Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
File:                     5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa (raw, json)
Hash identifier:          J95Pgjftt/ge63+tXoRCv+QldXrV/4GU6ujQ0HaZRRY=
Subject key identifier:   AA:DF:C2:29:B7:65:B5:87:51:E1:DD:02:18:63:59:D3:AA:39:83:4D
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285848DA70F48B30D409C0FDFED900
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     397422
IP address blocks:        67.210.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f4:8b:30:d4:09:c0:fd:fe:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=18fb6d98-6677-4409-8376-e5594dea20fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:c4:ff:bb:49:b2:f2:47:44:19:2f:a0:63:
                    51:b0:ca:4d:d5:f8:18:89:e6:53:ff:2c:a2:b8:00:
                    4b:b9:18:86:bc:e5:ba:d1:0d:0a:ba:9f:b4:60:31:
                    11:06:d3:72:8d:fe:99:b8:df:01:44:34:69:69:95:
                    b5:87:3c:0e:34:41:6b:9e:d5:6d:c0:d2:b6:c8:f3:
                    72:46:79:f3:97:63:27:fc:7d:62:4f:8f:27:a5:a9:
                    67:e0:7e:d2:4e:f6:d1:b6:56:e0:1a:6b:a7:b0:2e:
                    30:5b:05:63:35:35:da:35:6c:30:e4:0d:99:f8:7b:
                    13:5a:d9:e0:97:5f:f4:df:12:cf:34:68:22:c6:41:
                    50:c2:7a:4d:51:27:49:95:3d:6d:e4:e5:73:f3:05:
                    7d:6d:0f:03:57:4c:5c:ff:49:9c:6a:56:3d:93:20:
                    de:26:d3:52:2d:5c:61:89:b3:b5:d3:b7:16:38:53:
                    08:65:be:66:26:29:60:70:e3:31:6f:2f:90:2f:5b:
                    39:21:e9:af:e4:e4:3f:da:a5:26:6c:a5:f5:a1:81:
                    30:ba:be:d2:22:9f:db:71:93:5e:0b:9c:78:82:6a:
                    e0:35:0b:2e:a0:51:46:d7:67:8f:e8:ed:00:51:be:
                    ab:76:7b:ef:06:1b:a2:2b:99:aa:44:d7:35:6f:a1:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:C2:29:B7:65:B5:87:51:E1:DD:02:18:63:59:D3:AA:39:83:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/5c553b39-26a1-3ab7-86b8-64646ffc8ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:e9:d7:e7:ca:29:c8:f0:d5:6b:30:a9:24:06:ae:a9:e2:
         34:54:9c:c6:40:4d:cb:5d:9f:d9:03:37:d7:69:df:bb:aa:47:
         d4:6a:17:58:8e:90:27:80:44:14:10:b8:a5:29:c3:82:80:04:
         5c:3c:77:90:59:fa:93:c4:2e:9d:54:9a:b8:eb:58:b5:9b:6f:
         e9:41:30:05:bf:93:e3:16:f1:f0:f3:ef:c4:1d:d1:ca:19:6b:
         5e:5d:a1:18:00:a1:73:16:f8:d4:52:42:ad:a1:c4:32:75:0c:
         58:9c:d0:09:f2:ab:62:3f:11:59:25:36:0a:13:de:19:63:12:
         e2:f0:0d:b5:9d:0d:e7:06:4d:5b:d6:57:31:2a:e1:3c:47:d4:
         69:99:66:d7:7b:b4:bd:e5:65:ed:e3:e3:3b:a6:d6:e3:f5:b1:
         1b:9a:1b:3f:b7:60:f3:c8:5b:18:a5:ee:ab:ff:fe:19:ba:00:
         61:70:2f:85:c6:7e:a0:51:0f:74:9a:90:01:7e:fa:b7:00:fd:
         41:e3:0e:d3:9f:36:d6:e8:e0:c4:a2:f3:70:d0:22:4e:c6:a9:
         34:f8:3c:2f:d8:48:69:cc:5d:00:7a:bf:98:30:32:48:af:8b:
         17:6b:97:f5:98:42:ee:bd:5f:ca:3f:a3:b8:2e:86:ce:c1:bf:
         bd:67:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:04 2025 by rpki-client