Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2840f14-0032-31da-9b87-5a6c52e24762.roa
File:                     e2840f14-0032-31da-9b87-5a6c52e24762.roa (raw, json)
Hash identifier:          3OzBQHRPwkhfkkx1yWRHp9zssASj3Rdn1+fplNQF4LQ=
Subject key identifier:   AF:BC:3B:A7:00:86:2B:61:76:01:AC:C7:01:94:D6:50:4A:E0:D1:79
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A3640002CD1ABDC4CBC0BC900
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2840f14-0032-31da-9b87-5a6c52e24762.roa
Signing time:             Mon 16 Jun 2025 16:03:22 +0000
ROA not before:           Mon 16 Jun 2025 16:03:22 +0000
ROA not after:            Sun 14 Sep 2025 16:03:22 +0000
asID:                     81
IP address blocks:        198.86.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:40:00:2c:d1:ab:dc:4c:bc:0b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:22 2025 GMT
            Not After : Sep 14 16:03:22 2025 GMT
        Subject: CN=5279cc76-82db-4ec2-ae64-c0cdfb9a5f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:f4:b8:a3:91:07:87:00:8a:a9:61:be:00:
                    e2:52:bd:1f:40:36:52:9a:97:81:bc:9b:e7:c4:cf:
                    e4:f5:bd:6b:15:d5:07:2e:2f:29:af:0a:b8:15:79:
                    fa:84:62:4f:0e:9d:ab:e5:b3:ec:25:74:50:5f:f8:
                    63:ac:3b:91:a9:1d:e4:ca:5c:c5:4c:74:b3:ef:56:
                    a4:3e:de:c3:e9:4a:58:7f:f0:a0:10:3a:fd:f1:b1:
                    74:78:3a:2b:5b:e4:33:c8:d8:d2:d7:78:40:5a:7b:
                    f2:30:cc:21:be:4f:30:f0:fd:88:13:3d:74:17:48:
                    ce:8a:ed:24:79:f3:c9:aa:72:68:83:1a:a2:26:ad:
                    19:70:7a:63:e4:8f:5d:4e:57:e3:f1:4c:84:ea:ed:
                    eb:ce:ce:45:e3:61:29:14:06:59:8a:ea:f6:a2:de:
                    cc:11:77:40:03:cd:9d:df:29:3a:bf:c7:d9:96:e5:
                    86:15:d5:f7:34:cd:ea:bd:98:3e:5b:f0:b8:a1:8b:
                    a9:90:66:09:5c:38:02:11:f5:5d:1f:0c:97:b8:61:
                    04:ce:67:b9:52:7a:b8:09:70:3e:7c:04:96:69:1a:
                    7a:2e:8d:d9:56:fd:9f:31:05:2d:e0:e6:b5:82:90:
                    dc:9f:59:e6:78:24:94:c4:6e:4f:32:33:85:35:8d:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:3B:A7:00:86:2B:61:76:01:AC:C7:01:94:D6:50:4A:E0:D1:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2840f14-0032-31da-9b87-5a6c52e24762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:b6:36:f1:39:69:a7:58:52:b9:77:e1:a8:aa:35:72:e8:
         8c:1c:57:e5:f3:63:b9:02:1d:1f:35:f4:42:f1:c5:ca:e6:8b:
         f7:e6:4f:97:70:e1:e5:fa:f1:ed:d3:db:50:ec:28:72:74:ca:
         7c:02:a9:2a:23:38:fd:14:29:12:a9:06:11:4b:bf:28:7a:78:
         4e:63:74:6f:e1:3f:16:43:00:8b:ac:d7:b1:e1:60:37:44:19:
         0f:60:0d:e0:b8:ac:5b:6c:41:79:69:a8:44:20:7f:99:fd:b9:
         cd:8d:c9:35:f4:8c:9a:a6:c0:f6:1d:83:78:1e:41:c5:11:93:
         d1:26:6f:3e:34:65:d7:77:f6:13:7c:ec:09:f7:ed:ed:c5:84:
         0e:91:f9:a0:6d:95:12:a7:fe:cb:1c:05:fd:4f:84:f1:a8:96:
         b8:77:3f:25:d8:7c:35:5f:7e:c8:62:ca:1d:94:4b:1a:67:80:
         2d:cf:c9:dd:e9:11:26:e7:d5:fe:b2:88:aa:dc:bb:19:21:af:
         f9:cf:d8:5a:a3:2c:a8:31:f4:94:86:4f:9e:5e:22:8b:16:74:
         f9:a4:37:d1:df:66:68:3e:85:65:ba:72:45:ee:8b:df:c2:96:
         18:dc:c3:01:29:7c:88:8a:08:85:5c:de:45:e5:e1:e2:34:ea:
         84:7b:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:37:44 2025 by rpki-client