Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
File:                     a608f687-956f-3a69-a09e-16935b98a870.roa (raw, json)
Hash identifier:          Pqo8328oDtVtq3lkvwV3o/3FebbrXhqVsJMNNDuyFQk=
Subject key identifier:   E7:74:7B:3E:31:C7:16:07:A2:60:64:82:62:F1:48:FC:F5:C4:F9:6B
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F432858497ACB2B31776D4FF398AD3840
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
Signing time:             Thu 10 Apr 2025 12:31:48 +0000
ROA not before:           Thu 10 Apr 2025 12:31:48 +0000
ROA not after:            Wed 09 Jul 2025 12:31:48 +0000
asID:                     0
IP address blocks:        198.179.18.0/24 maxlen: 24
                          2001:504:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:cb:2b:31:77:6d:4f:f3:98:ad:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Apr 10 12:31:48 2025 GMT
            Not After : Jul  9 12:31:48 2025 GMT
        Subject: CN=bb704904-5137-41b4-8705-e6de282691ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:89:5d:ca:5f:a3:3f:36:b6:61:70:54:6e:
                    e7:7d:40:b6:f3:c4:56:f2:c4:b9:29:19:df:64:48:
                    b6:93:56:ab:96:7a:88:65:17:a9:51:c3:d0:46:10:
                    85:96:4c:85:a1:57:de:e1:b9:29:ca:ef:7f:25:49:
                    d4:d1:02:9a:a4:a5:ac:82:e3:e3:2b:0e:9c:8a:90:
                    e2:8c:fb:e9:74:69:ac:a1:91:a2:33:56:0a:e5:ea:
                    9b:07:39:41:f0:68:e3:55:11:69:ea:54:30:36:f7:
                    2f:86:3b:b6:51:5a:4a:e8:ed:0f:d2:9d:90:6a:62:
                    20:86:8b:61:e2:2f:17:fb:a3:ad:27:17:e7:3f:79:
                    c1:8e:dd:88:62:a9:33:35:ac:2d:d2:d1:dc:1c:0b:
                    a3:84:95:43:36:8c:e0:af:12:37:44:82:89:25:d0:
                    76:e3:fc:4c:1c:d1:07:03:5b:70:16:ef:d3:d2:8a:
                    c2:a3:b9:ea:05:92:0e:07:8d:df:d6:8b:d6:f1:00:
                    9a:63:c3:96:5d:9d:c5:1c:b8:3e:e1:0c:1c:78:6c:
                    6a:27:7d:3a:b7:81:9a:5b:79:4f:b7:d8:bc:c2:48:
                    f7:69:20:c3:fb:59:a7:34:d0:7c:47:45:8d:aa:43:
                    91:13:79:42:de:9a:cc:61:da:8a:ff:64:cf:47:42:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:7B:3E:31:C7:16:07:A2:60:64:82:62:F1:48:FC:F5:C4:F9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.18.0/24
                IPv6:
                  2001:504:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:20:da:58:42:46:18:01:d1:30:2f:91:d8:14:d6:f5:58:2f:
         c5:a9:5f:71:58:84:ef:49:b7:6d:ca:5d:4f:98:6b:bc:a5:a9:
         b5:57:f5:78:a1:b8:a6:5d:10:c0:f8:9b:e6:cb:d6:6f:52:36:
         98:14:8d:f7:7e:4c:92:26:eb:77:b2:c1:b1:89:2f:83:3e:8f:
         94:cf:15:02:d2:f2:50:0e:71:44:12:c0:93:8c:ef:12:da:e8:
         4d:22:75:38:60:f0:f0:12:46:3c:98:21:bb:f7:79:7b:18:bf:
         6d:fb:d0:8c:b5:53:d2:d5:72:0a:28:a2:bc:85:55:78:45:2d:
         f6:0b:71:de:14:c5:0d:3c:c9:26:d0:16:98:e6:3a:29:6e:16:
         fd:89:e0:66:72:19:3a:0f:02:03:9e:b6:3a:9d:b1:9e:88:fa:
         dc:2d:d7:c3:da:92:b7:dc:fc:36:d5:ee:9e:44:d7:bf:f2:0b:
         7a:bb:d9:75:ef:61:6a:a3:e0:b5:e3:75:6b:4b:a7:ab:6f:c9:
         08:87:d2:c0:3b:13:da:5f:ea:0b:ee:97:83:61:37:b9:88:80:
         a3:65:2d:cb:7b:1f:e2:38:eb:f8:ba:ea:49:3c:34:5a:fc:a3:
         23:60:35:68:08:76:e7:d8:08:e5:02:2e:8b:32:57:8b:28:6f:
         cc:a9:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:16:52 2025 by rpki-client