Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa
File:                     895aa4ce-8313-395e-98a9-65bd11abfd6c.roa (raw, json)
Hash identifier:          SkKQyzHKZ7fuqzjHxDoKv6A9UKIQPGxVde5CSacQiEM=
Subject key identifier:   69:3D:2C:67:14:CE:33:DC:27:AF:0D:F6:E0:E9:83:03:BE:75:51:FB
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584996C4B0AE3357C8F7C7A67C40
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     0
IP address blocks:        198.179.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b0:ae:33:57:c8:f7:c7:a6:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=0ba63723-4180-4514-9fc5-f5667f8075aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:f7:8b:f6:75:17:87:e8:a5:11:59:88:cb:
                    29:1b:5b:78:09:2b:dd:76:07:27:f2:3c:28:f3:f3:
                    dc:a8:a6:06:64:93:94:97:e9:e2:31:c4:73:12:9a:
                    c4:ae:38:7e:c3:e2:e5:8e:1f:f5:be:9f:9c:c8:02:
                    64:ca:6e:f8:b1:f6:81:24:86:9f:fc:02:2b:bf:f7:
                    25:50:cd:8e:9c:d7:e8:4b:ba:e0:45:68:8f:24:36:
                    f5:14:a8:e4:48:4a:f9:fe:c2:95:ef:de:7a:81:6d:
                    14:8b:11:d9:3e:45:6a:cc:d6:4a:1a:21:51:b0:d7:
                    ae:14:71:df:19:05:b1:be:e9:c1:39:7b:f7:ac:b3:
                    85:68:61:af:78:bf:ef:f9:cf:95:31:04:4a:cf:46:
                    8a:c0:b4:e5:71:2b:8b:96:8e:ba:b9:7c:55:f9:24:
                    c0:f2:74:a3:bb:14:ff:e0:5d:92:31:83:30:a9:c7:
                    73:b5:1f:ef:6a:0f:ea:78:6e:19:e1:3c:91:cf:ec:
                    53:22:40:79:02:fb:80:2c:b3:56:8a:8c:cb:32:7d:
                    f8:59:dc:cb:8d:4f:e9:89:da:dd:96:c6:06:88:5d:
                    7b:ca:fd:ed:d0:91:12:dc:0f:e0:73:52:6c:65:0a:
                    35:16:43:34:3f:32:ea:94:8d:df:95:07:e8:41:84:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:2C:67:14:CE:33:DC:27:AF:0D:F6:E0:E9:83:03:BE:75:51:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/895aa4ce-8313-395e-98a9-65bd11abfd6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:05:de:99:70:24:96:d4:ae:21:fe:d7:6b:f7:2e:68:42:a8:
         7a:2c:7e:86:cc:c2:db:41:df:24:02:a5:c7:48:08:45:e6:fc:
         83:e6:54:56:f4:6b:0a:83:da:59:1b:1e:8b:b2:11:d4:08:0f:
         a7:3d:36:e1:51:23:02:21:16:02:5d:09:6c:1b:30:01:eb:2a:
         e8:87:55:67:40:8c:6e:54:ee:d4:90:a2:c0:64:42:b4:53:12:
         1e:f9:d6:91:30:40:16:f6:3f:26:2f:5a:8e:95:5c:68:7b:89:
         c7:17:60:fd:97:3d:c2:19:83:12:96:7b:55:f2:02:a2:5b:48:
         1a:fc:e8:49:d1:a5:0d:34:bc:95:f0:2e:af:27:6f:cd:be:69:
         57:19:54:d1:95:18:90:7d:16:82:bb:7f:f3:46:26:6a:b4:ef:
         95:7e:5f:84:bd:31:4c:28:b1:2c:55:be:85:00:c6:51:6f:3c:
         04:ff:3d:5b:7d:be:43:db:da:cb:72:05:24:e0:92:a6:44:bd:
         aa:7e:08:b9:4d:61:13:ee:68:ed:00:c9:c6:24:5e:87:5e:13:
         69:bf:13:3d:5e:a3:f1:45:41:1d:fa:c8:51:7f:39:14:11:af:
         40:e2:64:c0:cb:04:40:98:af:5a:8b:8c:06:be:e8:b4:8f:ce:
         d5:f0:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:19 2025 by rpki-client