Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa
File:                     17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa (raw, json)
Hash identifier:          cvKytH2wJOoEklt/k/PNnqRqLtYHtryyvDEpbQP0YgE=
Subject key identifier:   DA:68:56:4E:45:66:D6:CF:09:CF:0E:AB:45:B0:57:7D:F7:FA:10:69
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F432858492CAE905B80AE94ADB0CFAAC0
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     56274
IP address blocks:        198.208.96.0/21 maxlen: 24
                          198.208.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:90:5b:80:ae:94:ad:b0:cf:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=59c42a50-6ae7-4285-8bb2-56fee89d47ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:2d:37:cd:53:6a:0c:91:55:a6:43:8b:f7:
                    87:92:51:91:a5:bb:a6:6d:9a:ee:1f:ed:26:c2:4a:
                    58:a0:64:9e:2b:64:d2:e2:0d:ad:e8:fa:82:cd:ae:
                    63:e2:8f:6f:37:d6:44:12:ed:0e:64:7b:b5:59:6b:
                    b0:7d:c8:82:98:a6:4a:df:24:ed:09:cf:71:e2:8d:
                    a5:42:69:f3:99:aa:17:7d:17:01:1b:92:56:ca:cf:
                    77:07:0a:bd:1e:52:8a:46:50:4e:e0:27:e8:30:1d:
                    87:97:f2:5d:40:36:ca:b7:7a:06:d0:43:57:72:e3:
                    bb:de:5c:0b:ee:14:1f:61:47:a5:a0:09:25:6a:65:
                    20:27:00:e8:c7:bf:40:f7:95:40:12:3d:11:45:13:
                    be:46:58:38:81:e5:cd:c8:a9:c7:01:07:f2:5b:24:
                    9c:a2:89:77:8e:fa:a8:47:5a:0c:49:aa:58:ea:c1:
                    0c:2c:6b:ac:fc:99:ce:78:c0:53:11:a6:54:cb:3b:
                    94:b6:24:26:ec:3b:7e:2a:45:da:fb:47:26:2d:c9:
                    12:b4:96:3c:c8:17:8c:a6:96:ae:4a:12:34:f9:bf:
                    cf:45:69:b8:16:3b:a3:ba:ed:7d:63:38:98:e8:6e:
                    85:92:46:d1:19:67:55:ff:f0:67:0e:85:4c:93:37:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:56:4E:45:66:D6:CF:09:CF:0E:AB:45:B0:57:7D:F7:FA:10:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.96.0/21
                  198.208.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:07:46:a2:aa:b6:be:e1:e5:1e:cd:c6:b0:28:15:ea:62:
         41:da:83:1c:08:e5:94:6b:a4:72:1b:7c:60:a6:cd:71:fc:1e:
         b0:30:e1:63:93:8b:73:80:35:9a:d9:d0:c3:df:95:08:77:61:
         6b:3b:fc:e7:09:f3:0f:a5:a1:65:90:f0:9d:94:36:84:91:8e:
         86:5b:4b:ba:ae:36:53:45:83:7f:59:77:e5:f7:33:7e:e8:8e:
         cb:ff:73:fe:74:f7:fe:3a:52:74:fb:d7:88:14:ef:9a:98:ab:
         8a:72:61:2e:55:c3:87:13:a1:d7:79:16:8a:23:73:d3:67:2c:
         92:ad:8c:3f:3c:4c:32:c5:af:ff:82:b3:96:18:e6:aa:81:38:
         93:20:35:cf:26:c3:b9:2e:56:e4:12:c7:07:bb:af:0b:bd:00:
         ea:32:ac:83:0a:7a:ec:60:26:64:87:19:a6:f5:d1:b8:3d:2b:
         39:df:e1:ab:8f:96:b9:92:7c:d2:68:3a:06:33:58:59:31:ee:
         b1:8e:61:ef:7d:16:19:b4:eb:4c:bb:34:24:7d:03:1f:ca:e8:
         cb:87:a9:60:a7:6b:48:4d:e7:71:3d:2d:aa:7b:53:ca:47:dd:
         b0:39:30:c5:62:b8:13:7c:fa:37:10:96:3f:a6:19:73:ac:ab:
         61:1d:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:35 2025 by rpki-client