Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
File:                     cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa (raw, json)
Hash identifier:          TMXKyCqF/SoX8sqNFpz+n0vMrLpm7D/DRNWsjszQ74E=
Subject key identifier:   CD:2D:9B:C6:F8:ED:8E:0B:DC:BB:17:92:C6:4E:C7:57:63:DC:1F:F7
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848530AED8593DABE635586CE00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     398371
IP address blocks:        198.160.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ed:85:93:da:be:63:55:86:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=294db22b-5fce-487b-bceb-be77c0dc4df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:28:18:75:c8:1a:c4:d1:d5:95:1f:6f:2c:
                    65:02:e1:7f:db:6b:eb:22:e9:ff:af:af:18:48:82:
                    03:53:24:a2:45:ce:4c:0e:ed:87:29:24:31:e7:e9:
                    6f:6f:54:5c:df:86:c9:80:21:1c:b6:a2:23:c7:d5:
                    38:de:82:41:5b:9d:9a:ad:75:ca:36:44:24:e5:c0:
                    62:0f:ad:f1:4c:45:fa:db:58:8f:12:01:f0:b7:93:
                    52:11:b6:46:77:95:e1:5d:d0:15:b7:7e:2b:48:36:
                    03:ce:8b:61:d7:7c:fd:3b:dc:70:21:c8:6f:81:0a:
                    e0:05:28:bb:71:fd:7d:fa:5f:88:e5:ef:d8:b3:f0:
                    30:61:37:42:ea:1e:ee:2d:71:3f:75:f9:81:ec:36:
                    60:7a:31:fa:c7:b8:c4:bb:b1:b7:cf:e1:87:e0:7a:
                    74:57:1b:4f:16:84:42:37:b8:4a:33:e3:13:e5:7a:
                    93:ce:c8:ad:f3:09:ef:d7:66:f9:67:35:e6:bf:ee:
                    94:c7:fc:29:6f:18:7d:07:7b:68:4b:b4:99:b9:9e:
                    ec:c3:36:b6:0f:08:9f:c4:d0:e7:43:58:4d:64:3a:
                    d4:94:cf:56:a3:72:4f:f2:9a:0e:53:a8:d9:2e:b8:
                    0b:29:94:73:9b:b5:eb:ca:10:07:da:bc:f8:14:19:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:9B:C6:F8:ED:8E:0B:DC:BB:17:92:C6:4E:C7:57:63:DC:1F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/cbd2a73a-be5d-3dbb-a239-037e0edfa9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:0a:ad:3a:8d:6a:dd:bf:7b:09:3e:3c:d9:ce:1f:86:6c:
         21:86:ff:65:61:71:3c:6f:a7:42:21:ee:72:11:f7:bc:55:c9:
         20:e0:78:45:8f:91:a9:93:b4:da:46:05:41:a9:03:63:a0:4e:
         08:7d:c1:ab:2a:e5:e2:bc:0b:c9:13:d5:71:ce:ea:d5:c7:da:
         6a:ad:e1:7f:7f:98:9b:d3:7e:68:3f:68:e0:db:2e:97:6d:01:
         b9:eb:a7:36:ca:5f:99:4e:10:49:26:ce:0a:51:60:f4:c7:5c:
         a2:da:10:7b:52:77:e8:5e:d6:97:2a:96:5d:92:97:da:25:85:
         ff:a1:32:02:a2:64:fb:fe:4e:7b:c1:ef:5a:a9:32:4a:dc:61:
         8f:3d:5b:78:f0:ce:4e:36:00:34:b2:19:d0:84:f1:a9:01:6f:
         d7:3b:92:78:de:a0:7d:eb:2f:fa:0a:d0:08:1a:16:fb:e8:8f:
         20:2c:d4:f7:7d:5f:f8:73:97:2c:ca:c6:68:dd:eb:14:5e:8d:
         c4:ec:58:8b:da:8e:e9:62:2c:fd:ab:ef:bd:39:86:c9:88:ac:
         94:5c:79:27:45:ee:8f:20:83:ef:aa:b1:c4:3d:3b:a0:9c:2e:
         98:04:dd:0e:99:0c:79:7c:5f:e0:93:fa:bd:77:d3:ed:90:88:
         af:dc:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:47 2025 by rpki-client