Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67395864-ac9f-375c-9b84-faf7ad388433.roa
File:                     67395864-ac9f-375c-9b84-faf7ad388433.roa (raw, json)
Hash identifier:          dFzd9h8nU40JCeyzmbAJ+Cq3Lal+T6ioJg6Vu/ZrURo=
Subject key identifier:   CC:3B:DC:00:11:8E:AD:15:F7:35:47:F5:98:56:EF:A2:1D:D6:AE:0C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849605418C48573651D0C594A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67395864-ac9f-375c-9b84-faf7ad388433.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     215269
IP address blocks:        198.89.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:18:c4:85:73:65:1d:0c:59:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=8d1bbc6a-8983-4fe9-80ba-014844791ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:2c:97:7e:c9:44:d1:a6:15:61:ac:5e:d6:
                    45:9d:50:55:c9:eb:09:95:b9:1c:c9:f6:a7:e2:df:
                    0f:a6:19:77:57:f8:1f:58:bf:26:91:7b:53:11:0d:
                    f5:c7:47:aa:55:52:1d:c8:51:c2:e6:56:00:a3:69:
                    93:70:fe:0e:1c:12:97:4f:ff:d2:bf:cb:c3:29:70:
                    cf:e1:0e:86:7a:8b:9e:50:8a:9e:7c:62:70:c3:6b:
                    eb:7f:fd:bd:9f:c8:fa:c2:70:51:fb:fe:04:48:17:
                    1a:95:ab:9f:dc:30:96:04:b5:49:38:41:3a:98:ee:
                    34:06:07:4e:f3:5f:70:8e:f0:62:24:8f:8f:2a:d5:
                    ce:9e:ee:be:02:51:eb:6e:70:03:55:4f:86:b6:30:
                    83:8b:14:99:f9:5d:9a:92:bb:48:f6:22:b2:2f:b7:
                    92:10:0e:ff:aa:06:f8:59:a0:d9:56:f2:40:cc:31:
                    ad:6c:ee:e2:1c:e7:a7:69:61:96:23:62:35:b8:f8:
                    d3:55:b9:07:f1:1e:36:55:a0:c5:cf:22:2e:05:26:
                    43:a2:e3:65:55:2c:a8:0a:29:40:b6:06:4a:ad:59:
                    8c:4b:0c:e4:ee:76:63:ea:69:aa:4b:b4:c2:de:5f:
                    d9:c3:76:c3:2c:d1:05:a1:b6:e9:07:ef:4e:fb:1a:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3B:DC:00:11:8E:AD:15:F7:35:47:F5:98:56:EF:A2:1D:D6:AE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/67395864-ac9f-375c-9b84-faf7ad388433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:df:fd:d0:77:65:81:eb:43:83:03:b8:ec:d7:a7:e2:2b:
         92:11:fd:ea:f9:f6:19:fb:13:00:cf:ee:9f:32:a8:8e:ff:08:
         fc:dd:03:0e:6b:a5:a5:99:99:ca:c6:cf:81:fc:12:ee:f7:af:
         ee:0b:68:bb:75:f1:5f:52:c6:fc:51:d3:d3:56:bc:6e:52:21:
         70:9b:db:a0:88:59:2e:0d:f0:f1:52:8e:a4:7c:60:3f:78:78:
         10:1b:94:7a:58:70:dc:1d:52:4a:9e:45:de:39:4d:79:88:b5:
         32:9b:fe:06:7c:87:6f:55:b5:01:51:45:49:2d:1f:66:5c:aa:
         40:c1:27:88:62:b7:3a:11:b1:b3:18:54:a9:fb:cc:8e:dc:fb:
         89:2d:c9:bb:84:69:07:60:75:20:70:d1:d0:a2:6e:9b:4d:d2:
         5b:d2:7e:1d:5c:63:ce:2f:9c:7f:3b:8f:85:c0:23:c6:aa:dc:
         99:4e:d9:06:cb:7f:3d:7d:5e:05:39:ca:17:f0:b5:6f:d6:45:
         3a:eb:64:30:2f:3e:55:21:3b:b1:45:5d:a9:9b:d8:aa:7d:a7:
         01:be:1f:e6:09:b8:ec:30:af:37:54:3c:dc:52:fc:38:1e:c0:
         6f:74:2e:88:8f:b7:21:6a:ab:6d:1c:e2:b9:04:73:76:23:bd:
         8a:e0:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:08:45 2025 by rpki-client