Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11df0dfc-932e-3460-96cc-a8109b566f02.roa
File:                     11df0dfc-932e-3460-96cc-a8109b566f02.roa (raw, json)
Hash identifier:          dR9HV8vpK7S8Z9OT/GQz4DRVGGjtVIs0it54cSqFPFc=
Subject key identifier:   30:38:A4:52:70:A1:25:F0:AD:43:79:49:89:62:B7:77:73:A4:DF:19
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F287DDA7CC40C5C03880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11df0dfc-932e-3460-96cc-a8109b566f02.roa
Signing time:             Mon 07 Apr 2025 16:33:15 +0000
ROA not before:           Mon 07 Apr 2025 16:33:15 +0000
ROA not after:            Sun 06 Jul 2025 16:33:15 +0000
asID:                     81
IP address blocks:        198.86.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f2:87:dd:a7:cc:40:c5:c0:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:15 2025 GMT
            Not After : Jul  6 16:33:15 2025 GMT
        Subject: CN=02d6e509-3efd-4dc0-a24c-95d26584cbba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:8e:c5:a9:e3:a9:56:79:b8:5f:8b:6f:93:
                    de:5b:c1:db:4d:7f:16:4b:8e:d9:8c:44:9a:4d:0d:
                    3d:08:eb:24:fb:24:e3:76:10:46:07:4a:49:62:0e:
                    ff:83:3d:f9:10:fe:b2:fa:a4:00:32:80:1b:45:10:
                    a2:05:63:c2:11:1d:90:b1:aa:21:0e:2c:c1:20:3b:
                    5a:22:9e:e2:d5:66:bd:10:e7:96:7a:b8:39:25:57:
                    00:75:af:a2:07:0f:74:2f:cb:b1:64:d7:ac:61:7c:
                    af:d3:21:ef:23:ae:7f:77:b1:9a:6a:a4:98:8d:e9:
                    06:fd:ae:33:5c:99:ef:e5:86:f5:8b:98:5e:f0:ff:
                    8b:b5:3d:b4:91:91:39:00:00:ee:1c:af:9e:ac:02:
                    2d:ec:80:a3:16:38:99:ec:47:13:5b:c9:c8:34:5c:
                    9b:f3:99:c6:fd:e9:ab:a6:e0:11:bd:9e:3a:89:4b:
                    74:6c:5c:4e:da:ed:d6:39:c4:b0:23:a4:45:a4:a5:
                    be:3d:ae:b9:48:23:21:81:bf:42:84:21:e6:0e:c4:
                    93:33:de:76:7b:2f:14:67:59:01:aa:ad:45:77:2a:
                    31:b1:46:ec:7b:74:11:e7:b6:3e:c1:d7:64:29:39:
                    f7:39:06:bc:84:da:b8:29:ac:bc:a0:1b:c3:16:e2:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:A4:52:70:A1:25:F0:AD:43:79:49:89:62:B7:77:73:A4:DF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/11df0dfc-932e-3460-96cc-a8109b566f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:48:3b:0f:3f:f6:5a:94:19:91:74:85:27:26:5b:bd:96:80:
         3f:d1:af:2c:51:87:73:1a:6c:38:62:24:5f:57:d9:4f:e5:a3:
         14:89:65:5c:3e:be:46:fc:66:a1:16:da:60:30:f3:cf:30:ba:
         2c:eb:f3:db:80:da:27:bb:ad:b2:8e:37:62:58:d0:99:41:ad:
         68:04:f3:ae:65:0f:8a:cb:95:f0:a1:09:7d:6c:96:94:e1:7c:
         0f:c0:64:01:a8:9f:9a:48:c3:0e:a8:fc:11:1e:2d:3d:8c:ae:
         e3:16:ba:46:9b:8c:1e:0f:6d:a9:20:b0:58:41:67:cc:ed:cb:
         e2:71:4b:1e:79:5e:cc:bb:b9:53:8e:03:8a:95:d6:b7:be:68:
         c6:ad:0e:28:c1:75:2e:d0:78:50:26:7c:12:76:81:3e:b5:a9:
         01:89:af:bc:4e:b5:0e:30:0d:6b:69:1a:23:ec:1f:a4:1d:85:
         3b:b9:85:42:0f:46:33:5a:dc:2e:ee:6d:67:16:10:53:7e:13:
         fa:94:b4:0a:78:d3:1d:0e:2e:32:67:6e:5d:6a:d3:f8:38:cc:
         10:85:1b:19:75:43:20:b9:be:64:c4:5c:90:90:97:3b:9a:0c:
         55:bc:56:7a:d0:39:ee:9c:d7:79:a8:fb:7b:bd:a6:41:99:f1:
         45:c4:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:14:19 2025 by rpki-client