Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa
File:                     2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (raw, json)
Hash identifier:          GVkzalroXqRxLLr31bKF5MiwzHv9wzty4LqsKwoKtOM=
Subject key identifier:   E1:48:BF:A9:F4:37:10:C1:BB:80:A4:65:C6:0C:A4:3C:18:74:C2:25
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F43285849D1650CD3A9ECFBE0F5526010
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     65104
IP address blocks:        192.197.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0c:d3:a9:ec:fb:e0:f5:52:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e07950c2-2a92-4c9c-9707-118d74c2a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:70:14:3f:68:c3:b0:18:c0:7b:36:4b:6a:
                    a7:ff:5a:ba:79:4a:f6:93:5a:81:6d:ca:a9:3c:40:
                    05:13:ae:c5:f3:4c:86:1b:dd:c0:dd:3e:21:ff:0b:
                    19:3c:62:63:54:2c:4d:e5:a0:2d:df:31:97:f9:98:
                    30:db:55:dc:19:a1:76:6f:32:b9:b3:7a:2c:ab:03:
                    1a:78:4e:64:42:e9:8d:87:2f:46:a2:e7:86:77:64:
                    22:f7:d8:15:4a:55:fd:61:34:0e:66:43:fc:bd:88:
                    61:cc:9d:e4:07:64:c0:b2:bd:1a:a7:25:54:07:2a:
                    35:aa:68:6a:40:00:b0:a9:ab:7a:5c:80:06:14:97:
                    ec:49:65:98:b9:d1:d8:24:20:ac:40:4d:e6:da:85:
                    4c:a9:58:32:a4:bc:d8:d5:43:29:7b:dc:28:70:f1:
                    3e:d7:06:b0:27:41:8d:07:fd:6b:2a:a9:cc:21:11:
                    e7:c0:b1:a9:91:de:4e:b0:58:60:bc:97:3e:56:9e:
                    a6:e8:78:69:06:c5:da:b2:5c:8b:37:de:24:6f:11:
                    4d:3b:0c:22:08:ad:25:8e:ff:8f:e9:b2:0d:3d:1f:
                    2c:65:43:aa:38:ca:42:4f:50:0d:d4:fd:06:b6:a4:
                    fc:9a:f9:53:99:f8:2c:d4:28:bb:b9:89:03:8b:1b:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:48:BF:A9:F4:37:10:C1:BB:80:A4:65:C6:0C:A4:3C:18:74:C2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:da:19:c3:35:21:8e:07:c0:48:42:f6:8b:5c:da:15:58:
         bc:53:d1:7c:ac:4f:92:eb:4d:b1:70:cb:d5:69:90:be:0d:a8:
         c9:23:74:67:c4:cc:3d:cc:23:69:32:77:4c:51:06:14:16:e4:
         5b:0a:e8:6a:5b:fb:ba:50:00:73:ff:76:ba:08:87:26:31:09:
         39:44:ad:c1:0a:d6:78:82:26:39:8d:51:d0:62:9e:42:3a:99:
         bd:34:fb:88:80:a1:d8:bd:5c:11:c0:24:d1:5e:23:9d:42:35:
         88:d0:b2:38:17:48:ef:19:7d:8b:6e:94:40:68:3b:f8:69:17:
         94:4d:25:56:e6:73:15:2a:47:3c:b0:3a:c8:cd:a6:91:a4:eb:
         48:22:e0:df:b0:d8:dd:b0:f7:fe:15:6d:26:26:62:c4:bf:90:
         ad:fe:21:73:67:59:7c:78:2e:95:fd:e3:f4:b8:b6:d6:65:a9:
         ac:04:01:fe:ab:22:6e:46:4a:b7:99:28:23:ed:ca:64:f2:5c:
         aa:6b:b6:99:fc:ff:da:b6:13:ea:a0:ed:bb:7c:6e:0e:33:c8:
         31:b0:04:f9:b6:67:c7:2f:3b:48:45:a3:e7:2f:12:e0:e7:8d:
         98:a1:af:7b:e1:64:fd:6e:ff:4c:e8:78:29:37:74:8d:80:a7:
         46:4a:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:38:17 2025 by rpki-client