Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa
File:                     c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa (raw, json)
Hash identifier:          FHGHIjNLJRDPCs2m0CnNrd42iN4xaEZNoUAROxOyTTo=
Subject key identifier:   74:EE:93:67:55:CC:22:F5:5F:54:68:E9:7F:A2:8A:66:16:47:29:3C
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849A8E9E2B6DBC5BD2264995680
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     2559
IP address blocks:        198.241.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e2:b6:db:c5:bd:22:64:99:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=cc1c93f7-04ce-457b-9fe3-bac581a5f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:17:72:71:56:b1:ad:63:2a:60:aa:6d:68:
                    ac:0f:b5:16:d5:ee:e3:5c:06:06:e6:1c:11:5b:16:
                    e9:07:46:d2:72:f8:bb:d1:fa:7c:9f:a4:0b:e1:08:
                    1e:9b:5c:a4:51:aa:1f:9a:47:a9:ef:12:25:13:2c:
                    50:af:9a:df:49:6d:cb:01:e7:ed:c8:8b:a4:fc:aa:
                    5b:01:d4:a1:84:f8:2f:a3:5c:f6:9d:70:57:74:2e:
                    8d:bc:45:4b:42:5f:ac:a5:8d:b2:00:57:47:5e:9b:
                    69:c1:9b:d0:b1:77:23:4a:16:8b:e2:03:2c:a5:bf:
                    19:63:25:ac:a7:8c:09:37:ed:1d:b3:24:32:d2:5e:
                    5b:28:c9:af:9b:1b:6f:3b:75:22:ac:f2:67:26:22:
                    b5:0d:cd:e7:01:76:b6:0d:5c:e4:7d:3e:2d:17:ef:
                    f3:3e:a6:eb:b2:7d:f5:72:73:de:89:80:db:81:14:
                    e6:5c:0d:dd:79:93:cd:45:ed:7c:d4:58:1c:08:72:
                    2d:07:e5:f0:2c:f8:e5:1e:f3:d0:2f:7e:65:53:3c:
                    8f:43:73:c8:61:d3:23:92:dc:c5:66:c2:30:cf:ad:
                    40:e4:89:cd:b3:58:c8:c4:87:20:da:43:7d:f2:17:
                    9f:0b:81:0e:34:19:9e:15:c1:b4:34:54:87:17:3c:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:93:67:55:CC:22:F5:5F:54:68:E9:7F:A2:8A:66:16:47:29:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c6f99e6f-b6e8-3184-9e38-c02e6a686380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:df:ca:69:5f:d5:24:28:46:bd:49:11:98:5a:fb:5d:76:4a:
         31:98:0b:f5:d2:7d:d8:a1:d3:f1:e5:d5:dc:7c:c7:7b:27:2a:
         6e:d3:10:38:42:c1:f3:db:22:09:79:d1:55:01:7a:9b:a2:5c:
         c5:05:0e:d1:4e:12:38:ba:1c:51:9c:5b:4a:a6:dc:df:21:bc:
         9b:15:c8:88:39:6b:81:68:84:15:f1:c9:33:a9:2d:07:e3:90:
         f0:f4:79:f6:53:96:03:ff:f6:03:7a:f0:bf:42:c9:43:66:ab:
         6b:e9:a3:61:d2:2f:34:be:b9:e3:9c:d9:4b:d2:55:a0:57:6f:
         57:ea:31:a3:b3:bc:9f:8e:04:9f:f9:a0:a7:d3:46:10:77:63:
         8d:fd:40:e7:79:a2:3c:8b:da:77:89:96:4c:52:51:f8:a4:54:
         1a:20:eb:7b:43:d0:6f:5d:ef:77:76:6e:c5:b0:c0:52:79:b4:
         2f:d5:97:28:39:c1:90:db:07:43:c6:b5:0f:97:76:c3:58:52:
         e3:c7:c6:be:95:db:6f:ba:e3:35:c5:7b:bb:01:9c:dc:82:76:
         91:b9:67:22:40:ca:a4:3e:a7:48:c6:83:33:93:80:19:5f:bd:
         f0:c8:60:c6:8a:dc:be:42:13:d0:c7:4c:de:e6:a8:44:14:37:
         f4:9e:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:01:32 2025 by rpki-client