Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa
File:                     85a6094a-4a11-3c96-aa72-c52957b7b244.roa (raw, json)
Hash identifier:          VEqwUEsihRphyVl21GPSeDaoFgrczUEpMyGjOq7ypUg=
Subject key identifier:   B7:49:91:0B:20:D1:B5:58:BA:5C:78:6E:46:24:53:A8:D6:8A:D9:FB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC23AB056860F2B02EBA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     395747
IP address blocks:        198.41.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:23:ab:05:68:60:f2:b0:2e:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=53591f5b-be16-4f55-8f0b-b43e976baa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:8f:b1:5b:43:83:84:9a:76:79:9e:d9:04:
                    0a:3d:45:a7:5c:e9:df:15:d4:06:a4:5f:37:33:20:
                    38:d7:e2:64:07:a0:d5:e7:61:83:a3:73:b4:89:01:
                    21:f6:98:6b:e9:be:d1:0d:6e:14:54:75:19:a1:d8:
                    c7:3d:de:c0:ba:64:db:0b:30:35:4b:e2:a2:f3:0a:
                    33:a6:d9:8c:27:54:8d:68:a2:c0:38:d1:9c:f0:47:
                    5b:eb:5e:b9:d6:f3:b2:5c:97:90:49:e2:9e:72:e5:
                    d4:d7:74:d9:4e:18:40:ba:f2:32:0d:90:8b:c6:7a:
                    d1:cb:53:49:9d:9f:bf:75:bb:e8:34:29:b9:db:be:
                    d0:2d:fe:bc:bf:72:27:e4:56:41:38:29:93:63:23:
                    30:77:0a:4c:4b:bb:de:80:4c:87:4b:88:af:c8:55:
                    44:fe:4a:95:cc:aa:26:f5:6c:a4:c3:10:46:14:48:
                    12:c0:46:28:d1:1a:b7:6c:e8:28:2f:ee:84:c5:bb:
                    ea:77:d3:f7:d0:c0:c5:9a:8f:55:4b:74:51:74:05:
                    13:ed:2f:f5:a7:47:eb:dd:f3:bb:88:36:20:8e:08:
                    46:35:5d:26:1d:de:96:64:55:6a:cd:8b:ed:b3:35:
                    8e:05:92:06:b3:63:95:e9:d4:d8:d4:12:54:e4:74:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:91:0B:20:D1:B5:58:BA:5C:78:6E:46:24:53:A8:D6:8A:D9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85a6094a-4a11-3c96-aa72-c52957b7b244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:94:7f:85:43:02:a3:83:1b:db:37:5d:d3:36:3c:b2:cc:
         e3:ad:96:50:5d:e3:10:32:63:2d:80:a6:53:86:a9:74:c9:4f:
         61:07:a7:11:29:42:fd:fe:d7:4a:aa:1f:cc:cd:49:be:cb:60:
         09:dd:19:24:40:44:44:1f:16:cb:89:79:d3:1e:8f:6f:df:7c:
         fe:40:d2:48:24:61:d0:3d:0e:8f:bd:4c:09:8a:98:c4:91:2e:
         54:80:ae:53:31:1b:18:b4:9d:a9:c3:b7:f4:f6:58:db:5c:ab:
         94:51:97:6c:c5:2e:f3:53:78:6c:e3:c7:f1:bd:af:9b:6d:df:
         03:53:f3:da:01:26:1f:a3:ac:e0:6e:1c:04:79:17:82:70:7e:
         07:3d:8e:7d:c7:c6:7e:d3:43:01:3c:cd:25:2b:9b:24:c5:9d:
         24:2e:c4:f7:38:a3:57:b6:bc:4c:17:2a:6d:ed:cb:62:67:3f:
         26:e6:2e:12:b1:f5:a8:dc:a4:3e:61:9c:a6:01:73:65:42:89:
         11:10:88:5b:70:78:2d:28:88:cc:73:31:53:37:61:28:d2:eb:
         6f:cc:38:90:2f:4e:8c:bd:ff:c4:f3:ae:cd:4d:95:9a:78:dd:
         bd:e6:18:16:89:97:5b:75:46:d3:c8:89:9b:66:ba:47:ae:60:
         17:86:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:57 2025 by rpki-client