Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
File:                     46a07bce-d159-3940-9c4e-a7bf314f74a9.roa (raw, json)
Hash identifier:          cAqtL55EmqKEO5kqCeu1xlD/WR5W8M6bUGcve0xwYKI=
Subject key identifier:   1D:0B:4F:C4:9B:CC:CA:9C:FC:C8:A5:9E:BD:D6:18:1D:74:BD:95:83
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F432858494303F330F77100E115884640
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     16509
IP address blocks:        198.169.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:f3:30:f7:71:00:e1:15:88:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=79c1890d-913f-48ed-9978-0a48f004367f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:5a:98:d4:82:5b:01:d2:e9:bc:45:43:3b:
                    20:2b:d9:bc:2a:6a:06:8e:8f:04:81:1a:ba:4a:38:
                    8d:5d:1f:48:1a:be:d4:a7:bd:f1:c8:9a:d7:50:42:
                    11:d5:a4:75:c1:fc:a3:03:55:b2:5d:b8:9a:81:e8:
                    cf:85:c4:a1:3f:f3:6f:8c:1d:4e:a9:3f:35:02:53:
                    e9:f2:17:0b:79:22:5c:b7:2f:6d:0b:28:11:8e:46:
                    5c:b4:63:f2:21:72:dc:36:8e:e7:f1:08:6d:a3:af:
                    9f:ca:05:6b:f5:02:ac:1d:b3:bf:d7:f6:74:1f:52:
                    eb:26:57:ac:a4:29:45:b5:ba:07:14:c0:6f:ce:b1:
                    b2:58:3b:80:3d:be:8d:c5:5c:b1:75:80:83:3e:25:
                    f7:7a:9f:34:71:da:d5:bc:e4:79:2a:2d:b9:82:e8:
                    44:e2:c3:4f:eb:84:21:b4:20:ca:78:82:ea:dd:64:
                    ad:ac:bf:4a:72:8f:70:a4:54:55:61:d9:c8:50:15:
                    94:b6:5b:9a:67:7b:fb:a0:88:34:ab:b8:03:aa:aa:
                    bb:72:c7:f2:38:bd:c1:6f:59:0a:78:bb:d4:27:9e:
                    de:38:6b:88:9b:45:9c:cb:1e:e5:63:bd:f7:84:44:
                    06:ab:c0:60:db:91:5c:0e:66:48:5b:9c:77:55:db:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:4F:C4:9B:CC:CA:9C:FC:C8:A5:9E:BD:D6:18:1D:74:BD:95:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/46a07bce-d159-3940-9c4e-a7bf314f74a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:cf:0d:96:6c:b0:80:40:ac:1e:32:f5:48:9f:ef:9f:f7:9e:
         ff:fd:df:40:3a:2e:b5:8c:4f:91:98:77:9f:6c:dc:ff:10:7d:
         ab:ae:f9:22:e7:be:26:e8:3d:37:84:41:fa:e2:59:c7:b7:fd:
         8c:12:ef:a3:a8:78:cb:89:cf:e9:60:3a:6b:13:2b:c1:6b:23:
         46:7b:88:c6:3c:1a:8a:60:31:aa:ff:b0:21:4b:e3:83:f7:01:
         7a:b4:f8:01:a0:bf:05:6c:31:be:13:0d:52:9b:92:ea:21:32:
         6d:17:f2:c4:0d:40:ab:9a:76:c2:67:40:b3:b1:ed:8e:af:e8:
         19:13:b2:d8:e5:c9:5a:08:ef:4f:b4:52:0f:27:aa:17:9f:a9:
         dd:a2:7d:24:35:6c:8f:37:28:8e:db:c8:b5:72:a3:6d:01:92:
         75:be:2f:a1:6a:b3:9f:a6:6a:ff:3f:bf:5e:86:1a:bb:1b:8e:
         ed:c4:e1:ec:d4:1e:53:0a:ae:4e:52:b6:bd:ef:44:04:93:32:
         32:ab:69:19:77:9b:06:c2:c5:ef:8b:2d:ca:62:68:c6:d9:47:
         b7:bf:5f:9e:53:1a:e9:53:f8:93:d4:2c:e6:e7:2e:77:f4:9f:
         27:ed:de:99:32:a9:92:18:5d:22:88:5c:68:f9:95:dd:c3:75:
         be:01:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:47 2025 by rpki-client