Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
File:                     c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (raw, json)
Hash identifier:          jGsE5EJxM2XCvFSJDOLX6AWsKrBoJ6nwoeRE4kfZ+xM=
Subject key identifier:   8E:CE:F3:9F:08:85:AF:B3:2C:9E:B4:8C:36:09:5B:4C:7A:EE:45:BE
Certificate issuer:       /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Certificate serial:       010D0C9F4328584964843DD2509BF0CC9F8C3E80
Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        198.160.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3d:d2:50:9b:f0:cc:9f:8c:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=150e0aba-3729-4968-8a0c-8a2925d5347c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:c0:89:55:bc:a4:a7:a8:eb:5d:e9:6c:65:
                    eb:1b:c3:a6:de:82:9c:05:ca:9d:7c:35:33:c5:11:
                    81:db:9b:5b:6d:a0:8e:08:32:50:68:ed:0c:16:a5:
                    40:68:02:97:17:5b:d0:db:c0:8e:a9:ab:17:08:12:
                    2c:8b:b1:fc:cc:3d:62:b3:05:75:14:50:85:9a:65:
                    73:84:66:a9:9c:4a:91:72:6c:c0:8a:8c:41:62:15:
                    f8:3b:2f:40:01:d9:82:e1:8a:53:0c:51:28:6b:6d:
                    ab:41:c9:82:4e:4a:80:1c:b7:f2:a3:2f:22:0b:73:
                    15:91:dc:ee:95:c7:fd:9e:87:83:d6:1b:73:cb:0a:
                    d9:82:4c:e6:8e:cd:f7:43:72:3a:eb:86:bf:24:93:
                    5f:7d:b1:d2:17:ea:ea:b5:b9:a1:6a:c6:b7:58:1a:
                    7f:67:84:4d:25:5a:3a:52:53:1d:b3:38:63:00:c4:
                    09:6c:7e:d6:3f:48:b9:2b:e3:d8:79:9a:bf:97:a5:
                    2e:59:0c:d8:11:f7:79:c1:76:70:64:49:c5:6c:fc:
                    c5:fa:04:a1:cf:be:5f:c6:fd:b6:71:94:60:83:05:
                    a1:e6:3f:67:0e:a0:3b:db:a2:d7:91:48:45:c2:e4:
                    47:8b:e4:cb:b9:26:ad:1c:ab:a4:67:e7:7c:88:a6:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:F3:9F:08:85:AF:B3:2C:9E:B4:8C:36:09:5B:4C:7A:EE:45:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl

            X509v3 Authority Key Identifier:
                keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:ae:03:d2:78:f2:2f:b6:a0:cf:58:fd:9b:50:0f:58:09:
         63:6a:a5:35:e3:1e:61:9e:91:b5:3e:57:b0:3a:1b:9f:63:be:
         df:0a:00:66:0a:78:b4:29:d5:14:a6:61:f4:b9:b6:de:da:7e:
         25:38:64:98:1a:dd:1c:28:c6:d2:93:66:a4:72:2f:15:75:a0:
         c8:cc:9d:9b:59:51:e4:fc:0f:f3:99:a7:02:20:74:5c:3f:b1:
         78:df:21:35:fc:6e:dd:53:36:b7:75:1f:68:a0:e8:be:e1:df:
         9b:f0:b6:93:0d:7f:a7:43:5c:08:a6:39:43:4c:5f:14:fa:34:
         85:4c:a4:6a:0c:04:26:37:28:87:19:5e:79:3b:4b:ff:c0:28:
         ee:5f:a6:ba:ec:8b:e4:71:0e:08:f8:bd:77:9a:89:19:ae:59:
         5a:02:52:82:91:0c:8e:e8:de:f1:73:8f:8d:44:8e:20:24:f9:
         85:0d:21:65:4a:3f:44:a2:36:f5:bc:e4:8b:a9:44:f9:64:04:
         9d:ae:67:6e:17:1d:e0:77:25:3f:48:fb:6f:03:94:cf:57:f3:
         d9:dc:ea:9e:11:91:0a:c1:46:c8:b3:aa:bd:5c:f6:fa:20:53:
         bc:d4:cc:85:bf:dc:91:f0:cf:db:51:24:fa:26:28:2f:32:cf:
         b3:13:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:45 2025 by rpki-client