Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
File:                     fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa (raw, json)
Hash identifier:          chtVyPS7SYMydIEuADodAYQYQEvBiwng0pFgLd5N1uM=
Subject key identifier:   B8:FB:35:A2:62:39:A1:3C:99:F8:BE:EA:4B:89:22:D4:C0:2E:44:B0
Certificate issuer:       /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
Certificate serial:       010D0C9F43285849A61F43D6E57C653BDEAF0430
Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     14973
IP address blocks:        198.235.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:43:d6:e5:7c:65:3b:de:af:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=6cef4a7a-b2b3-4e02-a09f-1c81ec22fc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:46:6f:16:05:b0:3a:44:1d:d4:58:d9:96:
                    6d:30:b1:45:09:c6:c9:f2:5c:a7:a0:a7:85:f7:f5:
                    0c:39:fc:e2:c2:ef:85:ad:ab:dd:60:de:46:ac:bd:
                    ce:a4:ed:1a:f3:7c:1d:83:d2:99:98:c2:cf:bf:f3:
                    45:5d:79:bc:ce:98:e6:a9:82:6e:17:c8:b7:59:2d:
                    8b:97:71:7a:d6:05:6a:66:38:64:73:bd:43:c3:58:
                    a0:c5:e9:5c:5b:e3:8f:66:b8:6b:6c:84:44:98:bf:
                    49:38:f6:f7:28:6d:b7:9a:f6:08:ed:ad:3d:be:f6:
                    03:e1:8c:d2:80:4e:a9:e0:22:f8:46:76:37:d6:ca:
                    74:e1:76:c0:f9:9e:f8:1e:23:2b:7a:ad:8c:88:fa:
                    75:ea:68:a1:10:ca:71:98:cb:6f:20:c7:1a:ab:fb:
                    06:68:f7:bf:c6:3c:14:15:fd:10:11:28:4c:a3:b5:
                    c9:31:69:6c:48:d1:81:8b:0c:ac:96:da:6c:19:0a:
                    bd:32:f8:d0:08:5d:4b:1e:e2:ba:84:f3:e3:8d:91:
                    6f:e4:94:cb:de:52:a6:67:6c:66:31:14:93:ee:b0:
                    67:44:f7:ca:58:76:93:cd:a3:6a:df:c5:bb:82:de:
                    ce:87:71:a5:87:1d:44:26:75:0a:5c:67:05:e9:e2:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:35:A2:62:39:A1:3C:99:F8:BE:EA:4B:89:22:D4:C0:2E:44:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:45:92:78:5f:29:12:ab:18:20:c6:be:8f:ff:81:0d:55:
         5e:bc:cd:45:c9:72:0d:10:b6:66:c2:27:57:00:65:6e:14:37:
         ae:e1:eb:3c:a3:21:80:58:40:67:11:d3:0e:4a:c4:3c:5e:de:
         ff:10:ec:9d:3f:aa:a3:5e:c1:bb:ca:88:9a:dc:48:33:1e:79:
         48:c2:e5:ab:8b:ed:1a:a4:1a:6b:59:7e:68:a0:8e:ea:a0:88:
         73:61:fb:c7:eb:15:62:de:6b:06:03:70:bd:34:48:4a:31:8a:
         d3:9d:4a:ac:80:cd:84:df:4a:4c:73:e7:b9:65:ff:8d:e6:99:
         dc:80:21:7c:18:94:22:c6:bd:80:cc:61:89:b9:03:c5:50:9e:
         9a:1d:3e:85:b0:68:0d:bb:5d:ff:9e:cf:cd:84:b4:8f:f3:a3:
         c7:3a:d4:94:87:84:35:53:50:3f:2e:a6:6c:8e:2e:d9:ba:d5:
         69:6f:22:28:79:50:22:38:7e:1e:90:f8:77:c9:51:72:4e:1b:
         cb:d1:a6:df:53:15:2c:31:d7:d2:80:bb:55:f0:07:39:06:c2:
         a7:8c:0b:10:25:6f:17:2e:11:6f:c7:15:44:c3:ff:ca:85:46:
         32:98:b5:1d:54:2d:70:ee:d3:bc:5f:a7:ae:dd:a9:f4:14:1e:
         89:66:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:04 2025 by rpki-client