Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
File:                     29247b77-b19f-3449-9456-b1d4b5bac0ae.roa (raw, json)
Hash identifier:          F9WG7GKHA9YlW04lZRzYzKjC2MWlncX3ch7fSfVe2E0=
Subject key identifier:   9F:80:A3:F0:34:FD:97:26:A7:95:09:19:B8:49:7C:5D:80:EC:B6:2F
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584A10354D69CC280AD4308DE080
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     25605
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4d:69:cc:28:0a:d4:30:8d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=cfc7fa4c-4fbd-4c42-a5af-8141098b6a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:18:f4:6d:5c:f3:07:65:71:2b:b9:5e:8e:
                    e2:04:d9:b9:0b:61:d6:29:7a:55:32:30:fa:fb:1c:
                    fa:4e:f7:17:d4:a1:44:8a:02:5b:a2:a6:10:a9:ee:
                    d5:10:83:78:52:99:9c:93:5b:cc:01:f9:ec:64:bb:
                    05:37:7c:0c:5d:98:de:f4:c7:e3:c9:8f:a2:da:a6:
                    dc:21:16:bf:81:73:40:de:7f:f7:8b:b5:85:8b:54:
                    82:bd:9d:7b:7c:a7:2c:01:6e:39:1f:67:d5:c3:e3:
                    66:5d:66:1a:a9:5d:24:9c:da:2b:b6:5c:9a:20:14:
                    5d:01:26:b4:4e:64:9a:7e:2e:3a:75:7b:3d:b1:b0:
                    98:03:3e:b0:52:95:8a:b5:9b:f7:93:dd:87:4c:0c:
                    b6:84:07:eb:62:52:f5:6c:d2:90:4a:8d:97:45:de:
                    77:cc:7c:20:7d:c3:f8:a5:a2:e7:c1:22:43:e8:2f:
                    e5:f5:eb:8d:d2:55:b8:50:d4:70:af:22:a1:7a:29:
                    77:a5:9a:f8:f3:f7:82:8b:8c:49:c1:96:74:4e:49:
                    06:17:9b:55:21:93:fe:bb:31:83:37:d2:76:0d:4b:
                    56:3d:6e:a8:52:23:fa:f2:12:63:db:33:2e:a0:4a:
                    8c:53:74:29:38:56:3a:2d:27:4b:57:2d:57:4b:d8:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:80:A3:F0:34:FD:97:26:A7:95:09:19:B8:49:7C:5D:80:EC:B6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:9f:67:07:1d:e1:cb:fd:21:3a:93:f2:b2:2f:27:cd:a2:
         ed:a4:19:15:6b:25:5a:e6:d6:ff:6a:4c:d3:1a:a3:17:ad:b2:
         67:43:bd:ff:85:eb:c2:72:41:f6:41:19:08:32:4b:78:3b:40:
         83:59:97:99:5e:cf:54:a5:36:94:d4:40:e5:af:9f:12:0c:7a:
         a7:ff:84:a9:c1:10:17:a5:a8:1d:8a:cf:8a:4f:2c:8b:ed:4e:
         b2:c5:b9:1e:1e:dd:c1:37:57:8d:96:b3:e2:ca:0e:42:fd:c0:
         3c:37:9d:09:0b:c4:44:29:3c:05:c7:00:63:8a:88:86:88:92:
         55:47:dd:d7:e8:b1:8f:71:34:0e:20:1e:9a:42:e9:98:9b:bf:
         f9:94:7b:29:7c:4c:30:42:f3:28:9d:f4:fb:12:55:7d:d9:9f:
         92:bf:39:3a:de:bf:3f:e9:c1:a9:88:14:92:68:43:a6:41:ce:
         73:c8:8c:a0:1a:83:d9:f9:97:8a:c6:eb:e7:5a:1b:dd:d5:1e:
         98:49:19:8c:04:18:6a:97:91:aa:ab:16:2c:12:cf:79:0b:92:
         b0:93:d1:6b:3e:1c:8b:1c:00:2f:10:6a:2e:3f:92:f7:e2:b0:
         0d:10:de:6b:1f:17:37:13:b5:d2:c9:39:68:18:63:44:59:fa:
         b3:c0:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:03 2025 by rpki-client