Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa
File:                     3c598d36-d861-301d-8cfb-9a87e005e102.roa (raw, json)
Hash identifier:          sdqkBOn8vVhNL84dWRRyeL2odyHMA1WzPbABQJ5h2Yw=
Subject key identifier:   32:79:E8:42:90:F2:0F:A3:7F:32:A0:2F:FC:FD:13:DF:DE:7A:34:63
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F43285849EBEA558FCEF4FAD68036ECC0
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     13462
IP address blocks:        140.98.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:55:8f:ce:f4:fa:d6:80:36:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=c31dbb3d-ef5a-4bb5-93c6-d3bc2b1108ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:6d:31:db:0e:d2:b5:92:6f:d1:56:45:7d:
                    d5:8e:85:b9:2f:19:ef:d8:09:4a:1e:c4:de:24:26:
                    5f:82:ac:a3:52:33:0e:d9:52:74:ba:60:bc:28:57:
                    12:91:c5:16:d4:c6:e7:ac:41:82:28:5b:af:ed:3f:
                    89:0c:93:2f:16:76:6e:2c:b2:cd:73:b9:7f:e2:0c:
                    69:ac:6c:6c:1d:20:b2:e4:4f:ed:7f:10:70:bc:90:
                    bb:fe:0c:a7:1c:4e:52:8c:d0:86:ab:cd:a5:8a:63:
                    62:9a:83:46:ed:32:0e:a8:04:1d:7c:a6:ef:d3:8e:
                    ac:99:2c:9f:f6:a0:80:aa:c0:76:4b:32:b7:2d:33:
                    c0:f3:d8:14:a7:88:65:98:9b:28:96:9e:38:38:e4:
                    12:e1:fc:43:1e:6e:68:dd:49:c6:6f:0f:01:ea:f5:
                    2d:74:94:c5:b2:3a:75:90:41:97:e8:0c:ff:52:e8:
                    17:68:ff:d0:6e:99:98:83:f3:eb:fe:55:6a:10:81:
                    06:02:f3:5a:af:c1:6f:1e:a8:61:a3:cd:59:7b:07:
                    0d:7f:1f:32:64:45:ae:10:80:47:05:c2:bf:bb:ff:
                    a0:c2:ca:ce:9e:1d:23:f2:f1:32:f0:59:eb:28:76:
                    c4:13:a2:09:1b:17:96:90:08:f6:8d:f2:38:6c:12:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:E8:42:90:F2:0F:A3:7F:32:A0:2F:FC:FD:13:DF:DE:7A:34:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:07:04:25:78:bc:d5:50:3d:0f:12:a0:f6:cd:f1:46:3d:
         50:54:17:ea:64:b1:a6:3f:36:ed:3b:23:67:f4:40:47:2a:fa:
         46:4d:16:ba:f0:ff:66:e3:0f:b1:88:69:7d:73:03:42:68:2a:
         00:d9:f4:18:73:e4:af:38:2c:ca:45:d3:4a:23:43:fe:6c:d4:
         6e:36:9b:bf:97:cc:af:33:67:02:f3:b0:df:d7:7d:3f:97:23:
         96:4c:80:e6:b6:df:bd:12:2f:bd:9f:96:c3:94:a2:4b:50:fd:
         48:15:b5:d3:c7:46:b8:e9:e0:21:50:2e:52:5b:43:31:47:35:
         21:53:73:f5:0e:1c:2b:05:1b:ab:e4:cf:50:68:6b:b4:2b:99:
         ba:bd:70:c0:9b:70:f3:97:6e:4f:fd:70:eb:7b:79:24:ee:95:
         95:a4:54:40:8d:01:d2:29:78:b1:59:c8:5b:dc:c8:a5:45:c9:
         a9:c9:1f:b1:f3:8e:ce:c5:3f:19:e6:4e:1f:2e:46:50:28:03:
         cd:2d:1b:0f:74:99:db:af:a5:38:87:b6:2a:91:22:39:4a:e9:
         55:9e:f9:bc:e2:3c:63:a7:87:46:20:20:72:c6:46:92:cc:9d:
         b5:a3:f9:8a:77:37:c0:b8:45:52:07:8b:87:08:af:26:ad:c1:
         0c:47:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:33 2025 by rpki-client