Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa
File:                     bf27e851-a778-308c-b44c-dc1bb3990a3a.roa (raw, json)
Hash identifier:          iZOxBSgn39SbISESr2i/oKSH95C1E7uSf0cZcskOgTA=
Subject key identifier:   B7:26:E8:F0:96:16:F6:A0:40:C7:44:6E:57:03:86:74:24:67:10:04
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F43285848CECA56DFA6F7B2B93FCE5FC0
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa
Signing time:             Fri 07 Feb 2025 21:51:06 +0000
ROA not before:           Fri 07 Feb 2025 21:51:06 +0000
ROA not after:            Thu 08 May 2025 20:51:06 +0000
asID:                     393806
IP address blocks:        198.184.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:ca:56:df:a6:f7:b2:b9:3f:ce:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Feb  7 21:51:06 2025 GMT
            Not After : May  8 20:51:06 2025 GMT
        Subject: CN=89dc2bbb-017b-445c-8016-7df1cd2b310c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:07:68:fe:bc:0b:08:cc:1c:d8:a0:c3:16:
                    de:f3:13:75:a0:2d:b5:44:6e:55:2b:3e:c1:0b:6b:
                    d2:68:58:d0:d3:14:fa:4d:4e:e2:c5:ee:59:29:1d:
                    7f:85:2c:29:c1:0d:4f:44:62:80:f7:53:10:0b:51:
                    8a:39:4b:b5:04:fd:6e:8b:76:a4:61:77:c7:28:16:
                    6a:0e:3c:18:40:5f:69:05:11:11:e7:b5:83:7f:fe:
                    bf:3f:78:4f:c2:5f:99:8d:8c:07:4b:5a:43:d5:79:
                    90:6b:2b:b0:f7:da:e8:fd:2a:08:d8:c3:12:6b:1e:
                    4f:fc:91:e4:f8:4d:50:bd:20:ec:be:9d:9f:96:4e:
                    d3:9c:58:26:c8:1d:db:0f:cf:c1:53:0f:b0:ee:1f:
                    12:4d:20:98:68:e1:a1:cc:d8:86:a4:25:bf:47:55:
                    1b:f5:20:4c:ab:ea:62:dd:5c:5a:f5:ad:86:04:75:
                    86:e5:8e:b6:25:8f:81:97:7d:98:3b:88:51:3f:15:
                    d6:2d:d2:6d:c6:32:46:41:5a:39:42:0a:fb:cc:91:
                    d8:90:71:81:e3:37:dd:68:f5:57:7c:c3:4e:76:ec:
                    69:c7:a5:ae:c7:b3:64:71:a5:be:bd:55:39:a8:6e:
                    6c:10:2a:e2:1d:e2:7d:c2:bc:68:a7:a1:83:e2:b0:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:E8:F0:96:16:F6:A0:40:C7:44:6E:57:03:86:74:24:67:10:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/bf27e851-a778-308c-b44c-dc1bb3990a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:a7:38:7e:74:be:b4:90:06:63:61:7b:53:4d:48:a7:81:
         2d:cf:3b:c4:c2:e6:57:a0:42:ca:58:84:9d:c2:0b:72:f7:76:
         7a:2e:cc:df:33:23:e1:e3:c9:f9:03:2d:ec:a7:da:d4:96:72:
         a5:93:7c:31:d6:6f:cb:8f:c6:8c:74:61:72:d0:35:8a:a0:b9:
         b5:dc:5f:36:9d:c0:de:01:af:80:d9:9a:e6:3d:54:cb:ee:23:
         13:82:b4:1c:a8:0a:26:b7:4c:2e:03:89:37:29:6b:62:1c:3f:
         6c:2e:ae:e3:d3:e5:73:f2:6f:17:61:85:ac:15:0a:23:75:db:
         fb:ec:0c:79:51:a2:80:41:4c:1e:28:c4:06:37:dd:df:f6:1d:
         dc:55:79:8f:9c:aa:b3:cc:68:51:d0:e5:6e:4a:82:34:7e:b9:
         a8:67:f3:b8:87:56:8d:e9:4e:39:12:b3:0e:62:56:68:03:d1:
         1e:e7:03:eb:82:c0:05:48:8e:40:a2:1e:02:8d:c1:57:c8:1b:
         66:47:e2:e5:32:a6:91:d4:d6:b3:79:84:36:2d:3e:32:04:6d:
         0f:97:9e:cc:75:22:e7:52:c4:d7:bb:64:09:26:a1:4a:75:ae:
         b7:69:7a:5f:1c:cf:d3:ee:5f:b1:45:ef:3d:7a:ab:20:f1:bd:
         22:6d:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:37 2025 by rpki-client