Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
File:                     557b0708-0206-328f-92e4-7aa700401b12.roa (raw, json)
Hash identifier:          Iv5AhhTKmexTnjdzdyfsY13tL5OmxqDh6iKXi5e+0ik=
Subject key identifier:   92:0D:25:B6:0F:21:14:C5:91:E1:44:71:A6:46:AE:1A:77:55:A0:2E
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584819CFCA0D054B7025539FA680
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     2495
IP address blocks:        198.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ca:0d:05:4b:70:25:53:9f:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=cd8e7f3b-0891-402a-aa1f-340f0a2190e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:7c:fb:4b:19:b4:0a:68:3a:31:c0:4c:0c:
                    f0:54:44:30:1d:45:5e:35:bb:1d:a6:9f:6a:d5:d5:
                    67:2b:3b:62:a0:e8:7b:12:f3:30:1e:20:c8:0e:c9:
                    83:43:db:e0:8a:c3:30:05:e0:8f:86:7d:5c:cd:79:
                    f5:ab:3d:85:dc:47:5b:35:06:2b:d7:5c:48:78:30:
                    5b:a8:14:05:b9:1a:81:89:1b:2d:5d:d7:0f:e3:d5:
                    04:d8:3a:14:91:95:f0:62:59:82:20:70:15:4d:c6:
                    2d:10:29:66:62:1d:30:aa:60:b9:ee:c2:e2:e6:fa:
                    d3:75:43:93:51:94:f2:2c:f7:ca:7a:06:0d:8b:d5:
                    88:51:21:f1:a4:f8:67:3d:31:73:81:51:22:68:0e:
                    ef:3e:45:63:f1:51:83:63:cf:07:84:aa:2e:08:d4:
                    35:cf:59:27:53:01:dc:68:63:b7:39:25:0e:10:2a:
                    7a:64:96:78:1e:dc:da:33:3f:d2:52:44:b8:62:07:
                    f0:c7:52:88:d1:e5:26:99:cc:99:78:15:1c:d2:a4:
                    d5:02:98:29:6c:27:8c:32:65:66:6b:0f:74:c6:b8:
                    ca:54:b3:69:9a:47:d4:15:3c:30:53:19:64:fe:89:
                    ff:ff:59:b2:e8:33:3a:dd:ec:17:d3:d5:af:4d:07:
                    25:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:25:B6:0F:21:14:C5:91:E1:44:71:A6:46:AE:1A:77:55:A0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:8e:ea:70:3b:c4:de:da:b8:9e:d1:80:b1:c6:92:da:60:
         f4:98:b9:7c:46:01:30:59:26:da:09:d1:34:c9:d0:ea:73:cb:
         6f:50:38:30:73:45:ed:4f:5c:61:12:41:3f:d4:7b:ab:ee:50:
         ae:d4:3c:04:1d:16:7e:b3:8b:4a:e6:bb:50:56:f7:cf:d0:2b:
         d9:73:5f:12:f5:e5:af:69:9e:0f:96:f2:95:e9:15:2f:79:f4:
         39:b4:e0:6a:35:e2:9f:2c:40:81:34:3f:4e:46:d7:b6:3e:6f:
         d6:6c:e8:60:f7:9f:d7:a4:4b:c1:88:b2:88:25:59:16:0b:67:
         7c:a6:aa:a4:41:aa:2e:bc:a6:89:c1:e6:ab:17:78:9a:34:ca:
         7e:91:6c:9a:b2:54:35:ec:b9:01:be:5b:cd:24:9e:60:41:20:
         f2:bd:33:7a:52:71:84:ef:a6:ee:f0:f2:a0:a2:ad:2e:4f:f3:
         ac:12:a5:c4:33:19:1c:60:9c:85:9c:cc:84:cf:84:b2:5b:cd:
         ce:c2:97:91:b4:6d:53:a3:ef:2e:89:a3:92:a8:13:65:38:9f:
         5b:92:ba:b0:73:ab:6a:2d:5e:d2:88:40:a8:44:92:bd:a1:63:
         42:1c:d2:df:0a:25:cb:7d:5e:35:7e:03:c4:03:ab:5d:c6:60:
         36:18:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:33 2025 by rpki-client