Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/4d309e92-7a09-39b8-b58c-30347257e9c2.roa
File:                     4d309e92-7a09-39b8-b58c-30347257e9c2.roa (raw, json)
Hash identifier:          3OPesbbEEN/1UXFjr4tibNo++XoyxmRGWVDW92lLUec=
Subject key identifier:   0C:09:30:9A:AE:9A:B0:36:4B:3F:35:16:78:E6:6D:22:B0:CB:7E:8C
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F43285848EF615B5C367B8AD507435B00
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/4d309e92-7a09-39b8-b58c-30347257e9c2.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46648
IP address blocks:        198.217.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5b:5c:36:7b:8a:d5:07:43:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7de0b178-08e0-40cb-9187-57bd08d9fec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:39:ad:a7:61:07:72:f9:53:60:b8:5d:82:
                    be:da:01:d9:0f:1a:8a:b5:4e:f2:21:99:c7:42:f3:
                    ba:b1:f8:59:83:af:c5:5b:af:e5:09:6f:29:9f:3c:
                    03:6a:09:1a:58:62:16:0f:c6:6d:7c:06:d9:9e:b3:
                    46:f4:95:58:7a:33:75:6f:32:3e:bd:36:6f:19:c6:
                    d8:c7:62:b7:b0:bd:3c:77:9c:90:60:74:41:cd:62:
                    14:f5:eb:07:fb:16:ed:10:c3:53:80:87:91:09:fc:
                    43:f1:49:07:08:72:5a:b7:ec:4b:65:f9:91:11:e5:
                    bd:c8:07:32:a0:bf:95:ae:84:bb:b7:04:c0:bd:8e:
                    bc:c8:d8:a0:2a:c4:a6:ae:4a:2f:3c:f5:e2:b8:cb:
                    fc:76:34:56:5d:46:89:95:d1:cd:f1:c3:10:7c:34:
                    27:fd:05:88:14:9d:90:9a:fb:eb:b4:a8:be:a5:e7:
                    b4:ff:b5:40:d5:91:52:17:3d:53:99:6f:f4:c1:65:
                    f3:09:4d:83:3c:52:3f:3b:20:0c:03:e6:f9:71:25:
                    4c:77:76:45:d4:2f:8f:12:a1:ee:6d:81:9a:1a:0f:
                    68:fc:5f:14:47:fd:51:fb:81:85:ec:8b:5e:62:a1:
                    f1:3c:29:fd:07:1a:e8:8d:09:a7:2a:6f:9d:f5:89:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:09:30:9A:AE:9A:B0:36:4B:3F:35:16:78:E6:6D:22:B0:CB:7E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/4d309e92-7a09-39b8-b58c-30347257e9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:65:53:29:ce:0d:a5:dd:5e:b0:9e:4e:32:e4:48:e7:f1:
         f8:a1:32:ec:ce:35:74:0b:94:dc:fe:4f:65:f6:24:d1:8c:de:
         46:40:b9:d8:f8:91:29:42:9b:55:dc:10:18:ed:53:40:17:cc:
         bb:3d:0f:c4:5b:41:27:8d:1e:63:f7:5e:68:9d:59:5d:63:23:
         7b:04:67:44:84:26:c8:14:1c:18:6d:8d:89:0e:d3:f7:33:d9:
         8e:ad:06:6f:ee:b0:ce:c2:00:a3:76:74:f9:ae:23:b9:8e:48:
         27:45:43:f7:4f:58:33:94:5c:23:3d:76:d9:d0:ee:cb:b8:f3:
         82:8c:5f:45:eb:e1:2e:85:e9:1b:70:06:f4:b4:67:b4:d6:50:
         44:01:06:ee:8f:29:47:ce:37:d5:89:4e:2e:1a:35:df:de:d0:
         9b:10:51:03:55:42:be:6b:b1:c3:4f:39:98:47:a8:32:5a:d3:
         db:de:7a:d9:07:d6:88:65:b6:c8:9f:26:da:37:1b:6d:5a:04:
         8c:0a:e5:42:d9:4a:75:3a:00:d7:b5:73:33:44:91:6e:28:b9:
         28:7e:af:93:0d:65:7c:c2:4c:25:c1:9c:53:ec:64:3a:fc:a6:
         36:c6:63:f4:bb:88:75:17:18:46:cc:ba:21:bf:7d:a5:36:8b:
         e4:20:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:03 2025 by rpki-client