1e:e7:cc:74:03:
         93:d6:05:61:f4:0e:53:c8:c9:13:7e:8f:9f:ef:fb:dc:89:8f:
         52:4c:af:04:bb:08:53:bd:37:49:c8:95:e2:90:e3:65:7b:d1:
         0a:1e:a7:29:71:69:b1:74:97:3c:d0:c1:03:7f:b2:d7:27:2e:
         ce:71:80:18:e6:f4:4a:ed:b9:1d:40:00:a9:8d:45:5e:c6:c4:
         ef:1c:1a:c9:02:e2:39:bd:83:49:78:d8:dd:49:a1:6c:a9:7c:
         d2:6b:6d:14:e4:cd:3f:96:3d:f4:49:92:ab:6e:6d:31:a0:d1:
         5c:c5:e5:03:ea:e2:fb:77:ed:97:3c:47:b1:ee:98:9a:fc:44:
         66:a1:0d:b3:8f:1b:32:e4:35:d0:b7:38:01:c5:d3:5c:4a:b3:
         03:f6:71:54:85:1e:5f:64:8d:eb:17:f7:78:2d:38:21:c6:89:
         11:26:bf:8c:f5:d2:1b:54:6c:da:57:f3:40:5c:83:83:84:aa:
         39:90:04:5f:ee:52:a3:ca:eb:c1:83:b3:85:2c:75:03:9d:e8:
         27:df:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:33 2025 by rpki-client