Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa
File:                     5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa (raw, json)
Hash identifier:          vdJWDb33SohITjKu8LmxgHAX4b1Uag//Gdkn4Yev+lk=
Subject key identifier:   0E:99:78:1E:14:03:22:AE:93:31:5F:ED:48:8F:F3:E3:25:04:66:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5816C57A860DC7A9D1AD400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        198.45.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:6c:57:a8:60:dc:7a:9d:1a:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0b557cf6-987f-42a0-926a-af411685a997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:91:53:02:46:8c:9c:de:4d:b8:04:84:b5:
                    a9:b7:dc:f5:44:d2:c6:2a:96:7c:77:ab:c9:3e:dc:
                    9b:01:1e:22:71:9b:84:4c:3d:73:35:67:33:dd:52:
                    d3:96:10:9d:bf:0e:54:34:c3:50:b6:1a:9b:f1:28:
                    73:e2:5e:3d:09:bb:e8:07:fb:2a:04:23:0d:10:89:
                    99:d3:ee:62:32:5c:36:64:49:e1:39:e3:07:b3:b3:
                    e6:d2:00:2e:27:cb:e3:4a:49:e6:32:8b:e8:c1:30:
                    a0:5f:64:55:89:77:b1:39:08:9f:e3:da:40:13:b0:
                    69:bf:59:4d:e5:42:53:50:74:ac:f7:b8:92:4f:cb:
                    f8:83:a8:5e:73:1e:c5:01:64:e0:78:d6:e3:58:59:
                    31:5b:a9:a1:09:74:1d:28:ec:00:ef:5d:0c:f8:78:
                    d3:ee:fa:34:16:47:9a:fd:48:a8:6a:27:d0:f8:59:
                    00:36:ab:0d:4e:b5:9c:d7:2e:90:2a:4b:6f:42:5e:
                    34:7f:fd:b9:cc:48:a2:5d:f0:bc:b9:98:e4:89:d5:
                    fd:f4:2c:ef:f4:14:f1:73:7e:47:e8:dd:50:9d:3e:
                    49:9c:75:d2:10:78:6e:08:1f:35:b4:7a:9d:ba:e0:
                    b0:09:46:15:70:99:44:09:71:0f:fe:57:9f:19:f1:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:78:1E:14:03:22:AE:93:31:5F:ED:48:8F:F3:E3:25:04:66:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e6d24a8-b1ec-38c1-b904-bf8562b8bf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4e:4c:87:e2:d8:d1:f7:47:95:bf:a8:91:83:d9:f9:05:a9:
         e7:65:49:c9:da:0a:11:0e:63:a7:0c:b8:4a:cb:19:41:47:bb:
         d3:ef:e6:fe:89:2e:9b:9d:b3:58:69:e4:ed:b0:79:75:ad:d2:
         6b:30:72:72:78:13:83:c7:8a:8b:a6:0a:48:c8:e4:85:7e:71:
         a2:3f:02:a6:ab:cc:84:a0:a4:54:ec:58:19:cf:60:b2:ce:1d:
         db:31:9f:18:0c:02:93:d6:71:30:41:85:23:bf:c7:d0:04:d1:
         67:30:3c:39:9a:45:36:63:e7:65:f6:67:db:7b:7b:c5:a8:1e:
         86:85:85:24:34:11:25:e4:62:d5:28:c3:f3:8a:2a:6c:8f:6b:
         6d:07:e4:86:d9:96:ab:0c:ab:4c:11:73:00:96:0c:e4:7d:50:
         b2:1a:d2:78:c2:38:65:25:94:22:a4:6a:15:ef:cb:c7:37:ec:
         94:32:d3:20:4e:5d:a5:20:26:7d:8b:a9:46:60:f2:7b:0d:38:
         75:e8:f0:ec:b0:17:39:5e:81:d0:80:75:f7:9c:d0:4f:9f:4b:
         e9:01:d4:f2:96:14:d4:90:24:1d:6d:d6:c3:9c:9f:35:2d:fc:
         8a:ad:2f:e1:ed:6d:b9:95:67:ce:ea:69:29:2c:ba:f2:89:37:
         52:a9:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:26 2025 by rpki-client