Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
File:                     d5f143af-ba0a-3780-a98d-6780498dc1dd.roa (raw, json)
Hash identifier:          97wY902HXFdYxWAPZ1zApTRGzIEswM+RmXIS7ks0e5U=
Subject key identifier:   EE:38:DA:F2:DF:C8:FB:B1:6C:CF:B8:6D:D7:A4:B7:56:4D:73:71:B2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848907605B77F9D2694F179DBA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397243
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:05:b7:7f:9d:26:94:f1:79:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=445e2d8f-473a-4dc5-bc23-f79ed83c45c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:04:6b:16:97:c5:7e:99:ac:e3:ff:bb:be:
                    79:d4:4b:d9:22:06:57:89:d8:5a:e1:6d:cb:f7:98:
                    bf:f7:79:c8:cd:80:22:6d:3b:b8:28:c4:fd:ab:64:
                    11:54:4f:76:92:8e:fb:b3:8a:55:89:2f:1f:b5:aa:
                    2d:dc:26:05:4d:60:09:e4:1f:9a:69:22:91:0c:3b:
                    a2:6d:ae:2a:bc:a3:6d:52:84:51:09:28:05:4b:cd:
                    0b:32:4e:7f:88:b4:8c:fd:27:39:cb:d5:30:af:a5:
                    21:97:72:b1:c7:a5:03:44:0c:9b:ce:4b:ae:1f:d4:
                    4d:29:08:cc:59:85:ff:65:66:27:f8:f4:e7:ec:f3:
                    dc:a6:bd:de:51:b0:49:b0:f5:6c:7f:44:97:62:d3:
                    15:4a:31:b1:b8:f5:fa:b5:30:93:57:f8:1a:29:32:
                    cb:47:3c:bf:c8:aa:d8:88:a6:54:ae:0c:f2:f9:2a:
                    4e:d2:4c:ff:21:13:a2:dd:fe:9b:17:58:2b:c4:ee:
                    27:12:ad:47:8f:35:eb:d6:45:4a:c5:f3:e1:da:3a:
                    97:78:ca:20:b0:80:c5:7e:f5:79:cf:72:e6:95:62:
                    f6:f0:25:13:ea:98:02:eb:45:9e:28:d4:b4:83:db:
                    19:b0:ea:91:57:92:89:27:4c:60:d5:42:d9:a9:c2:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:DA:F2:DF:C8:FB:B1:6C:CF:B8:6D:D7:A4:B7:56:4D:73:71:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5f143af-ba0a-3780-a98d-6780498dc1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:3f:c2:6c:88:bc:39:45:3a:64:84:9f:cd:ba:88:ec:ba:
         d0:14:c1:25:eb:d9:72:fa:70:c7:17:5e:72:e8:3b:16:bf:a2:
         f9:a6:48:50:97:7e:f2:c7:d0:43:e9:ed:0e:e7:34:90:4f:16:
         e1:c5:90:ae:94:e7:a4:bd:89:d6:13:dd:ec:df:3c:7f:45:08:
         5f:c2:57:7f:5c:f1:da:02:96:6f:90:5b:d3:49:d9:ce:93:89:
         da:e3:4c:d7:83:92:ff:4a:6e:d5:75:5d:8c:3e:b9:17:ff:31:
         ff:8b:48:3c:0d:e1:b0:4a:c3:8a:24:b0:d1:1e:da:46:79:ed:
         23:08:a4:dd:e0:3c:4a:87:28:4b:06:18:4f:47:49:7a:ca:2d:
         67:81:cc:bf:c0:7c:33:7d:d2:a6:05:e4:51:4a:2e:ce:c4:0b:
         a7:0f:3d:df:a9:4e:79:d3:a3:e8:3b:44:b0:ec:09:e7:5c:d4:
         91:ff:10:ba:9d:47:d5:5f:25:45:43:4d:44:26:b4:cc:8c:58:
         d7:21:e6:c0:f3:9f:5e:32:d3:10:81:f3:59:d3:29:be:cb:0c:
         41:07:a9:2c:e0:18:39:91:06:b2:84:1d:79:43:56:7d:8e:52:
         10:c6:aa:87:12:af:70:77:13:5c:58:cb:c8:67:81:8b:dd:7f:
         4c:2a:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:02 2025 by rpki-client