Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa
File:                     ed01e030-9725-3706-a152-4c292fbd1f32.roa (raw, json)
Hash identifier:          3NbfNKcA/+v2qmc/v8/4BIhw27jJ5N1fau4HmHIth80=
Subject key identifier:   80:E9:C9:37:03:E0:09:5E:B1:06:48:2A:D8:D9:CD:20:89:9A:AE:92
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F43285849D164E2E5871D686F9D8C61E0
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     64199
IP address blocks:        198.178.119.236/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:e2:e5:87:1d:68:6f:9d:8c:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e708269b-2446-4ccc-89f8-52700703f78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:5d:ea:47:c1:cc:e8:3c:14:2c:55:9d:19:
                    0b:ba:a1:54:be:f3:f4:33:5b:85:41:3a:85:c7:54:
                    06:80:dd:b8:a9:cd:71:f0:3c:f8:1e:8b:aa:3f:9d:
                    8a:53:e5:51:8b:24:ba:7d:d8:8a:df:a0:5f:39:9a:
                    9a:b2:6e:34:73:2c:8a:15:55:5f:e5:79:5b:42:25:
                    b3:fa:bc:f5:2e:ec:da:b5:f1:3d:80:db:af:ab:81:
                    e2:51:91:18:23:d4:64:20:66:56:ae:bf:d0:01:3a:
                    64:1f:fd:d3:ac:10:ea:06:d1:19:7e:60:a3:62:ec:
                    5c:29:92:a1:ca:a5:ca:f8:37:eb:26:cd:be:39:37:
                    49:12:fa:35:1f:3c:2d:76:be:db:43:06:7e:87:88:
                    bf:45:10:6c:3b:f0:d6:e4:7b:65:bf:49:9c:a4:27:
                    ed:d1:fe:cc:2b:69:26:04:a7:79:cf:cd:e8:ec:aa:
                    4c:ca:82:13:46:7b:96:81:90:ea:5d:e7:ee:06:ef:
                    4f:f9:44:01:77:ee:3a:35:8d:65:c8:d1:79:e5:64:
                    98:a2:9f:1b:b6:81:7c:bd:a2:58:d5:e7:60:ab:73:
                    79:5b:27:db:a4:53:0b:b6:5f:f1:1f:4f:53:66:f9:
                    2c:e3:44:53:dc:78:3b:02:02:b0:f1:66:12:77:31:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:C9:37:03:E0:09:5E:B1:06:48:2A:D8:D9:CD:20:89:9A:AE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.119.236/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:62:bb:65:6a:2b:1c:ce:80:e8:26:87:fb:fd:f1:0c:d7:ef:
         51:46:36:e8:a8:0c:fd:24:69:ce:9f:ef:c3:70:c4:ed:66:a3:
         0d:f5:28:40:aa:6b:34:f3:01:18:60:d8:4e:7b:8f:01:04:5c:
         06:f7:ab:c9:78:48:e9:20:21:40:b7:fd:d4:42:c3:94:4b:84:
         99:53:71:05:ee:f8:bc:9e:1c:45:20:d5:f7:79:71:73:46:b9:
         b1:ce:b5:09:53:ee:f5:84:ef:56:d9:8c:56:ec:32:ac:80:00:
         35:82:87:02:0f:e8:75:e3:e5:60:ec:e7:74:c0:96:61:6b:0a:
         7a:58:f6:25:1c:ca:41:20:07:b9:d1:f2:46:bb:ca:c0:93:02:
         56:e7:87:07:3c:31:a2:a5:a4:c2:39:8e:73:fa:7c:e4:73:e4:
         9b:47:d3:18:2e:3a:9a:5b:c7:76:60:65:36:cb:38:b1:d3:e1:
         f6:c4:04:d0:7a:99:e2:98:c5:f1:4f:c9:c2:c0:c5:05:16:35:
         30:bc:d8:36:09:93:79:51:d8:94:35:94:4f:a8:75:ab:6c:0f:
         39:9f:9d:2a:65:03:91:e2:37:f5:1c:ef:40:c6:e9:6b:67:3b:
         eb:3c:9c:9b:d7:94:86:8d:3f:1a:48:72:01:8e:af:de:3a:81:
         8a:30:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:49:49 2025 by rpki-client