Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
File:                     70b09f9a-fc73-38b5-a730-83149f6057c7.roa (raw, json)
Hash identifier:          e1MHp8p6mmdk7mGN2QSEZFVt2Rbhm+YGpPYeyhoYhpY=
Subject key identifier:   64:E6:D7:15:62:F6:E1:63:C3:81:73:0C:21:0D:47:8F:05:23:D3:17
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F43285849EEB4FCCFBB64BB07A03B9A8C
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     393906
IP address blocks:        198.153.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fc:cf:bb:64:bb:07:a0:3b:9a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=5558277c-3956-4808-b364-e2ebe300e086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:87:cb:8c:49:7f:e4:b9:e8:66:52:38:98:
                    46:30:35:66:c0:e4:fa:db:a4:fb:a5:6c:1a:25:2d:
                    8b:92:05:ce:7a:e6:b2:05:03:3c:d5:9d:c4:f6:85:
                    ec:31:4e:35:d5:fa:0e:62:72:ac:23:11:fb:87:2c:
                    e8:3d:14:7a:89:56:b8:35:af:f2:d3:04:f5:a4:0c:
                    65:b0:c7:3b:5b:c7:f5:bb:ca:09:5c:63:04:61:e9:
                    7c:1a:53:b4:60:ba:f0:45:c2:59:7c:13:97:93:ab:
                    7c:f2:84:37:ac:94:e2:6e:c7:08:cc:c9:bf:4b:f6:
                    d8:d1:05:87:91:eb:d9:91:71:04:20:28:8d:78:70:
                    33:7e:41:e4:9f:80:8f:dd:a8:0d:ab:6a:9d:ef:8b:
                    19:c7:c3:bc:4c:41:32:b7:f3:5c:27:d7:4a:01:3a:
                    b8:50:a2:07:b8:f2:c7:79:5f:e1:98:1a:0d:58:98:
                    8e:d6:80:fb:59:60:57:af:db:41:12:6d:49:d0:2b:
                    7b:e5:d9:61:e5:fc:20:2e:2b:2f:87:86:4d:4a:b9:
                    c2:57:e9:46:6e:a9:6d:49:ab:14:76:c3:3a:7f:2b:
                    91:42:8f:13:bd:ef:a3:6b:b8:4d:2a:82:be:14:f5:
                    66:8f:d4:f8:15:7f:63:24:0c:46:06:5c:d6:1e:1b:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E6:D7:15:62:F6:E1:63:C3:81:73:0C:21:0D:47:8F:05:23:D3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/70b09f9a-fc73-38b5-a730-83149f6057c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:81:1d:db:bf:fa:dd:c1:b1:e9:c0:25:00:76:10:3e:97:c9:
         a0:9b:36:85:e3:3e:e2:5f:69:73:9d:3d:52:91:bb:b4:d4:d1:
         4e:95:1a:71:d0:86:58:b1:6e:eb:a5:57:0b:4a:2c:38:d7:8c:
         26:31:d8:e1:98:1e:a6:2d:96:d1:d4:70:1f:f7:38:ea:e7:a2:
         ea:10:ba:18:89:3c:c3:10:8f:d9:1d:38:58:49:39:90:67:32:
         0f:64:c2:1d:32:30:d8:9b:8d:f7:b6:c5:ff:e8:38:ff:83:45:
         5a:67:8d:fd:91:56:a1:2d:c4:1a:25:76:72:3d:f9:bb:a8:4b:
         d5:98:7c:b9:1c:05:61:20:b9:25:cf:f8:84:ea:30:dd:ac:c4:
         f3:e5:76:2d:87:2a:eb:70:9d:ac:71:d5:72:70:29:d0:fc:a8:
         de:a4:79:c9:b7:1c:5f:6d:46:b9:ef:d3:0c:ca:39:eb:7e:46:
         12:0b:41:46:81:ed:46:36:44:a9:39:c3:dc:51:7d:5e:aa:54:
         ef:7a:96:5b:3c:6c:8a:98:e0:96:c6:eb:f6:16:24:92:b0:d8:
         2d:06:58:1d:5b:1d:2a:29:2e:41:5a:1a:b3:39:0d:9c:75:b9:
         78:e6:82:c7:7d:92:8e:6e:bd:8c:89:57:e2:fc:3a:51:4e:3b:
         88:50:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:13:13 2025 by rpki-client