Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa
File:                     12ff66ec-0080-302a-957c-2fc06db68846.roa (raw, json)
Hash identifier:          TNOPtcRkLroAckwMNfKebIKPyiPn3KaeLC7386sHjpI=
Subject key identifier:   E0:A8:B1:19:65:F7:4F:94:F6:A2:40:E9:B6:B9:74:C6:A8:40:05:0D
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F432858494DC83CB3804F68C77681BDF8
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa
Signing time:             Tue 25 Mar 2025 09:34:31 +0000
ROA not before:           Tue 25 Mar 2025 09:34:31 +0000
ROA not after:            Mon 23 Jun 2025 09:34:31 +0000
asID:                     395793
IP address blocks:        198.1.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4d:c8:3c:b3:80:4f:68:c7:76:81:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Mar 25 09:34:31 2025 GMT
            Not After : Jun 23 09:34:31 2025 GMT
        Subject: CN=7a8a7dd5-719a-4bb2-9132-7451b9c78195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:1a:29:c1:4c:a1:7c:87:3a:c8:50:d7:14:
                    0a:92:c3:9a:27:3b:f1:75:7e:34:42:ae:19:98:61:
                    29:27:2a:e8:68:8e:b7:ce:ca:31:2b:5d:78:3d:da:
                    22:21:7d:0f:f3:f2:98:39:51:17:da:2c:36:55:1d:
                    2b:20:8a:86:60:c4:4a:7c:47:b4:f0:56:c7:0e:86:
                    77:35:9a:66:0c:49:d5:8c:36:f8:62:9f:16:31:fd:
                    c5:7e:d4:eb:8b:6d:85:10:05:28:ec:78:b4:b5:cc:
                    73:a2:bd:c2:a2:53:05:88:57:ae:9e:ad:33:99:f7:
                    46:5f:6a:bd:3a:5c:23:6c:68:1d:eb:40:35:79:2c:
                    c9:9e:4d:ba:a5:76:04:b8:99:11:c9:99:3f:5a:e4:
                    c9:0e:a5:bc:49:6e:f0:7f:40:99:9f:1b:b9:aa:8b:
                    5d:a7:69:f3:5a:e7:89:45:cd:57:3e:86:90:3c:54:
                    b9:51:c8:01:6e:ca:0d:2b:45:42:d1:82:0b:68:1a:
                    07:32:4a:f3:8d:9c:b4:6c:ef:48:fd:e0:b6:c5:7f:
                    64:29:54:61:6f:80:78:be:da:ef:e8:77:d9:a8:42:
                    6f:3c:d0:36:bc:66:b5:c1:fb:33:55:a8:b1:1c:a2:
                    f3:06:21:a7:a3:0d:a1:b3:c3:72:b1:b3:23:e6:10:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A8:B1:19:65:F7:4F:94:F6:A2:40:E9:B6:B9:74:C6:A8:40:05:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/12ff66ec-0080-302a-957c-2fc06db68846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:99:5f:c9:bd:e8:c5:65:e1:d9:78:39:e9:fd:a6:c1:44:
         da:25:09:e8:51:e0:b9:2d:3f:42:84:30:69:fa:06:f5:49:0d:
         2d:52:4b:54:1a:f4:a1:c1:38:96:c9:02:9d:56:67:30:cb:8a:
         93:05:eb:73:6d:3d:1d:98:d7:da:fe:90:fd:5b:96:4b:a3:39:
         f0:88:29:65:30:36:e8:f8:ed:d3:44:65:44:a7:1a:d2:75:8d:
         af:49:74:c6:1b:eb:57:38:ad:37:31:03:b1:be:34:cb:57:91:
         68:fc:f2:f9:75:62:d4:4a:d9:a4:cd:db:44:e5:6e:aa:c4:8c:
         b8:d5:97:ff:91:4e:36:5d:79:2e:ac:7a:55:6f:51:d4:b4:7b:
         b7:d7:ad:a8:5d:cc:8a:b2:35:f7:9d:d9:f1:02:9e:4c:3a:dc:
         0b:6b:a5:65:bf:d0:cd:03:4d:d9:35:46:42:48:4c:e2:82:15:
         94:50:de:f8:ce:0c:ca:ab:f2:69:91:f9:e7:22:97:67:5f:96:
         a2:36:bd:d7:3c:ae:e2:62:bb:dc:f4:ca:e8:7c:db:ad:48:cf:
         57:41:dc:37:8b:da:46:98:fb:ec:b2:89:74:4a:c9:d2:e5:01:
         6a:0b:04:55:76:30:74:4b:9d:b7:dc:38:10:81:52:83:63:11:
         ad:80:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:47 2025 by rpki-client