Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
File:                     4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json)
Hash identifier:          hW/LV9YQUL7fu69KP9Yv5sOBGe9CjlfWZTx/bQv7t9Y=
Subject key identifier:   53:8C:AD:58:B8:A3:33:C4:32:D1:D9:F8:1A:6A:05:19:C9:42:21:1A
Certificate issuer:       /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial:       010D0C9F432858489FD0969043E345CB2B828300
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     18540
IP address blocks:        198.148.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:96:90:43:e3:45:cb:2b:82:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=8939f1eb-27c6-474e-8228-b8dfa27d9f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:c6:c2:26:52:df:2f:62:b7:f2:39:9a:36:
                    02:b5:35:43:47:91:15:b8:14:02:64:11:53:10:32:
                    38:3b:6a:62:d6:fa:25:99:08:97:b7:b6:db:19:7b:
                    95:be:88:ed:62:a3:d8:34:88:b9:5a:22:ae:14:aa:
                    bb:4b:55:9e:91:cf:cc:52:29:1f:1e:76:21:d6:7b:
                    52:8c:9d:be:6f:b3:6c:df:bc:85:18:45:db:c8:3f:
                    8b:fa:4b:d9:60:df:aa:43:d2:88:00:c8:03:67:c5:
                    0e:ea:de:e7:37:97:f4:3d:e3:0e:c9:7f:9c:60:32:
                    29:27:98:10:22:e2:a8:f9:1c:be:a2:7c:03:06:8e:
                    b3:53:01:a4:2b:c3:32:87:e5:ba:e6:5d:ff:e0:74:
                    d5:98:72:5f:ec:58:52:a0:28:62:35:0d:b6:c3:cf:
                    5c:61:ea:e4:97:91:07:00:32:e7:76:d9:85:5c:5a:
                    d6:da:1f:64:88:13:c1:66:5d:6a:36:86:d0:79:71:
                    a4:ca:51:29:b5:c0:64:3d:ce:75:3b:c8:73:66:00:
                    2f:04:d4:76:54:27:23:95:7b:15:22:68:5a:c5:0a:
                    30:ca:26:e2:e1:69:c6:e9:61:f6:56:0b:cd:b1:3f:
                    2e:02:ca:db:4d:29:ee:fa:66:01:5c:5a:8c:18:e1:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:AD:58:B8:A3:33:C4:32:D1:D9:F8:1A:6A:05:19:C9:42:21:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl

            X509v3 Authority Key Identifier:
                keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:46:ac:32:97:f4:f8:6a:e7:e2:20:60:0d:fc:97:67:12:58:
         2c:aa:68:a0:63:0c:38:4d:31:f4:af:cb:16:1b:bf:e3:79:ca:
         ae:b6:8b:57:b2:6b:dd:8d:53:2e:6c:1a:40:00:b4:b8:4a:93:
         8e:76:8e:0e:0b:73:56:df:d9:69:7d:f7:cf:a2:67:2c:dc:bd:
         de:cb:c4:2d:b9:90:d9:c0:f3:65:34:42:94:de:b9:6f:74:c7:
         c6:ba:96:db:a2:4d:3d:46:e9:6a:7c:59:9b:a4:ca:f5:af:4c:
         ed:7f:54:40:95:b1:21:92:b1:76:eb:59:3e:71:c0:12:34:d0:
         21:14:a9:59:b7:7b:79:e9:d6:36:00:54:82:2b:38:38:d3:80:
         90:f2:97:96:53:a0:d3:1f:24:57:ff:3d:52:02:a3:0d:4e:a5:
         27:13:8e:6e:a9:7c:6b:19:3e:3b:d1:a2:71:ae:70:8c:69:7d:
         c8:fe:84:84:84:6f:d1:dd:2b:9c:84:30:c9:3a:2f:b0:cd:f8:
         ba:4c:3a:4b:a8:40:9a:0c:8a:16:41:70:48:bb:7a:85:0d:5b:
         aa:2f:da:fa:7d:cb:85:8a:e8:f0:c7:64:f1:74:9a:4f:31:7d:
         10:2e:8f:61:1b:15:87:42:6c:4e:8b:38:b6:49:52:45:a9:7f:
         82:22:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:03 2025 by rpki-client