Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
File:                     9a647916-d419-3dbb-868d-b7491eb1551d.roa (raw, json)
Hash identifier:          5QlX4ft138X91lsnmVz/1YpSbyNk2xZtau44z598dXc=
Subject key identifier:   78:9F:32:D9:F5:EA:4B:2E:FE:2D:DC:7E:CE:B5:30:AC:AE:B6:F1:75
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F43285848BFEBA38438BAC88076451E00
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     29848
IP address blocks:        199.5.197.0/24 maxlen: 24
                          199.5.198.0/23 maxlen: 24
                          199.5.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a3:84:38:ba:c8:80:76:45:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=8f24d49e-7b22-4329-86d7-985b889fdb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:a5:1e:58:51:11:f5:4d:cd:23:be:49:f4:
                    d1:4c:cc:3e:6d:6a:80:89:f2:64:80:f6:a5:20:32:
                    e6:e4:6b:cc:0d:30:eb:a1:ae:32:4b:02:d3:79:74:
                    a1:02:53:38:a0:52:4d:1a:1a:72:79:fb:e4:ab:75:
                    a5:17:0d:95:01:8e:db:70:b1:d6:ca:9c:28:9d:8e:
                    14:6d:60:c1:b7:ca:18:18:02:e5:4f:50:c2:6b:c0:
                    79:af:56:59:7a:f9:11:12:9f:95:8e:40:ed:a0:a2:
                    0f:f9:5a:69:d6:a9:22:eb:56:1c:39:89:96:fb:ec:
                    94:1a:61:5e:cf:06:51:18:31:eb:19:e8:31:29:f2:
                    b8:c8:e6:f9:6e:51:9f:23:37:d2:56:79:b2:8c:40:
                    48:3b:aa:d3:2a:ca:5c:ea:8c:69:e2:01:62:36:9d:
                    78:55:11:be:0f:21:92:f9:36:08:1a:00:16:56:9f:
                    79:d0:13:f0:8e:68:ff:97:ce:01:44:0e:cc:a1:56:
                    cd:30:b3:38:c9:b0:7a:14:8a:f9:0f:c0:f4:97:80:
                    f5:6f:c3:06:7a:aa:23:ff:f3:74:f1:35:ac:ae:3d:
                    7f:ce:cf:d0:68:de:ef:30:34:ff:7f:61:44:77:ef:
                    07:04:36:6d:67:c5:9b:c8:fe:dc:04:5e:83:43:1d:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:32:D9:F5:EA:4B:2E:FE:2D:DC:7E:CE:B5:30:AC:AE:B6:F1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.197.0-199.5.200.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:26:e2:76:75:67:ae:e3:b9:13:67:ff:9b:c0:47:8e:bf:
         35:41:08:5d:b4:d3:42:59:a7:b6:81:f1:ba:bb:02:68:2f:79:
         36:6d:ff:26:6b:f0:77:21:13:07:0d:d7:72:e7:0b:f7:b4:f9:
         31:d6:b7:d2:b8:18:d3:00:82:77:ac:fa:b5:e7:e2:37:05:21:
         64:5b:57:36:be:50:5b:6b:d8:ba:69:d9:b5:b9:87:ee:87:40:
         85:20:c9:8b:d8:d8:ae:da:0b:e3:a5:d3:2b:ab:24:9b:e8:0c:
         98:e6:6c:9c:ee:65:c2:5d:43:d4:eb:04:3a:29:49:1a:b9:05:
         e6:d8:ef:94:f1:bc:c7:ba:8b:52:31:3f:ac:dc:44:b4:3a:49:
         71:f7:9d:d1:06:a3:31:28:84:de:f3:8b:0d:b8:f7:10:b1:10:
         70:c7:48:27:81:ff:47:bc:f8:c7:df:c3:12:84:04:8c:b1:8a:
         fc:05:fb:5a:e3:e5:23:9e:61:5b:c7:20:51:c3:2b:0a:01:53:
         cc:a7:c7:c0:5c:8f:93:2e:67:4b:06:41:33:56:77:7c:af:b4:
         0b:1b:c7:2d:18:76:89:b1:a3:d1:96:6e:65:1b:a0:17:7d:c1:
         d8:2b:16:6a:97:d1:59:b7:d5:41:f1:0e:f3:49:39:6c:39:32:
         2f:b3:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:03 2025 by rpki-client