Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa
File:                     52f78bf4-5efe-37b5-b10f-9e50d723a029.roa (raw, json)
Hash identifier:          4IC/eZv+layiRGS/Mdm1MreJD4TwxVmTXU22VyMtC7Y=
Subject key identifier:   68:A7:A9:05:32:9C:8A:A6:64:C4:01:BE:0D:FA:68:C2:B5:3C:0D:70
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849DC8FC2623B58142200AD9B80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        198.145.106.0/24 maxlen: 24
                          198.145.141.0/24 maxlen: 24
                          198.145.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c2:62:3b:58:14:22:00:ad:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=791a0213-264f-4c52-b0bc-46c0535a3c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1c:26:42:61:60:2a:46:1a:56:d0:fe:d3:4a:
                    80:be:67:34:2a:04:40:0c:b4:8c:f5:6b:3e:9c:33:
                    41:f7:4b:3e:6e:ae:38:d3:89:fd:45:31:ac:0c:c9:
                    19:a2:0a:7c:00:b0:48:e7:1f:1f:15:57:83:ed:ca:
                    29:98:4d:d1:93:d5:15:9b:9b:db:ee:13:ab:39:6d:
                    25:90:b9:10:b3:8a:f9:48:4e:d1:10:c5:e3:f1:fa:
                    d3:e2:fb:c6:cb:6b:d6:b9:3e:9d:c6:37:b1:e8:29:
                    dd:57:ed:70:74:f6:f3:27:5f:2e:7d:f1:ae:1b:c2:
                    bb:c8:a9:a0:e0:2a:81:5e:6f:f4:67:5e:39:01:7a:
                    3c:fb:09:3c:4e:ce:d9:a1:9b:1e:8a:e4:36:08:94:
                    76:a9:04:93:eb:b0:ee:fb:12:f1:5d:05:b7:d7:77:
                    53:de:29:ea:37:47:44:36:1e:c7:e2:7d:89:f2:44:
                    3f:a2:32:27:ba:56:da:c2:c2:01:40:82:fa:78:95:
                    d4:a0:cb:c3:52:34:55:d6:a6:9e:a4:b3:74:ed:76:
                    b8:32:16:2d:f8:d1:fc:37:d3:28:9d:22:f0:a1:67:
                    a5:46:b6:8e:6a:b8:0b:7b:c4:8d:38:15:c6:0b:f2:
                    b5:aa:49:63:00:81:7d:75:53:7e:ed:26:52:3f:b7:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:A9:05:32:9C:8A:A6:64:C4:01:BE:0D:FA:68:C2:B5:3C:0D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/52f78bf4-5efe-37b5-b10f-9e50d723a029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.106.0/24
                  198.145.141.0-198.145.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:19:10:96:c4:fb:67:a0:23:30:48:74:6b:7c:d7:54:c8:
         11:d8:ab:0a:04:f0:e9:dc:fa:82:45:74:96:b0:3b:a7:81:c4:
         6d:82:9c:a5:12:7f:27:8d:25:13:7e:00:49:a5:85:36:25:94:
         a0:00:1c:41:dc:e1:35:9c:ac:ec:3a:34:34:10:51:13:3f:7f:
         c5:24:17:89:36:1e:88:7b:d2:a3:99:e9:f3:de:ab:6e:d4:be:
         0a:56:de:96:29:93:f6:c4:b8:fb:82:8a:da:c8:b5:22:ca:93:
         fd:e9:1f:ae:05:4a:f2:83:fe:aa:37:62:40:63:8c:ef:4a:72:
         76:ef:47:93:fd:0f:3c:a8:00:fb:8e:c7:20:21:02:61:76:7a:
         51:fb:9a:0a:80:88:f8:b2:49:3b:27:13:a1:7b:69:eb:49:8a:
         4c:8c:26:0f:44:de:47:34:ac:2a:9b:7a:c8:fe:55:23:01:58:
         f9:9e:dd:dc:85:79:ae:63:7d:ff:06:95:f8:9b:18:d0:ce:5e:
         0c:7d:d4:76:e0:60:79:86:d7:ba:4b:d8:7f:4a:25:2f:c5:68:
         39:ae:dc:0f:26:4a:0e:f7:db:34:61:fb:a1:1b:6c:6a:f3:22:
         8c:30:9c:6b:26:7d:e7:a9:9f:ab:04:91:0f:10:3e:18:b5:f8:
         44:69:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:28:24 2025 by rpki-client