Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa
File:                     254985db-4130-3371-adaf-7de790bd4207.roa (raw, json)
Hash identifier:          v3Co/uhIURMXl0yBITqjCsbBDaWBb/OUg204I2ymbVM=
Subject key identifier:   47:C5:2E:C4:D2:13:94:EA:00:6B:4F:AD:17:DD:F9:6B:CF:02:9D:AB
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F43285849FF75175323EAE06E711B3220
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     210
IP address blocks:        198.60.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:17:53:23:ea:e0:6e:71:1b:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=7073e5b5-774e-43ca-afd8-bd76421fdb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:61:28:67:d6:55:f7:a4:be:ac:c5:e7:75:
                    45:55:cb:52:b6:32:1f:96:28:b9:d8:e5:51:d8:3b:
                    58:e6:a1:97:d9:aa:b5:e3:c0:ad:e2:2f:6a:17:c6:
                    18:46:9b:f0:40:c5:86:32:dc:bc:24:eb:74:7f:2f:
                    22:5b:18:34:18:ef:0f:18:6a:82:db:3e:92:95:eb:
                    5c:c0:8f:10:8d:9f:09:3e:16:be:af:59:fb:89:81:
                    d0:65:e9:b0:54:dc:b3:72:f7:86:62:3e:55:bb:34:
                    65:f4:3f:bb:f9:92:a5:c6:9d:9d:9a:ce:42:e9:91:
                    d4:95:49:15:a5:e6:ca:48:a7:35:89:77:8c:92:58:
                    aa:4f:b5:ed:ed:9a:fb:75:86:6c:22:ae:03:ec:0a:
                    f6:26:02:ff:66:fa:18:2c:4c:29:9b:05:06:8d:bc:
                    cf:62:2e:c4:92:19:6e:85:84:08:9d:7c:cd:f2:50:
                    ea:a7:00:81:f9:c0:0e:5a:58:1f:ab:e3:81:12:61:
                    50:d6:bb:af:0a:ee:e3:f4:55:ea:66:5b:17:ae:82:
                    fc:94:d6:8c:e9:61:15:39:62:c0:0c:12:e7:c2:51:
                    e4:3b:f2:b6:63:92:02:d3:0e:8b:02:a1:db:c0:9c:
                    47:07:5b:49:0f:6e:00:a1:36:f3:d3:7f:2b:dd:0f:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C5:2E:C4:D2:13:94:EA:00:6B:4F:AD:17:DD:F9:6B:CF:02:9D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/254985db-4130-3371-adaf-7de790bd4207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:5e:54:e7:94:57:55:8e:1e:fb:b8:e8:3f:cc:d5:bc:87:
         3e:42:b4:b2:4c:b0:21:2c:0d:b5:b0:69:ca:97:f4:47:79:41:
         f7:20:22:93:ae:31:40:9e:26:33:24:5c:4d:0c:08:15:90:cc:
         69:b3:36:c1:c4:98:d1:2f:a2:d2:e2:96:48:f2:e7:e5:0c:f2:
         62:92:75:43:8f:5e:cc:28:3e:bf:51:5b:8b:ed:53:ec:38:c9:
         87:26:fe:be:a0:a3:b4:d6:9a:7d:f5:81:89:54:68:e8:e8:0c:
         15:2a:d6:f2:a8:f0:c2:54:7e:7d:94:dd:ff:ec:09:42:ea:59:
         82:7c:f1:79:d5:f0:82:e9:03:a6:31:77:b2:d7:cc:3d:26:91:
         32:db:7e:13:18:ba:85:46:fa:4d:d7:79:0c:c1:dd:1b:b1:8d:
         2d:99:1b:c2:66:95:9c:a9:36:48:cf:8a:11:85:86:dc:16:13:
         b9:b8:15:18:58:56:0b:8a:9f:3d:f3:14:86:da:7a:6e:50:25:
         55:1c:79:69:f8:b9:07:1b:0a:0e:6f:8e:53:07:ff:be:76:c7:
         6c:e5:1c:b6:91:39:d3:6c:03:e6:07:0a:da:16:77:d2:95:4e:
         74:83:0c:ff:e7:87:1c:a4:5b:02:57:07:54:5b:d8:31:4f:ab:
         8b:c9:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:14 2025 by rpki-client