Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
File:                     a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json)
Hash identifier:          Wdjez/mpvR3kW0nD22tjwsiORvsG33wZiVi4xbUVf08=
Subject key identifier:   7C:75:E7:1D:C6:74:4D:36:75:59:D8:37:7B:6D:D3:9F:1C:FF:5B:4D
Certificate issuer:       /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial:       010D0C9F4328584A0D6A8CAF4997247784872E40
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     40521
IP address blocks:        198.251.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8c:af:49:97:24:77:84:87:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=6aac56f0-9b71-4d88-b716-dbbf34c8b02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:eb:c2:f2:e6:f7:9f:65:24:1d:b9:ff:b7:
                    52:46:52:23:7c:2d:60:f0:ae:d2:e1:a9:7e:af:cf:
                    cc:60:8a:66:da:fd:c1:46:1b:6e:70:23:87:f1:00:
                    1c:3b:e9:c8:b5:eb:60:1f:0c:42:21:6c:49:dd:62:
                    4c:7c:dc:73:fc:e5:03:28:29:b5:aa:eb:79:76:20:
                    6e:50:e4:78:1a:7f:22:2a:4a:f0:31:db:95:59:f3:
                    38:8f:6f:a3:d4:f8:73:d1:93:65:73:61:50:6d:80:
                    e7:4d:56:bd:11:3f:25:e3:ef:9c:b0:27:10:e1:c3:
                    b5:1f:bc:13:6f:d8:b1:5b:a4:66:e6:d2:a3:3f:11:
                    f6:01:40:37:8b:5b:fb:76:f6:e6:5c:0a:77:d6:30:
                    0c:57:91:9d:20:f3:6a:2b:44:de:51:fc:4d:c1:2b:
                    e6:2d:a6:66:59:c6:51:0c:6f:d6:2e:c4:35:f1:3e:
                    0b:34:c8:f1:ea:ef:a2:89:1a:84:d9:f8:63:3d:f2:
                    47:ec:71:e8:3e:d1:4e:80:b5:01:62:60:70:53:4f:
                    3a:e2:ad:33:e7:3e:fd:0a:b1:81:99:e4:f3:a4:b7:
                    61:3a:f9:39:85:7c:83:52:f0:97:29:08:05:b4:c2:
                    df:dc:18:da:bb:be:04:22:1f:85:78:a4:16:86:0d:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:75:E7:1D:C6:74:4D:36:75:59:D8:37:7B:6D:D3:9F:1C:FF:5B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl

            X509v3 Authority Key Identifier:
                keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:50:f0:57:4f:49:4c:e7:ea:0c:04:1b:c1:67:ad:dd:b5:
         49:5d:4e:12:dd:6f:42:9b:ad:97:75:db:7f:56:04:a3:a5:09:
         6b:a8:44:f3:88:73:12:f5:9a:02:6d:5e:8b:28:f0:4c:6a:78:
         43:84:84:80:f0:58:70:64:34:6e:54:88:88:7f:ae:69:61:d9:
         fc:79:21:89:a9:78:c9:be:fa:50:d7:0f:5d:e9:96:81:4b:ce:
         63:eb:ef:57:34:2e:5c:67:a4:1d:a3:f9:63:4d:17:14:d9:22:
         af:c9:08:1c:0b:7f:4e:30:33:f0:ac:71:25:e9:01:25:2e:80:
         40:2a:81:5b:89:6c:07:b8:30:8b:c5:12:25:b5:06:3d:00:dd:
         01:3f:8e:7f:29:fe:69:6a:b7:ee:3d:d4:5c:17:14:dd:1c:33:
         0f:e7:28:ae:9a:5c:c9:95:92:ea:e4:c0:95:de:74:18:ab:eb:
         a1:dd:70:55:a7:df:12:ce:4d:3a:5a:bc:67:40:99:78:39:fa:
         96:81:30:6d:6b:53:08:80:68:23:83:71:e7:20:a4:66:d1:75:
         4e:6a:b0:93:90:ff:85:85:1f:0b:90:5d:09:00:f6:e3:69:70:
         a5:54:c7:ce:93:06:1e:cc:4a:85:ac:d0:10:87:36:f1:3e:31:
         7a:ef:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:29:20 2025 by rpki-client