Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa
File:                     64958442-b8ef-36f5-930e-f098a97dd0eb.roa (raw, json)
Hash identifier:          /cX8qhfeOdEnSlOGB3P17P+WVZURZ6DDywvGJp/7nsY=
Subject key identifier:   A4:34:97:C9:BC:90:54:D4:AC:93:D3:5F:96:07:C5:BE:A4:98:37:7E
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F43285848A400C3179F35852D5CC65740
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        198.204.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c3:17:9f:35:85:2d:5c:c6:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=a643b9e1-a289-4201-99d0-cd2656e82543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:34:ac:2f:cd:84:55:f6:55:a8:69:0a:7b:
                    a6:65:6b:42:d8:e3:dc:51:ba:da:23:ab:05:5b:06:
                    83:9d:54:78:35:df:95:48:5b:99:73:63:26:dc:5d:
                    1f:66:81:23:63:ab:73:aa:b9:a1:f5:d3:bd:af:ce:
                    6f:2b:ff:14:15:a8:79:a3:19:13:11:47:5d:b3:21:
                    0b:8a:7d:2c:04:37:8a:a2:bb:9a:bc:a6:98:27:e1:
                    3a:33:a1:8c:4b:dc:89:2a:cb:47:82:1b:67:dd:6c:
                    c6:08:c3:99:4d:8e:4a:b9:ec:87:4f:9c:cb:52:6c:
                    77:5d:9c:7d:78:09:de:b1:bb:8a:24:01:44:0e:a4:
                    6b:93:7b:24:08:5c:b5:d7:4e:22:08:bb:1e:2c:91:
                    36:9b:bf:ff:24:56:fa:ad:bc:bd:71:83:e9:cf:53:
                    16:f8:76:8d:d2:3d:fa:a5:b3:45:75:bf:b1:a8:f2:
                    0e:b6:ed:d5:6c:99:bc:33:cb:f1:6c:26:aa:97:46:
                    3d:c4:e6:35:ba:74:43:f0:4f:fe:f4:8c:4b:68:9b:
                    50:d0:8f:2a:a3:98:1f:65:60:b2:bb:18:48:45:b7:
                    cb:e5:81:38:df:68:85:57:da:0e:df:db:83:e9:9d:
                    f8:01:cf:9f:76:f8:87:87:b8:b3:80:79:79:32:4d:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:97:C9:BC:90:54:D4:AC:93:D3:5F:96:07:C5:BE:A4:98:37:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/64958442-b8ef-36f5-930e-f098a97dd0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:58:78:b0:ce:7f:22:d3:97:5d:6c:15:46:05:fe:f7:b5:
         a8:7e:2e:11:cf:56:d8:ea:b2:c4:6c:e4:81:75:dc:f2:7e:81:
         71:3e:32:0f:52:6c:c3:62:0e:7f:d3:91:e5:1b:09:af:91:a2:
         41:6e:97:ac:5e:9b:5e:7a:67:da:a9:e7:c0:c0:c5:a0:36:45:
         c9:6f:ed:5c:57:14:7f:d7:d4:7a:16:b5:96:95:60:e1:11:1a:
         59:6c:5b:fd:b6:4c:02:1e:d3:9b:32:44:aa:3e:01:54:12:61:
         9a:41:59:01:3f:07:32:4a:ac:ad:e5:d8:d9:ca:ae:6f:a0:ae:
         4a:d8:b0:2b:6c:7d:c1:02:31:63:25:89:96:4e:4c:a2:ea:0e:
         86:37:13:0e:ee:ab:7c:30:ed:8a:68:74:8a:a7:5e:85:36:41:
         b3:03:bb:6c:57:60:45:8d:39:4a:f4:b2:8d:44:74:5c:1e:05:
         ac:0e:ee:34:7e:da:8f:75:12:ba:0b:44:f5:1c:44:93:e0:8e:
         71:e6:66:66:55:38:17:27:0d:55:85:86:bf:68:37:9e:93:42:
         95:f6:70:96:b8:db:31:5d:e4:24:b8:4d:2e:5c:9e:16:c5:d6:
         d3:29:f8:21:7d:c3:8d:43:bf:c1:1f:d2:a2:a5:d5:74:7b:6e:
         7d:98:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:18 2025 by rpki-client