Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
File:                     bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (raw, json)
Hash identifier:          qcn+K9nvxgu+wytpZBh1JaMxk5wv1bSJUcfVKBeWx/I=
Subject key identifier:   A3:D0:4F:04:EE:49:57:59:18:76:B4:8C:CF:98:AF:FF:14:6B:68:F0
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F43285849D1650CC6A8A398D42E46ACA0
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     26677
IP address blocks:        192.197.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0c:c6:a8:a3:98:d4:2e:46:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3ca9f938-f621-4131-bf0d-06d2a3e2a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:6b:c6:22:b3:91:1c:30:07:8c:c2:e3:9d:
                    82:d0:13:bf:12:2b:11:8e:b1:f7:66:9c:16:d5:e7:
                    17:3e:89:75:f6:67:72:ae:53:74:1b:44:f5:df:b3:
                    70:91:d5:52:d3:ea:de:49:5f:42:9f:98:fb:24:6f:
                    3f:4c:b9:7f:32:d4:60:39:06:65:e5:e8:54:d0:d2:
                    2a:11:3a:e7:95:73:7d:e7:cd:b5:0a:f5:04:f0:75:
                    00:84:70:3e:cd:63:f6:2a:c1:12:81:12:81:e0:7c:
                    6c:6e:36:86:dc:9f:c5:2d:08:94:cd:a0:85:c7:4d:
                    80:47:ac:d2:df:ad:0a:28:40:2f:91:8b:b5:0f:61:
                    a9:27:22:db:9d:0c:9a:14:c8:10:2e:c5:a5:1b:00:
                    9d:67:18:27:58:2b:28:34:8b:e1:8c:d0:7d:6c:14:
                    05:ac:71:d8:ef:f2:47:f4:10:14:71:3f:b4:7a:d9:
                    53:10:c4:c6:0b:11:7a:ec:2f:11:d1:1f:12:6c:b4:
                    41:c0:10:fb:c7:20:54:13:3c:78:96:a0:c9:93:96:
                    21:6f:9e:ca:68:5d:1b:ae:e3:a3:19:0b:9b:ab:4b:
                    f6:30:8e:c0:51:fb:7c:57:4f:ad:7e:bd:23:c7:c0:
                    21:39:ad:f1:7f:01:9d:cb:7e:1d:58:78:7f:6b:5a:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:4F:04:EE:49:57:59:18:76:B4:8C:CF:98:AF:FF:14:6B:68:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:e2:32:93:8e:24:13:e3:9c:b6:14:27:06:3d:38:f0:48:
         62:8a:aa:9c:25:1f:16:dd:94:4c:ac:97:cb:5d:d3:f7:f6:f9:
         ae:e4:8b:72:c5:fe:18:fe:c9:0c:d9:b0:c4:00:eb:dd:5c:94:
         b3:42:07:91:ff:33:a4:3e:1a:53:2a:77:00:1f:bb:3b:58:7c:
         86:36:bb:9a:9b:e7:d8:72:17:64:66:fc:67:05:80:06:0b:4b:
         d8:65:e0:55:ff:0d:b6:c3:04:da:0c:58:25:62:c5:16:a9:25:
         35:03:73:49:a9:f6:d2:d9:2a:83:f4:ea:c4:7e:42:cf:8f:8d:
         58:9e:cd:47:42:36:17:72:88:b9:f7:3f:35:bc:e9:90:8e:b3:
         c9:0d:11:2e:3e:c0:a9:25:49:eb:7f:8b:93:f7:b2:c6:b3:3a:
         3e:e4:2f:f4:8b:cc:83:1e:fc:ae:4f:47:d6:24:db:14:1b:46:
         cf:f3:93:d4:b7:69:40:fb:f4:81:ec:18:5f:7f:a1:37:d4:66:
         53:29:df:89:dc:ef:c4:ad:6b:69:4b:c6:26:38:95:cc:f9:96:
         60:fe:e3:d4:cc:93:67:ba:79:df:10:c4:dd:13:f0:e6:ce:a3:
         51:09:d2:21:5f:33:a4:da:15:82:1c:34:ea:40:34:b8:b4:78:
         6a:92:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:12:38 2025 by rpki-client