Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
File:                     5e3423c5-72cc-39a6-839a-0790366aef24.roa (raw, json)
Hash identifier:          J6EAMnlHPwRUA3Ok6m/C43FhHssBpFEpaQIsbAhLAgM=
Subject key identifier:   25:D5:22:D3:86:EB:13:20:3E:35:37:94:92:F5:3B:9F:6A:71:25:1B
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F432858495ABEE2E6E7F119C07E96C200
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     53620
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e2:e6:e7:f1:19:c0:7e:96:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=87e470af-5d5b-4fac-bd80-91e14f74d1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:39:0f:7b:96:7f:53:2f:97:0f:ef:b6:cd:
                    3c:b2:26:0f:88:30:d4:4b:91:8b:a5:ae:b6:5d:ca:
                    3d:de:0e:27:9b:b6:b0:72:79:0f:d1:b6:9e:fb:5c:
                    13:39:5a:50:44:60:c3:67:6b:0e:99:fd:6e:cf:10:
                    fa:c9:f7:08:12:72:8c:97:e7:30:47:26:e6:28:52:
                    f3:89:8b:2a:45:a4:5d:e9:ae:03:d1:5e:b0:81:d8:
                    97:a8:fb:63:ed:57:50:9e:d0:b8:0d:0e:7e:64:88:
                    5c:0a:3f:08:32:93:13:3c:aa:9c:d0:ff:1e:4e:5b:
                    1b:1f:6d:b1:05:a8:68:31:d4:d4:62:a4:fe:03:75:
                    cf:ca:4f:6d:4c:0f:51:97:20:18:1d:fb:e2:51:57:
                    53:32:63:74:d6:55:e0:35:43:08:df:eb:32:d3:25:
                    bf:91:80:29:31:78:1b:06:f3:c0:33:4c:d7:d3:00:
                    1c:af:88:76:ba:89:f1:0b:33:da:b1:a7:ee:15:1d:
                    08:c9:4b:94:7c:f2:23:eb:ac:b4:ba:e9:51:20:c4:
                    8c:11:0d:4f:33:e1:38:36:0a:2d:2b:69:39:25:ec:
                    61:e6:42:6f:41:53:a4:3b:73:48:8e:7e:02:57:7e:
                    4a:8e:04:5b:8e:40:1c:92:89:16:4b:35:2e:c7:80:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:22:D3:86:EB:13:20:3E:35:37:94:92:F5:3B:9F:6A:71:25:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:fc:0e:d3:19:9d:e6:42:cc:08:c8:d4:4c:8c:c5:1f:f0:
         d2:ba:4c:dd:3f:ed:28:a4:62:e8:88:c7:72:25:9d:a4:46:1b:
         6d:7f:21:ef:4a:18:8d:81:61:ae:b8:dd:7a:69:df:43:ec:dd:
         e4:ef:50:fa:81:84:ee:c5:70:9a:f9:2f:c4:d0:5d:10:3d:f8:
         ee:87:e8:2c:80:57:2d:62:40:d2:8a:45:89:f0:bd:27:fc:ba:
         26:50:8d:e3:43:0f:11:d5:67:df:f7:aa:be:5c:ae:6e:dc:c2:
         2b:ec:d5:30:2d:c1:2e:ac:b9:c9:19:8d:a3:29:8b:71:9e:f4:
         32:bd:2d:1e:ca:41:4e:35:0c:ca:50:ab:f5:be:22:ff:64:04:
         a2:eb:f1:7a:11:86:46:91:f6:e4:fd:83:40:a4:fe:96:46:c0:
         c4:e8:84:f1:54:de:52:c1:26:54:ad:a9:ee:d7:d6:97:81:40:
         36:66:a9:79:0e:b1:53:ba:2e:42:f6:d4:70:ee:72:0c:1d:62:
         44:c7:22:98:af:ec:61:a9:e8:5f:01:3f:0a:a1:3c:ff:c7:53:
         50:43:74:99:d6:d7:7a:09:fd:fd:d6:4b:d2:14:a5:4a:d9:0f:
         6b:86:5f:90:cb:78:69:52:00:6d:f0:2c:ed:e2:73:02:30:99:
         6f:0e:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:38 2025 by rpki-client