Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
File:                     be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (raw, json)
Hash identifier:          kVgPwD1sQLn8NUFlnUJxnUeap+qbiudouz9a6clINEU=
Subject key identifier:   18:5F:AC:F9:A5:8D:DA:EF:E1:9E:5A:62:D5:6C:4B:FB:30:FC:E5:C1
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F432858496FAF10360A709A1523C4D2C8
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     14041
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:10:36:0a:70:9a:15:23:c4:d2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=2874f78b-6f86-4103-8685-67ab635ef7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:55:90:d3:c7:7a:d4:f4:5d:25:af:29:47:
                    07:43:65:67:3f:96:bc:f5:87:8a:51:bd:19:be:34:
                    0f:11:ff:0c:38:3f:e0:74:da:4d:a2:66:1c:ce:89:
                    22:db:44:1a:d7:76:6f:35:b5:cd:52:fa:31:8a:69:
                    7e:95:b7:b5:46:40:5b:60:e9:e7:93:89:96:25:e2:
                    fd:b1:ae:34:28:ed:0f:84:c3:26:11:d5:d5:9f:e9:
                    a7:b1:95:89:8e:c7:63:7c:ae:f5:14:0e:17:1b:e7:
                    c8:fa:0b:b3:1f:97:b3:b9:b8:66:67:cd:2b:1a:05:
                    94:c2:86:33:71:54:14:3b:7d:da:f0:fa:ff:07:1d:
                    35:96:fb:db:6a:9f:9a:d1:03:9a:0e:d2:63:03:56:
                    50:78:77:5a:f7:3b:38:4b:cd:b3:59:5a:2f:05:5f:
                    69:bc:a5:a8:59:d3:16:53:b4:d9:f8:35:c6:fe:54:
                    51:4d:f2:d3:18:f7:af:cc:41:08:e5:41:c9:09:99:
                    0a:aa:40:70:05:b1:8e:ed:b0:8f:26:e8:f2:10:bd:
                    c9:95:30:e5:72:e1:7a:6b:cd:f3:e2:08:6b:ca:7e:
                    ed:cf:15:1c:7e:22:45:2f:ad:58:b1:7e:08:b4:d6:
                    9a:26:51:19:87:a9:1b:b2:5b:68:bd:67:26:f0:da:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5F:AC:F9:A5:8D:DA:EF:E1:9E:5A:62:D5:6C:4B:FB:30:FC:E5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:84:3b:f3:5c:41:86:0e:10:64:60:0f:ef:0c:1d:a7:51:
         59:fe:80:18:d5:43:ac:35:59:2e:a1:03:28:e3:e4:6b:c7:21:
         04:b6:2e:22:97:cd:66:f2:d2:64:5d:68:6b:a3:5a:76:65:e8:
         55:09:1b:f7:37:56:06:71:50:90:d7:ec:55:80:d4:22:a6:85:
         21:34:3b:0f:e5:c1:9f:55:f5:16:f5:31:eb:28:64:cc:58:39:
         fa:c8:03:a0:0c:6f:fd:b2:b0:bd:24:ac:66:b6:9c:fb:73:52:
         25:21:fd:68:64:72:83:88:ef:25:82:9e:86:1e:e5:17:be:b2:
         8d:7e:eb:b2:30:8f:7e:21:2e:3b:ba:e7:f0:1c:c3:9c:7f:41:
         2b:a8:8d:49:be:9a:c9:53:01:96:f7:35:11:14:86:96:41:cb:
         b4:90:1d:a3:37:c8:d0:62:53:25:87:11:e9:01:84:98:4e:a8:
         11:2c:00:ab:5f:1e:10:2d:c6:e1:05:9f:b7:ea:95:e2:68:48:
         b5:d3:63:d3:84:54:e1:cf:90:62:69:1c:46:b6:4c:58:48:36:
         c0:9f:fa:fe:14:7b:c1:03:bd:d9:5a:98:6b:78:74:07:20:22:
         99:3a:0c:e5:5f:2d:e1:91:7c:b6:e5:e3:df:40:af:27:81:5f:
         a9:b5:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:10 2025 by rpki-client