Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa
File:                     477b7a8a-9422-3915-8bf6-d959b2380fd2.roa (raw, json)
Hash identifier:          92JFPGM7t4wlzfN2CA4GqqHdLwJ35xhzvBnWjtvysK4=
Subject key identifier:   48:3E:43:17:0F:6A:DA:49:42:BD:51:85:58:74:69:9F:F3:46:00:18
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849605416A21D2AF758CDE75680
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        198.154.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:16:a2:1d:2a:f7:58:cd:e7:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=ae6834f2-7e41-43f9-a811-cfe6d10f2d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:df:06:0f:42:6f:51:5d:bf:28:e9:00:3f:
                    36:f9:42:ed:85:ea:d5:97:22:34:8e:c6:08:ac:dd:
                    45:52:72:6a:5c:8e:40:bd:1b:9e:d4:81:9f:f4:e5:
                    5b:40:77:87:5d:e9:31:ec:68:90:f1:da:ed:bf:97:
                    04:2b:ec:ce:9f:ad:b1:7a:6c:b3:82:72:74:7d:0e:
                    4b:23:37:e9:29:79:ea:bb:b6:80:11:96:3c:59:94:
                    b8:9c:e6:27:f1:e7:dd:3a:6a:c6:5d:b7:d9:e2:d1:
                    29:f0:04:31:d0:43:c5:53:59:30:5d:72:fd:95:8d:
                    4d:65:11:35:28:9e:29:f3:b5:58:7f:77:82:f9:d3:
                    3d:8b:e7:c1:6c:e7:8b:aa:15:d8:0d:af:5b:65:45:
                    f8:1f:9e:f6:d6:97:85:aa:87:7b:a9:64:af:cd:62:
                    63:44:f7:83:82:8b:fa:4a:7e:32:55:18:51:5b:ef:
                    5f:da:82:ce:b5:a7:33:6e:73:94:4b:6d:f6:92:c2:
                    95:77:7e:ef:65:fb:5d:1f:c8:48:db:34:24:5c:68:
                    7a:00:72:d2:f8:02:53:cb:d3:b9:d7:b6:3b:b3:31:
                    d6:b1:e6:73:96:65:a6:1a:7a:69:0e:62:46:2a:fd:
                    fe:2e:8b:87:0e:01:e3:14:a7:4f:f3:1f:29:09:f4:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:43:17:0F:6A:DA:49:42:BD:51:85:58:74:69:9F:F3:46:00:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:25:e1:a9:e2:15:ec:a9:6d:ad:99:73:ee:bf:d2:59:5a:
         d6:c5:77:85:a0:bb:20:77:7f:e4:61:a2:f6:ae:1f:3b:46:e1:
         fa:9e:2c:86:32:86:78:d8:3a:0b:1d:57:3c:33:d3:bc:af:e3:
         45:45:e2:5a:e0:a3:1f:ab:c5:a2:e5:42:41:e4:86:e5:b2:84:
         0e:e5:ce:9e:96:b9:ff:c5:a7:06:3e:0d:1c:20:ad:66:ee:3c:
         12:02:56:af:0e:4a:18:05:3b:b7:11:7c:75:c0:45:4c:ec:31:
         11:53:d8:72:b8:94:f6:03:19:a4:ef:33:d8:d5:c3:27:cf:33:
         3d:48:65:7a:c0:cd:24:de:25:70:f0:db:b7:85:00:a2:a0:da:
         03:0e:7a:e8:c6:6c:aa:21:ce:af:5d:6f:7c:e2:ee:a8:37:c2:
         1d:d1:00:cd:12:93:86:0d:74:e0:e8:20:8f:62:69:e3:e2:8d:
         d4:eb:a2:63:0c:c6:43:37:f3:c5:9b:d4:5a:7d:a4:3e:40:db:
         e5:cd:81:eb:ea:b4:d9:47:a1:61:5f:0e:57:67:e7:f2:96:3a:
         ed:05:aa:de:2e:1e:d0:f0:ed:94:f7:01:17:59:2d:c9:05:67:
         63:77:5d:d4:fd:46:5e:fe:43:c7:51:8e:1d:b1:19:f3:70:a9:
         ad:39:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:22:33 2025 by rpki-client