Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa
File:                     0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa (raw, json)
Hash identifier:          nblPYklBNDDhT1LBA4od8zKVirKB8pJAFjTy2IbdBA8=
Subject key identifier:   2F:D2:EB:36:AA:B9:A1:4D:6F:A8:9D:21:FA:38:DD:F0:73:DE:AD:42
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858496FAF085E1DAE10F63724D380
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        198.176.122.0/24 maxlen: 24
                          198.176.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:08:5e:1d:ae:10:f6:37:24:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=235317e5-754e-41e9-a926-da2d0854e9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:3a:d7:ac:9a:c6:f1:4a:e1:bb:78:d3:a0:
                    fb:34:1b:25:65:32:9e:41:f3:ae:af:a6:a4:13:11:
                    70:b9:92:51:bc:42:be:ca:a0:96:19:57:b4:fc:44:
                    f0:be:34:17:e7:28:08:7f:f6:d8:9a:55:84:68:f5:
                    ea:d9:76:6e:99:1c:ed:bd:00:9e:b5:e9:dc:f8:1b:
                    8c:82:be:21:34:42:5e:d2:cb:55:00:a5:f1:ce:a9:
                    fd:75:49:19:2f:9a:43:24:25:83:45:28:e2:34:b3:
                    d2:46:84:a7:fd:84:9c:98:e5:bd:a4:df:1f:50:eb:
                    a3:95:6b:08:34:d5:77:22:46:2c:1e:0f:88:90:0e:
                    a1:ce:9c:72:71:96:d6:c7:14:15:6e:35:7b:c1:a5:
                    8c:e8:d5:57:3d:0f:e5:68:0a:c1:ca:20:83:58:2d:
                    b6:83:a8:3d:67:de:99:8b:59:b4:d6:84:9e:fe:ca:
                    35:a5:91:93:e9:82:81:61:e5:02:51:ba:48:f0:5c:
                    35:e7:57:73:fb:ba:94:6f:9d:24:f9:e0:4b:0b:49:
                    be:cd:4b:1b:ab:94:d0:a3:07:ab:d1:71:c2:81:18:
                    62:db:80:48:69:ba:87:4c:31:ab:fe:59:6f:bd:49:
                    fd:27:30:f2:6f:47:07:42:1c:5f:f4:36:08:36:ac:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D2:EB:36:AA:B9:A1:4D:6F:A8:9D:21:FA:38:DD:F0:73:DE:AD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/0d4d838c-ac30-3919-8ce7-d0b6abb5e5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:e3:4a:84:59:ea:d7:56:77:99:d7:92:d2:df:c9:08:a8:
         0e:9d:50:26:5e:db:5a:3a:1b:9f:9f:a5:86:11:a5:55:1b:d9:
         04:7a:fd:46:b1:81:03:b6:ed:0e:4e:3a:71:88:5e:bc:19:dd:
         e6:aa:88:d9:b8:73:50:07:cc:24:2b:0a:69:38:b6:b6:2f:27:
         f7:49:5f:4e:23:88:02:a2:0a:90:64:1f:5b:7f:90:07:59:d7:
         3a:ce:7d:4b:58:40:e3:4b:b2:6c:77:e1:05:cb:5a:dd:27:49:
         28:3a:bd:7c:24:6a:e7:2f:2f:64:1c:3b:3e:c6:47:74:6e:42:
         05:a9:4a:1b:8e:0b:ab:0e:1b:9d:6c:ce:76:6c:00:63:48:8f:
         4a:c3:1a:f3:2e:54:0c:42:51:f9:d1:49:47:26:64:f9:3d:a2:
         1a:9e:e4:90:5a:1d:a4:e5:ae:30:fb:2b:88:e6:25:c2:3b:66:
         61:d8:68:c3:0e:36:69:ff:8f:ee:ad:0b:80:10:07:e8:c6:13:
         65:e1:a0:8d:a5:ae:de:b1:33:d3:d2:19:5e:4f:d7:87:d4:b7:
         84:f8:4a:57:58:22:20:30:af:06:e5:05:30:98:86:82:d0:99:
         a4:51:d6:d0:ee:a3:b3:d0:0a:c6:74:60:25:e2:52:14:0e:f3:
         be:d2:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:14 2025 by rpki-client