Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
File:                     4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json)
Hash identifier:          4WzcfJD/zLHIZOIY78h3MbWN67BKm6+Ox5K8B16hZWA=
Subject key identifier:   61:7A:73:10:47:36:CE:BF:86:8B:B6:34:EE:04:EB:D6:39:11:12:C8
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849BC74AC9FADCCF482CAB4CC00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     2559
IP address blocks:        198.241.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ac:9f:ad:cc:f4:82:ca:b4:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=28912b95-a2cc-4755-9dd8-7b0df87ef4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:10:52:b2:aa:83:c9:ca:f1:ae:06:af:7f:
                    57:ca:f8:52:23:cb:3d:93:31:09:32:d1:28:c4:e5:
                    87:44:d1:95:2d:65:d6:e4:f0:76:d8:a7:85:3d:12:
                    a7:fe:d8:19:ab:13:15:47:63:f6:ff:a1:87:19:23:
                    7e:5f:1e:42:4e:63:d0:f7:06:f9:45:e6:4b:b1:5b:
                    e3:4e:ff:a4:b0:44:44:09:b7:27:e7:28:1b:ce:1e:
                    f4:4d:8d:cd:5a:91:14:9a:3a:28:95:3a:44:2b:27:
                    4a:e7:4b:69:00:7d:41:55:6b:04:11:f9:57:4c:e6:
                    58:ea:ba:85:a8:b1:25:c2:2d:fa:85:26:6e:f9:f7:
                    71:b4:93:45:d6:dc:95:bb:4c:c1:7c:54:c1:4b:00:
                    af:a5:b6:86:8a:4f:be:a3:f5:2a:68:14:5c:8a:a7:
                    29:61:68:bd:b7:bd:5c:70:8b:4d:51:1e:e7:62:83:
                    9c:1d:56:56:97:53:d3:60:f4:4a:5a:26:ae:89:1e:
                    14:39:88:3c:62:d8:94:00:7d:7f:ac:ca:c4:0d:78:
                    e3:2f:11:d6:d8:02:28:c4:e4:a1:14:c1:34:fb:cd:
                    80:0f:5a:a9:52:9f:34:32:37:01:6f:61:a5:f0:b9:
                    bc:61:21:35:80:9b:c6:5b:43:16:9d:86:68:45:cb:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:73:10:47:36:CE:BF:86:8B:B6:34:EE:04:EB:D6:39:11:12:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:01:a3:e9:3e:af:53:09:5f:72:61:c9:cc:78:9c:f9:d4:81:
         9d:b1:2a:8e:7f:c2:7d:f4:e8:ce:a8:bc:22:4c:42:c3:99:7a:
         4c:50:ce:63:36:ca:87:39:ab:6f:1d:76:5f:e9:6a:c8:b1:86:
         7e:1e:ff:c3:2e:93:de:69:88:8f:09:90:9c:d3:f2:2a:a8:0d:
         15:76:1b:b5:1c:17:e4:86:03:2f:08:d8:23:32:a2:06:73:3b:
         b5:37:94:ab:ec:41:eb:fe:51:e2:52:78:6c:bc:29:bc:5a:ec:
         52:1a:a5:e6:f6:51:01:95:65:e8:ab:38:2e:b7:fd:d0:f8:32:
         e1:34:1b:b7:4c:70:7f:c2:57:55:05:98:54:34:5c:b0:f0:71:
         3d:19:1e:ac:8d:19:12:52:6a:03:04:b1:f3:4b:a6:1a:62:d2:
         02:58:d0:5c:d2:7f:a5:ac:33:20:b1:83:be:05:f6:fb:84:a6:
         c8:8a:2c:29:53:2f:95:6a:1a:e9:9c:fa:5a:84:62:64:84:15:
         98:f1:24:44:08:b6:a4:49:24:68:6b:87:fb:65:af:a7:73:7c:
         89:9e:ae:1c:f3:52:e7:a0:e7:64:68:b5:30:71:5e:75:44:96:
         10:4a:f9:8b:55:19:0a:17:9a:53:80:64:7f:84:01:b7:d4:46:
         0b:3f:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:56:39 2025 by rpki-client