Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa
File:                     fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa (raw, json)
Hash identifier:          6JSVqOPyWP4sUEJDWlB5cemDX1i58ORDMpPbiRUxHr8=
Subject key identifier:   B4:1D:D5:E1:7A:E4:0F:AA:10:17:60:EC:A8:AB:18:37:F2:AD:A2:03
Certificate issuer:       /CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
Certificate serial:       010D0C9F432858485CD0279989219A1BD6668F80
Authority key identifier: F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        198.62.163.0/24 maxlen: 24
                          2620:79:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:27:99:89:21:9a:1b:d6:66:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=8bd5fd8b-24d2-4ee0-9cbc-7a070a3a457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:52:30:72:7c:c7:cd:73:c9:3a:49:fd:ea:fa:
                    bf:5e:4f:04:12:02:6d:1c:14:47:20:e1:8a:90:3f:
                    51:c2:a8:c4:8f:6f:a3:c5:8f:18:9c:f1:02:1e:fc:
                    55:d1:90:6b:1a:98:a7:bd:89:7d:51:07:37:1f:62:
                    80:33:4d:e4:2b:be:f9:12:15:7f:ec:2b:2b:ab:a2:
                    8d:2b:01:b1:5a:1a:ab:56:2e:03:08:0b:c5:2c:1e:
                    a7:05:10:3e:80:3a:62:e7:47:bd:4e:8c:a5:8a:a7:
                    c6:8a:d0:07:ea:e4:7d:25:81:63:75:fd:94:c6:0c:
                    de:ac:13:9d:5f:13:9b:87:39:54:a5:f2:fb:e1:05:
                    47:a0:9d:d3:a0:94:27:62:5b:fa:4e:18:c4:2a:6c:
                    5e:89:7b:89:c7:1e:3b:b4:16:b5:b8:24:c9:24:2f:
                    3d:ca:77:d2:13:f4:ac:f5:cc:c4:5f:36:3d:94:fe:
                    7f:d6:45:a0:8f:cc:e1:88:bc:f2:7e:92:1c:5b:79:
                    73:a7:ee:75:08:f3:2c:d2:c3:99:4a:9b:3d:d1:5c:
                    48:da:8d:71:e6:fe:8e:ee:a4:a8:29:0c:7e:9d:62:
                    f7:08:47:4b:a3:e6:b7:99:33:9e:f3:a1:3f:1e:07:
                    a4:c9:1a:0f:86:0b:cb:51:a6:3e:99:9c:b6:07:9a:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1D:D5:E1:7A:E4:0F:AA:10:17:60:EC:A8:AB:18:37:F2:AD:A2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/fcbbb04b-c184-3d38-94b6-4b2d5faef947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.crl

            X509v3 Authority Key Identifier:
                keyid:F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:76:b9:4e:bc:b0:e6:f1:f8:45:42:55:96:68:98:c5:18:f1:
         8d:83:e3:03:ac:d6:2c:48:5a:5b:d5:6e:4a:6f:72:19:80:73:
         98:ce:46:f2:90:48:71:f0:00:b0:09:8d:d5:f1:58:5c:57:77:
         82:9d:be:3c:ed:44:4f:41:3c:f9:d2:26:d0:96:3b:52:89:44:
         d9:f0:35:09:cb:6c:84:64:5a:23:c9:7c:85:2e:98:73:63:98:
         c3:c1:da:68:a4:66:a3:a0:0c:30:aa:e1:3c:b3:96:ae:26:c4:
         ad:2e:96:db:69:b2:54:23:30:46:62:9f:01:e1:43:29:9c:35:
         0d:03:2b:e0:2a:88:e1:83:d4:ed:82:0b:7a:75:65:ef:37:f5:
         a5:65:a0:e7:e3:12:a1:b0:b7:e0:fd:5f:7d:d3:09:4a:e2:33:
         a8:e8:7c:6b:65:b7:20:fb:7d:21:a0:7a:66:d9:2d:3c:78:ac:
         84:22:24:45:d7:b4:71:cd:5e:23:90:d1:40:cc:88:b1:d5:1c:
         22:38:27:85:fe:d3:f1:8d:df:fb:9b:6e:6c:41:b2:c7:56:60:
         7e:0f:d7:63:de:66:67:8d:a1:94:77:a4:a3:35:0f:81:6f:48:
         4a:72:76:30:10:6b:44:07:6f:0f:d4:3b:1b:fe:6e:4e:79:72:
         30:62:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:35 2025 by rpki-client