Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/4fc20683-5b70-31ea-825b-fb5aae7329ac.roa
File:                     4fc20683-5b70-31ea-825b-fb5aae7329ac.roa (raw, json)
Hash identifier:          6/RtehZkuCqC7vsyAP3XwxtSd8eR0f2p8H4i5MYjzbU=
Subject key identifier:   E0:79:57:C3:21:9E:FC:72:03:C4:14:89:AF:D7:21:3E:67:BA:E8:DC
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F432858495ABECB3DFDD9C415FB37A980
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/4fc20683-5b70-31ea-825b-fb5aae7329ac.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     396504
IP address blocks:        198.162.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cb:3d:fd:d9:c4:15:fb:37:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=988d4da3-31b7-4bd7-b0c2-c96b8218ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:77:1d:52:ca:1e:f6:66:39:9d:ac:9b:f0:2f:
                    7c:95:24:29:bd:d0:da:47:b1:c8:eb:df:c5:47:ac:
                    40:9d:bf:e7:b7:f7:08:e0:9f:78:fb:48:c6:aa:5c:
                    05:a9:3a:82:bb:9c:94:a1:21:ef:9f:0d:f3:ce:27:
                    64:f3:3c:29:e4:ea:05:7b:6c:e3:bb:16:3d:d6:44:
                    f7:97:0f:1e:d2:4d:0a:cf:fe:8b:b1:c8:8e:94:e5:
                    85:1d:c0:fb:ad:e4:a6:b9:56:41:e9:56:43:a8:f6:
                    26:b8:af:94:8f:80:82:21:a6:8a:d2:e4:b8:fe:9e:
                    d7:ef:f5:97:0f:93:26:80:bd:26:97:83:28:83:6e:
                    3b:7b:00:66:88:59:7d:be:e5:f4:50:47:5a:62:5c:
                    6a:ff:e6:5a:e7:a7:9a:d5:31:ff:8e:9b:a2:00:ec:
                    5e:18:5a:9c:bc:87:35:26:04:5c:4e:40:2f:34:70:
                    54:5d:85:4b:6c:f7:1f:76:0e:f7:b0:e7:45:8b:37:
                    3e:82:55:28:48:a6:be:bf:ca:ae:16:4c:ba:c5:bc:
                    d1:a6:d3:37:6e:dd:22:5e:30:a9:2a:46:ef:66:54:
                    00:f0:7c:3a:ce:89:5c:ba:b7:b8:e2:96:6f:97:17:
                    00:d1:8f:77:e6:75:8e:de:e3:08:e3:d4:c3:7b:36:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:57:C3:21:9E:FC:72:03:C4:14:89:AF:D7:21:3E:67:BA:E8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/4fc20683-5b70-31ea-825b-fb5aae7329ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:c2:95:2c:e2:09:92:bd:52:1a:5f:65:d8:de:1a:7e:bf:
         e4:d3:83:73:60:9f:3d:c1:92:85:0e:1f:fb:85:28:f9:e2:6b:
         a3:7a:1b:a2:b8:7b:b2:e9:b2:54:6c:4c:fc:f2:bb:c1:9a:fd:
         bd:fc:f4:05:38:de:c7:f1:d5:ca:62:76:57:7b:a4:be:62:c8:
         c7:27:6f:2b:ad:34:58:cd:c8:2c:8f:b0:3f:5f:27:23:ac:5d:
         04:27:4c:29:fb:cf:ab:28:f3:fe:ef:61:fc:67:e9:04:e4:08:
         a6:11:3b:49:f3:fd:f6:7a:02:b9:d4:aa:05:87:08:a9:09:42:
         d7:34:23:ef:7f:97:74:b4:59:99:a6:5c:6f:75:eb:f5:3e:d2:
         08:fc:14:2b:f1:d8:ed:e7:06:79:fc:f7:9a:36:63:f8:4f:1a:
         19:6d:fc:9b:a1:37:28:3c:f3:4e:d0:cc:fc:7e:5e:ad:50:db:
         f5:8f:4a:17:3b:03:1a:bf:31:32:69:b2:34:c2:bd:f2:9e:91:
         ba:04:dc:9c:27:17:cf:d0:ab:c5:e2:66:94:29:1a:01:de:55:
         81:77:b7:a0:94:7c:33:b9:dd:6d:4a:b5:c5:25:05:fb:84:0b:
         20:0d:c2:0f:7d:a5:67:a6:aa:cb:f0:dd:2c:21:c5:f1:ed:7c:
         19:ab:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:15 2025 by rpki-client