Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f39ca12c-838c-35d2-99e5-d14adfc632b6.roa
File:                     f39ca12c-838c-35d2-99e5-d14adfc632b6.roa (raw, json)
Hash identifier:          npozP3El1APoqd+SYsdQFE+dR6xg6IHb34Us4SOeU98=
Subject key identifier:   73:ED:01:E7:65:C5:37:17:EE:A9:7E:18:D8:9F:FF:C9:34:8F:5D:40
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E179EACD8B978B7EB32F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f39ca12c-838c-35d2-99e5-d14adfc632b6.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        198.41.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:79:ea:cd:8b:97:8b:7e:b3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=a07bbf20-ece9-44ed-908d-61af55906ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:8d:01:6a:84:94:9c:78:bf:95:d4:60:6b:
                    60:f2:43:af:47:ff:5e:d4:04:2d:08:94:82:a6:32:
                    8b:8b:05:c3:29:9c:26:04:ef:04:a6:b7:6a:df:96:
                    7b:0a:df:11:86:b3:3e:50:ce:fd:39:6a:04:1f:38:
                    8e:86:f5:6a:7a:dc:24:9c:5c:d6:72:9e:9e:29:31:
                    7e:e0:04:97:fa:76:04:9f:53:fd:10:a8:d3:af:57:
                    40:ef:a6:4b:4b:e0:c3:f5:0d:11:8f:8d:a5:ae:d5:
                    47:e0:f3:86:88:b1:bc:89:4d:b8:e6:e3:64:62:d1:
                    20:67:7b:ec:c0:4c:5b:a1:b6:8a:7a:36:41:0d:d6:
                    30:ad:d0:4b:be:f4:5b:45:14:21:8e:c2:c7:3c:e7:
                    0a:53:a8:aa:7a:fd:29:4b:cd:e4:3a:13:b9:23:25:
                    b2:d9:9b:a2:60:af:a6:03:b5:4c:bc:cc:4e:97:c0:
                    fb:06:9d:c2:d9:3e:23:cf:fb:0b:af:d3:27:80:3d:
                    56:ec:b5:b6:d3:e8:a2:c2:3e:4c:85:7a:5d:bc:72:
                    11:21:fc:9d:c3:59:a4:6f:cf:58:34:87:e7:af:3c:
                    88:a7:59:a1:d1:28:a5:7a:38:02:27:39:cd:db:03:
                    df:30:4b:78:94:19:8d:d4:fc:e6:f4:29:b0:bc:7a:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:01:E7:65:C5:37:17:EE:A9:7E:18:D8:9F:FF:C9:34:8F:5D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f39ca12c-838c-35d2-99e5-d14adfc632b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:2c:cb:8c:a7:ef:bc:58:3c:8f:f8:fb:57:bf:9e:a5:63:
         71:c9:0f:a0:eb:b8:ea:8d:de:d6:d2:4b:82:a4:8e:75:da:5e:
         d7:50:07:13:2d:be:f0:72:e0:31:0a:41:c8:f0:85:f4:b5:71:
         91:f7:52:c0:6c:47:ce:22:20:ed:ef:7b:f2:8b:7d:e4:20:6b:
         54:63:e5:78:cf:bd:66:14:1e:ae:d5:7d:8c:4b:47:15:0f:2c:
         4f:ba:fd:48:41:0e:34:d3:2b:0e:bb:17:8d:e5:29:72:29:16:
         91:99:98:39:56:fb:0b:c3:12:78:9c:37:cb:28:38:6c:d2:8d:
         77:95:fb:a0:a1:43:ce:76:57:26:ec:9f:79:98:85:6c:2a:69:
         0e:0a:ec:b0:d3:cf:fe:1c:e6:99:7f:f8:49:2c:77:c1:4b:c3:
         48:49:69:03:48:27:7b:98:88:31:65:d1:21:7f:bb:77:43:df:
         89:25:d5:3e:19:a3:89:6c:4e:b8:3f:2d:45:48:c9:ba:ab:58:
         01:05:37:90:62:6f:4b:0c:a1:30:88:05:9f:fc:d8:2d:29:6c:
         f2:bd:29:60:ee:74:ad:dc:fa:cb:ae:23:e9:5e:b3:c1:ae:e0:
         1a:9c:bd:e2:00:c1:f8:96:f2:36:90:92:30:f0:53:62:e9:8d:
         1d:ec:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:45 2025 by rpki-client