Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa
File:                     e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (raw, json)
Hash identifier:          D3B+LBSZqawnVtU32qO5dQFMSTFe50H8VxliApqvSgs=
Subject key identifier:   C5:E9:65:14:A9:0F:74:5A:B3:20:D7:10:A8:78:7B:3C:0A:0E:6D:78
Certificate issuer:       /CN=a1d568c5-f4e7-4018-a050-a2f04280e225
Certificate serial:       010D0C9F432858499AF486C72E345087E98AC6C0
Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     393249
IP address blocks:        198.162.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:86:c7:2e:34:50:87:e9:8a:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=36b42849-2e0f-4ae1-b7cb-bca80f838b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:28:88:57:59:e5:df:52:5b:cb:4a:e3:0c:
                    f7:99:41:ca:22:52:82:e0:8c:91:9d:34:70:c4:d3:
                    08:d0:70:7e:25:7e:57:0c:56:a2:80:d7:f7:d9:35:
                    20:f0:d1:31:08:19:42:e8:ce:ab:0c:18:40:d5:30:
                    5b:67:bc:3c:11:e5:8b:d9:12:6e:12:89:9d:d7:e4:
                    bd:94:d1:89:67:2f:8c:4b:86:73:e7:3d:30:ae:b2:
                    a6:46:77:0e:9f:aa:7d:50:88:6b:40:c7:ef:12:8b:
                    b2:21:9c:35:34:ba:48:7b:ce:c1:0f:50:6d:f4:4f:
                    df:cf:45:b7:53:15:e1:f4:20:6a:1c:a0:74:47:6a:
                    0b:10:ce:a3:09:92:01:b5:e0:13:20:d9:61:b0:da:
                    82:d7:97:0b:c3:31:bb:b0:c6:bd:13:b4:7e:7c:f4:
                    ec:b1:9c:fd:22:ac:a8:b9:70:88:20:3f:d1:14:25:
                    f4:1f:f5:e5:89:e9:88:58:bf:27:ef:8b:17:c7:f7:
                    0c:35:99:6f:7b:14:b1:a3:9e:e4:30:22:8d:63:89:
                    d8:52:bf:02:b6:c4:96:b0:4f:64:fc:ed:7f:0e:0f:
                    87:27:15:c9:26:31:a3:32:c9:bd:48:15:4a:9f:19:
                    07:2c:8d:45:b7:45:f2:31:a6:1c:e9:ba:fa:4c:7b:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:65:14:A9:0F:74:5A:B3:20:D7:10:A8:78:7B:3C:0A:0E:6D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl

            X509v3 Authority Key Identifier:
                keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:63:dd:2e:84:d9:a5:ec:ae:3a:57:5b:62:cd:4b:49:9d:
         db:8e:31:9e:e7:d9:d2:4f:da:4d:2a:cf:06:5d:c1:89:ad:49:
         98:26:91:f1:c0:2f:5f:f8:9a:66:43:8a:d7:14:08:22:f4:6a:
         9c:16:78:87:a5:6a:3d:d0:1e:64:52:39:34:e3:bc:60:98:ac:
         1f:6c:89:f5:32:4a:d3:fb:54:c2:0c:f5:82:49:4c:56:32:f6:
         80:08:9c:f6:37:f0:8b:2a:29:6f:e4:2b:77:40:1d:64:90:94:
         77:6b:b2:ed:81:08:29:b4:ff:50:6e:29:5d:6d:92:c4:9b:67:
         d2:34:99:15:d5:37:6b:1d:30:28:8a:a7:ff:81:6f:09:7c:eb:
         fd:19:5e:32:d3:e2:a9:bd:05:f9:91:e5:58:91:ff:ec:57:bf:
         42:ac:3c:f2:aa:d6:e3:14:48:cd:29:36:83:5c:63:2e:00:57:
         f3:d1:78:db:b2:32:55:88:1e:7a:ec:3a:3e:39:e1:90:e4:5a:
         72:1a:b6:c7:cd:1d:17:39:d7:79:f2:bd:dd:20:d4:c2:1c:61:
         04:ef:be:33:b3:c2:c8:da:6e:3b:90:eb:69:fa:ed:59:01:e8:
         25:29:ed:8b:e3:94:02:83:76:17:4a:50:c0:f4:96:58:7c:e2:
         b3:12:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:03:49 2025 by rpki-client