Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa
File:                     c31dea93-b429-35cd-b55d-6a72eb1f112b.roa (raw, json)
Hash identifier:          k0czQZ07pvLJvYxjQZHzqI31Tqa1cbKyxYvFfNiGUoM=
Subject key identifier:   E5:DA:B1:90:27:49:95:D9:8C:DF:A7:28:78:4B:F4:9F:CA:AD:64:95
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F432858499AF48A47D35EA693D77DBC80
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     40676
IP address blocks:        198.133.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8a:47:d3:5e:a6:93:d7:7d:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=666618c7-1b6e-4693-af9b-dcbff6b54501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:7a:f9:ff:f5:ae:3f:c7:97:7e:70:d7:f4:
                    9f:af:0c:4f:ba:55:91:cc:e5:a7:e2:d2:f8:93:1e:
                    7f:63:e6:f4:b0:ed:3b:3b:74:9a:05:c2:83:69:b2:
                    53:83:72:e2:05:bb:3d:29:2e:fe:29:f2:b4:49:3e:
                    be:8c:a5:26:96:99:95:d4:91:7f:78:d2:86:e1:7a:
                    c4:39:b6:13:e9:a1:a0:7c:e5:97:4c:44:3a:a8:88:
                    cf:41:e7:4a:9e:b2:28:85:9c:6d:99:11:9d:a0:ba:
                    c9:8d:2a:76:79:25:d3:a0:b9:a2:2d:7f:43:57:49:
                    7d:6d:a5:51:d9:e7:7d:4d:51:53:82:b7:d4:0d:69:
                    2c:73:47:31:25:6d:cb:12:a3:f1:8e:d9:50:a8:ab:
                    a8:fb:ee:46:0b:b8:f4:da:8f:0c:bc:55:2c:4b:c4:
                    dc:cf:6a:c7:30:d4:92:b6:58:c7:97:a1:8b:2c:01:
                    b6:67:6d:af:e2:bf:ae:d1:d2:96:71:43:f5:56:90:
                    36:b1:8c:60:fc:33:0e:a1:ee:b7:cb:ee:25:16:e6:
                    2d:9d:ae:d5:c4:62:17:20:68:d7:9a:ee:df:55:bd:
                    30:c1:d7:4d:80:39:43:52:fd:f8:44:73:9d:3c:f0:
                    56:6a:47:6c:e2:c8:c6:46:2a:68:8b:05:8a:d5:3a:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:B1:90:27:49:95:D9:8C:DF:A7:28:78:4B:F4:9F:CA:AD:64:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/c31dea93-b429-35cd-b55d-6a72eb1f112b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:22:1e:de:b9:d9:2d:3c:84:43:25:eb:98:98:29:c1:3d:07:
         5a:ff:0d:f2:81:4f:ab:82:08:9f:c4:e6:93:76:c9:7f:ef:76:
         28:27:95:3f:25:9f:5a:55:0d:81:fb:fd:41:76:8b:55:57:05:
         9d:09:47:84:bb:84:2f:53:96:5a:28:ae:d9:da:4e:f4:b2:59:
         05:fe:c5:08:d0:7e:a8:ad:93:04:1c:9c:23:48:9c:16:af:66:
         08:43:8d:6e:0c:79:50:73:1d:05:a0:f8:a5:10:4f:97:0d:9c:
         87:94:3b:52:9e:99:0d:04:0b:69:c4:29:6e:49:0f:4b:d4:85:
         52:7a:b3:14:ca:15:c0:a8:22:08:96:5b:1b:4e:58:0f:59:6a:
         c0:1d:86:6d:69:a2:af:5f:49:b0:05:27:88:aa:8d:2c:5e:81:
         b3:3e:4c:79:23:32:d9:51:ff:6f:e3:9c:27:90:0e:11:cc:67:
         cb:d8:cb:ab:fe:ac:41:9d:9c:e3:75:93:d4:34:27:71:e0:3c:
         d1:c4:01:77:1f:fd:32:fa:41:5d:d4:2d:69:ed:6d:09:b0:1d:
         22:fb:57:9b:39:65:20:f8:08:05:e3:9f:2c:c2:43:62:4c:3e:
         0c:5a:e8:1c:07:0c:d1:f7:c9:95:e7:23:ec:54:a6:b1:f0:e1:
         e7:bd:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:00 2025 by rpki-client