Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
File:                     3029e186-49b7-387b-8d82-eafc4d11072d.roa (raw, json)
Hash identifier:          sXiXlzHxUCHWSqTzcV3SQ6sCY0eoYAeQ6Ksfddntfp4=
Subject key identifier:   AC:2A:3C:00:37:2C:9D:E6:C4:6C:A6:A3:4F:2F:34:E8:7D:14:D3:37
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F43285848AC60D27E74BA88840FAA2168
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     23535
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d2:7e:74:ba:88:84:0f:aa:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=e77cc92e-15cf-4355-8ef3-e25e25d01f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:ac:0e:ca:1b:f0:46:3a:ae:9a:fe:ca:9a:
                    3b:db:d8:1d:27:a6:da:e2:b3:53:ec:41:fc:84:f8:
                    7a:79:95:b4:f4:f5:44:82:f9:5e:4e:3e:f4:7a:0a:
                    8e:cf:c5:5f:f0:02:58:5b:d4:49:dc:e7:79:13:54:
                    98:1f:56:a8:96:fc:c4:fa:31:8a:47:73:f1:cc:97:
                    63:58:79:7f:76:22:a2:d3:53:5b:53:23:c7:1b:67:
                    30:4c:16:b8:59:01:7a:16:2d:11:a3:21:34:92:03:
                    1c:2f:2e:c0:66:d4:18:27:72:5d:88:93:bf:00:1e:
                    1f:8e:e4:c1:0d:d5:4b:42:89:a8:dd:d8:0d:0a:88:
                    2e:d7:c2:a0:30:fb:a7:5f:17:0b:fa:0b:a7:58:11:
                    6f:ae:08:0b:4d:ab:28:95:89:b2:10:6e:54:14:de:
                    94:ee:6d:11:82:ca:cd:46:20:93:43:72:69:d9:00:
                    95:fd:c7:90:be:6b:e0:67:26:4e:08:8a:5a:a8:69:
                    e9:c0:2d:62:97:c2:e3:34:b2:66:9c:fa:20:54:3b:
                    7e:19:a3:19:ec:b8:02:5a:5c:08:bb:db:c7:af:26:
                    c9:a3:cd:dc:f4:94:1b:24:21:5d:79:4c:00:91:a9:
                    4f:e2:0d:33:10:40:cf:e0:e0:50:58:f3:38:ad:24:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2A:3C:00:37:2C:9D:E6:C4:6C:A6:A3:4F:2F:34:E8:7D:14:D3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:9f:55:9c:52:48:f9:5c:e4:04:c9:d4:22:08:4b:21:e8:
         10:3e:04:dd:32:a8:a6:e5:b6:d0:b6:c8:21:7d:94:91:23:93:
         e6:13:fe:58:f0:5d:2a:d3:e3:4b:2c:a7:45:47:37:54:2e:db:
         03:ed:91:d4:71:5a:9d:88:02:fd:e0:0d:6e:74:fc:ce:18:27:
         4f:76:52:05:de:79:d9:40:df:35:49:46:d7:7c:bc:b0:b5:5c:
         33:54:d1:2d:27:a6:ac:26:46:1d:a8:b8:38:9c:03:64:9e:ed:
         1a:15:2a:5b:37:a3:09:82:28:77:7c:71:66:2a:38:f1:ee:8e:
         d6:3d:4c:ae:53:34:8e:9d:c6:a4:62:2f:1d:78:a3:9e:30:a5:
         d0:46:df:8f:83:0d:36:94:29:91:eb:b1:ae:6e:1f:29:dc:27:
         c4:1e:b9:ff:62:fe:96:25:d7:1d:d1:85:18:a4:4d:92:73:1b:
         06:7c:1a:12:c2:b0:84:a1:a7:fd:5b:11:fe:7f:25:ca:3c:05:
         92:89:fc:ad:1e:e8:d8:22:5a:88:a1:c9:3a:2a:54:e3:e8:e7:
         a8:ee:b8:97:eb:21:4d:c0:1c:47:a2:86:ad:85:d5:ca:b3:5b:
         12:4a:e2:e4:a2:a0:59:7e:d5:b8:e6:8c:3e:6a:39:b2:ea:15:
         0f:6f:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:30 2025 by rpki-client