Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
File:                     625ea671-b6e5-3995-8461-56bd63465e40.roa (raw, json)
Hash identifier:          EPPYwEW4SFauWJItpeg6OAMDYIlqH5IrHYr2mcs6hNQ=
Subject key identifier:   23:99:01:9A:7A:6F:12:94:A2:D2:E0:30:3A:DD:05:D6:FE:9D:10:DA
Certificate issuer:       /CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
Certificate serial:       010D0C9F432858496CE44CBBE37E42726A399230
Authority key identifier: 3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     395485
IP address blocks:        198.179.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4c:bb:e3:7e:42:72:6a:39:92:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=3443bc3d-23e4-4770-9790-4a9a287928c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:91:13:c5:a9:b9:59:0a:96:d7:f2:e1:10:
                    57:55:f2:1b:40:ad:a8:ce:fe:24:34:7d:76:26:e0:
                    cf:49:1a:3d:58:ce:82:49:a1:3f:71:54:a9:d7:e0:
                    c3:45:67:bc:aa:79:86:15:bc:07:3d:d8:62:ed:dc:
                    a5:65:14:cb:fa:2e:12:3e:6a:2e:19:d2:9b:7b:6b:
                    3f:22:b0:85:69:12:2f:5c:57:3a:42:92:ee:71:24:
                    33:80:14:c6:02:8a:a8:fd:fd:03:39:12:1d:60:0e:
                    13:80:54:7f:e6:07:0c:fb:00:70:3b:c0:38:27:6c:
                    22:79:f1:04:63:d1:cc:ab:a7:29:e8:00:8a:ae:22:
                    b6:20:61:c0:c8:5f:6d:2e:27:e5:9d:63:91:e3:fd:
                    72:1b:ef:73:9e:9d:73:2f:f0:4c:6a:57:31:20:ed:
                    01:b9:77:a2:9b:0e:f2:92:fe:16:6d:94:4f:be:ac:
                    90:ea:aa:9a:7b:8c:e0:a5:5a:b7:4a:8e:93:6b:d5:
                    55:9c:f3:cf:85:a5:78:d7:13:d9:57:69:7d:8d:4a:
                    49:18:20:87:d8:53:42:50:d5:39:96:25:b0:b7:a5:
                    7d:2b:f8:8a:f3:fa:05:b6:7b:29:52:30:e4:80:a6:
                    b2:3e:41:33:2e:de:21:be:86:77:86:11:f4:2a:34:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:01:9A:7A:6F:12:94:A2:D2:E0:30:3A:DD:05:D6:FE:9D:10:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/625ea671-b6e5-3995-8461-56bd63465e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:d8:79:dc:d4:92:4d:76:70:3a:0a:07:e7:b9:a9:d9:b7:
         cd:6e:89:22:2a:59:ed:bb:9e:fa:55:90:a5:2f:15:04:fc:83:
         f1:98:90:2f:73:b4:34:55:94:1a:d4:48:06:9c:d5:d4:2a:db:
         cb:57:97:54:57:c9:f6:f0:3d:9e:9b:4b:7d:39:13:70:bc:3f:
         f7:b6:bd:50:eb:a8:5f:f3:98:a4:d1:37:24:4b:de:d0:30:41:
         97:8d:78:bf:83:6b:7d:9c:50:61:d5:91:96:aa:b4:a3:3c:6d:
         5b:b6:6e:72:4c:6c:24:cd:53:ff:70:59:dc:2c:98:a5:f3:b7:
         51:3d:af:d2:cf:bf:ad:f9:52:7f:66:9b:bb:b2:7b:11:62:e7:
         b4:a6:0a:fb:52:66:63:2e:d6:fe:08:aa:93:f6:c6:9c:12:bc:
         e6:a5:bd:a8:e4:c4:cd:97:ba:8d:60:32:08:53:df:54:f9:40:
         35:a7:13:66:35:25:08:bd:ae:8f:46:21:97:39:0f:ab:21:fe:
         97:f1:65:95:33:c7:34:58:67:e8:b1:0b:fe:e7:fe:9a:94:95:
         58:ae:4f:e1:8c:b3:a4:8e:d0:38:27:65:a6:a6:76:c7:7f:b3:
         0d:56:fe:c3:70:94:0e:5f:50:60:ff:96:81:af:bb:7e:5f:6b:
         c2:14:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:24:56 2025 by rpki-client