Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa
File:                     c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa (raw, json)
Hash identifier:          z50KVBKLax1DvanQSDlNFnHS3negCZQpV2ZSizZFPCU=
Subject key identifier:   92:42:49:26:BE:06:12:F2:F4:DD:7B:69:C7:52:52:BB:94:F2:E6:06
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FCB05B9D409DED7990B40
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     20454
IP address blocks:        198.24.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cb:05:b9:d4:09:de:d7:99:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=4912fe6c-9d62-407c-b4fa-1b55f6c57e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:d4:c0:18:1b:6c:a8:49:74:47:e9:f0:d9:
                    a6:45:7a:9a:13:8b:6c:b6:bf:72:90:e9:f7:0d:c6:
                    83:8e:09:8a:4e:7c:81:50:ae:2c:c2:cd:77:25:f0:
                    8c:aa:36:5a:b3:f2:a8:89:1b:6d:d8:a4:17:9e:1c:
                    39:56:ab:46:b0:2e:09:81:c4:f4:8c:fe:4b:ce:bc:
                    0c:2e:0a:32:eb:95:ec:44:e2:36:e1:60:3b:0e:e1:
                    1e:56:72:dc:f8:cf:14:c3:ea:82:6a:f9:06:6d:b6:
                    a0:7d:3f:52:58:b6:bc:ca:34:2e:8c:f4:12:8e:15:
                    dd:cb:04:59:a5:95:84:13:19:a5:61:8a:81:72:5f:
                    2a:a7:35:d4:1f:e9:1e:2e:e5:3d:59:06:52:38:a6:
                    94:25:8b:ae:5e:3f:6f:a0:07:8d:0c:64:e9:93:77:
                    e6:a8:8a:07:84:86:98:ea:86:5d:75:e1:44:10:11:
                    be:a1:be:cc:45:cb:a0:97:a4:51:43:7f:d2:25:4b:
                    a8:18:de:31:e8:86:7f:d8:ec:74:38:a6:f6:5c:85:
                    a3:52:82:1e:44:47:f5:77:4e:9f:29:be:7d:28:a1:
                    98:ce:1d:e1:f7:b1:a4:40:b6:18:6f:6f:7d:19:5b:
                    23:12:3c:99:db:69:23:72:67:95:de:fc:59:81:e8:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:49:26:BE:06:12:F2:F4:DD:7B:69:C7:52:52:BB:94:F2:E6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c282bbdd-826c-3783-b60e-7a2ef780aa8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.24.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:24:dd:3d:8b:6e:60:7a:2c:1b:d8:30:fb:65:7e:6b:12:
         df:c8:9c:97:f7:5a:8f:9a:d5:d1:b7:be:a5:6e:6f:1f:9f:a4:
         38:2a:ed:1f:d8:91:0a:74:2b:02:44:57:cd:38:61:78:76:1d:
         f6:7e:ad:b5:a0:61:89:ad:40:34:27:37:98:07:61:3c:5f:34:
         a4:d1:d9:0a:68:1b:40:11:64:20:32:ef:55:56:af:5c:30:11:
         1f:bf:37:d5:25:e6:53:00:ab:15:55:a4:89:bf:dd:44:9c:3a:
         74:3e:58:c1:4e:fa:3e:f4:c5:6b:6a:0d:46:dd:70:3d:ab:07:
         e7:4d:df:fc:a7:7d:46:fb:86:df:94:a1:69:a0:1e:7b:05:c8:
         c2:0a:0f:69:12:01:e7:0b:e7:92:fb:31:35:d5:66:25:ed:3a:
         78:e3:5b:aa:c5:a1:56:51:d0:f2:44:e2:2b:2e:92:37:2f:b5:
         45:9d:9d:cc:ee:00:a3:4e:d9:5a:c6:4c:27:a3:02:fc:39:88:
         c2:e6:e6:4a:bb:c3:04:26:50:61:ff:1b:69:c6:cb:7a:11:df:
         f0:62:e8:97:2a:b6:c7:65:3d:7e:f6:ba:9a:3f:61:8f:3d:ec:
         a6:a1:88:2b:52:1e:9c:a7:fe:20:24:c1:c4:bc:8f:19:03:bc:
         36:c3:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:49 2025 by rpki-client