Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
File:                     d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa (raw, json)
Hash identifier:          fInqPqEuEJHAbehbNbTF6bvM2izSMW8LmNImsgPfdNo=
Subject key identifier:   0D:C3:BE:12:43:45:22:76:1F:A6:7E:42:D5:9F:FB:7B:6D:F4:7A:EE
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584973DEE2EBB03D8E25A27D6D00
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        198.176.124.0/24 maxlen: 24
                          198.176.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e2:eb:b0:3d:8e:25:a2:7d:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1a03de85-e81b-4cbc-91ce-54e89a1dc2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:67:8a:88:59:9c:17:a0:05:ac:e7:89:8c:
                    47:31:f9:ed:9b:0a:54:0e:ba:43:d5:23:72:36:4b:
                    30:2e:d9:cb:66:75:06:5f:67:be:83:8c:27:50:6c:
                    ed:c0:1a:91:06:3b:cd:fc:5e:1c:f1:7c:1e:1b:42:
                    df:f2:0c:83:ef:0b:89:25:93:3e:61:13:47:6c:51:
                    fd:b7:6c:80:19:e1:32:0a:00:80:6f:28:11:a3:f7:
                    d6:b5:bd:e2:ef:9c:bc:8e:b3:47:eb:29:20:e2:34:
                    28:83:06:57:c2:0b:38:d2:d5:8d:5f:2c:86:68:f0:
                    c8:0f:29:2a:71:48:0a:70:d9:c3:2c:00:90:a9:3c:
                    ce:23:aa:e8:2c:00:c1:7e:7e:12:97:45:a1:db:c4:
                    7c:3a:28:83:12:3c:ec:de:68:cd:88:58:e2:a6:d5:
                    9f:6f:49:f6:68:d9:c8:3f:2e:67:d3:4c:84:db:bb:
                    a0:a8:21:54:60:17:c1:d9:68:e4:61:60:df:81:7a:
                    09:f0:c0:89:b1:0f:ff:29:68:84:e6:2a:ba:e5:4d:
                    43:cf:b3:25:3f:34:38:a8:dd:b8:06:df:36:15:7e:
                    c5:10:07:6e:17:35:7a:30:7b:d6:03:b1:f8:32:c4:
                    15:37:76:48:63:ae:2c:99:73:ff:78:70:e2:22:f1:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C3:BE:12:43:45:22:76:1F:A6:7E:42:D5:9F:FB:7B:6D:F4:7A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:9f:60:87:35:24:7f:e6:30:a2:88:a9:3f:24:09:7d:61:
         c1:fd:26:6c:40:aa:2a:df:73:d5:ac:7a:86:29:17:86:3f:66:
         cb:b3:f8:ca:f0:84:84:84:4f:2c:57:84:28:9f:27:54:e7:51:
         c5:ac:3b:81:81:f7:93:52:ba:79:90:b8:c0:e4:75:2c:a5:b4:
         91:84:be:4f:c2:c8:b9:1c:c3:a0:52:97:d2:cb:6f:46:34:1b:
         13:a2:13:69:2d:e0:5b:73:9d:8d:c9:b5:eb:19:80:a9:fa:fe:
         2c:c3:40:ca:c1:2c:0c:29:05:7f:29:e2:43:ac:39:f7:52:26:
         ab:75:fa:b0:0c:cc:b4:a0:0b:65:f8:7c:7d:27:b3:0b:12:b4:
         89:a8:bc:7e:3d:db:d5:4e:ec:56:6d:d2:7c:c9:12:99:76:db:
         6b:f0:0e:45:ce:f8:f6:bf:9f:57:d6:ca:91:bf:a5:b9:a2:d7:
         45:1d:5f:12:83:97:b2:59:e7:c5:68:05:17:ff:93:6f:79:9c:
         d8:be:1d:f5:07:e9:4d:92:51:89:bf:c1:b3:f5:72:41:e0:a7:
         c2:11:47:ac:be:f6:76:12:28:cd:61:ef:65:ba:b2:3a:30:c0:
         3b:70:e1:5c:fc:c3:e9:62:8b:da:82:2c:7c:3e:31:ef:b2:54:
         2b:67:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:10 2025 by rpki-client