Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa
File:                     2511b1ae-2332-3985-bdcc-82984672479d.roa (raw, json)
Hash identifier:          nqpEHERUTESkdWG7krMssB0Yycum1jNRPBom4TAs4RM=
Subject key identifier:   61:BF:DE:7F:F6:5D:FC:B6:AB:80:6A:A1:51:36:9D:93:B5:55:FA:6D
Certificate issuer:       /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e
Certificate serial:       010D0C9F43285849CBCF8BC635A114B63DA87980
Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.152.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8b:c6:35:a1:14:b6:3d:a8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=f15bdda1-21af-4b8d-9665-3d2784638849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:bc:54:67:4c:d6:82:ba:9a:bc:3b:f6:46:
                    6d:5e:10:ca:77:75:5c:7a:2f:f9:8a:a8:20:98:33:
                    e3:58:20:f9:79:92:30:b7:e5:38:86:c8:63:0c:c8:
                    60:16:cd:57:c5:f5:2b:65:e9:a8:11:57:38:f7:c7:
                    8e:80:5c:da:ab:31:26:1a:17:bd:17:76:ef:23:1e:
                    0a:7c:52:0d:2b:64:d5:65:7b:95:c9:b9:ff:3c:90:
                    43:00:b7:3a:83:2c:ee:ca:1a:96:c8:38:f9:1a:15:
                    58:48:7b:d3:c1:89:5c:68:63:e9:4d:24:6f:38:98:
                    33:32:5c:8c:36:f0:85:23:69:a8:95:2f:90:15:99:
                    0a:ca:41:fa:bc:40:66:d2:03:c2:c4:74:d3:f3:5f:
                    30:4e:62:4d:e7:78:29:91:a0:9d:a0:1c:65:8e:c6:
                    b8:a2:27:a5:ba:24:83:ba:7b:5a:02:5a:33:89:7a:
                    38:9f:48:c4:18:03:73:8f:1e:eb:12:1f:2d:b8:b2:
                    d8:d7:db:d2:d1:dc:bc:55:78:70:28:cf:b5:2a:87:
                    da:a0:7b:c7:98:8a:0d:e3:f7:aa:35:df:73:ec:f9:
                    98:41:e6:93:6e:ad:a9:94:64:c9:08:1d:51:a0:82:
                    1f:77:59:1f:35:7c:67:c7:3d:ef:0d:0e:6c:39:d7:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:DE:7F:F6:5D:FC:B6:AB:80:6A:A1:51:36:9D:93:B5:55:FA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl

            X509v3 Authority Key Identifier:
                keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:10:52:b9:55:58:e1:56:05:ed:7c:ea:df:0b:20:7e:87:
         67:8b:bb:98:28:49:49:eb:6a:95:f0:b8:06:33:4f:c8:ac:ae:
         aa:fd:31:c5:39:99:0f:be:b8:61:d1:e0:16:69:52:67:3e:77:
         96:e9:44:01:69:6f:71:12:0a:50:e6:34:c4:da:1e:1c:68:89:
         57:4b:aa:eb:21:85:7e:76:b4:21:74:5f:f2:60:b9:99:ee:6b:
         8a:d3:47:35:2b:f8:d6:1f:ec:1a:75:63:1e:89:fb:f5:79:93:
         33:f0:1a:41:3b:fc:45:dd:6b:d3:dc:78:a2:5a:84:c6:ff:ca:
         dc:35:a7:b9:8e:9e:ba:01:21:7c:5b:61:bf:e5:a2:3c:39:c7:
         69:1c:95:b9:e5:19:84:d4:63:8b:2a:5e:8a:de:c0:bf:bc:1a:
         54:39:b8:53:a9:db:57:a1:84:1c:b8:6b:c9:fd:3b:63:b3:df:
         d3:31:8a:80:7f:20:6c:ae:dd:54:39:9b:a8:fa:86:11:72:6a:
         66:9e:6d:a0:06:af:99:aa:e7:1e:c5:be:93:c5:5a:07:27:02:
         d9:0b:1e:92:c1:c9:94:a6:1f:ce:d3:c8:cf:ef:ae:2d:1b:92:
         55:a2:2a:4e:e7:83:09:c4:11:76:85:31:72:7d:f0:fe:6e:1f:
         ce:68:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:32:24 2025 by rpki-client