Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
File:                     4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa (raw, json)
Hash identifier:          EbyoS03itWczmrWKvucov+X3zicHZHvTlGEb0TYboRw=
Subject key identifier:   3B:1F:67:F5:5B:3A:94:38:2A:08:2D:A6:FF:F1:AB:F8:4C:42:B9:98
Certificate issuer:       /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
Certificate serial:       010D0C9F4328584A0C0555C68084D0DAC2514600
Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     22851
IP address blocks:        198.180.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:55:c6:80:84:d0:da:c2:51:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8cc4a87c-8bf7-4595-be81-85a1ebff75fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:33:44:bb:2f:12:25:ec:89:9f:7f:88:bb:
                    53:bd:ff:5d:86:ab:d8:9b:03:40:65:0d:28:0f:bf:
                    44:59:5b:48:9e:69:10:dd:e4:0d:cf:62:94:be:de:
                    11:5d:8b:5e:24:c4:f9:89:ae:18:e3:24:ac:c8:b2:
                    dc:24:36:a5:3a:90:a0:44:3e:10:21:d1:dc:65:72:
                    2f:48:5c:59:55:fb:25:23:09:57:43:e4:68:56:23:
                    30:30:93:6b:c1:8e:fd:9a:c6:75:f4:b2:08:7d:88:
                    01:19:d4:e7:75:d8:b9:0b:49:6c:c6:1a:3f:ef:22:
                    0f:88:75:9b:d1:e9:31:96:21:5d:01:12:47:8b:58:
                    b2:6c:64:4a:97:56:9a:27:9c:93:f6:80:fc:8f:57:
                    52:05:ca:02:bd:a5:e7:96:ac:62:74:fb:04:44:aa:
                    b6:3e:5f:d6:d1:2c:81:32:85:c9:b5:eb:82:c0:44:
                    f8:af:db:04:2c:46:54:66:e0:3a:d1:3f:91:cf:5c:
                    59:9d:62:e2:bd:11:4d:f2:71:8e:9a:dc:49:4e:64:
                    96:03:52:36:11:3a:81:f3:8a:cc:9e:66:61:1f:e9:
                    3c:b9:d5:80:31:6d:8b:eb:c9:64:2b:10:11:f0:b1:
                    24:12:11:72:ab:a1:42:2a:5d:0b:3e:22:86:e1:ab:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:67:F5:5B:3A:94:38:2A:08:2D:A6:FF:F1:AB:F8:4C:42:B9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl

            X509v3 Authority Key Identifier:
                keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7c:89:61:dc:44:2d:e7:95:b2:b9:6b:20:ba:cf:33:01:ff:
         30:c6:df:91:f6:46:dd:9b:f1:ab:ef:c2:06:b5:43:8f:57:1c:
         5a:78:a3:04:d2:61:18:b9:8e:ef:d0:28:34:e5:47:1e:01:bd:
         47:1c:9f:bd:fe:fd:42:de:07:c7:6f:1e:86:62:c3:21:1d:53:
         f4:66:8d:03:66:84:57:5e:e2:73:88:c4:85:79:52:cf:bb:29:
         ee:aa:31:53:dd:53:71:fb:d6:62:64:00:4c:db:7c:dc:3c:d4:
         8e:a6:76:a4:f9:aa:41:b9:83:08:6d:93:f0:ec:58:2d:f3:eb:
         ed:4a:05:7a:2c:1f:22:50:45:ea:3e:ec:d7:8b:69:92:e3:1b:
         ce:d0:a9:6c:86:95:82:ab:63:11:63:8b:40:4a:85:45:f0:c8:
         2f:77:46:e9:eb:b9:f2:d0:3d:ce:7f:bd:8d:5f:4b:7d:e7:bc:
         a1:d9:58:5a:74:b7:40:c3:84:5c:b9:0f:bc:e1:a9:82:97:17:
         ec:57:90:80:af:66:d9:9c:9b:67:8e:f8:bb:92:16:aa:ab:24:
         0e:c8:fe:42:dd:c3:be:96:9a:73:0e:a8:20:5a:af:33:03:d3:
         52:1b:70:e9:79:dc:84:be:a4:c6:54:c2:8b:e3:0e:c5:b4:59:
         b9:c8:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:52 2025 by rpki-client