Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa
File:                     f1f29446-3bd8-39da-82ee-9912c1c44526.roa (raw, json)
Hash identifier:          nd/z9Q9Hij5zXT1YeSkraijhs2sVfWKPyU84avF/3Pk=
Subject key identifier:   21:36:13:C2:DD:72:BD:63:4E:C0:50:D3:DB:0A:80:B8:AB:7C:04:34
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285848F22C68C54A628C325FF15300
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     996
IP address blocks:        199.48.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:68:c5:4a:62:8c:32:5f:f1:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=4cb57d16-de78-4dd6-886b-6d60ecac0fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:4c:2f:e0:cb:1c:1e:5c:a5:e0:75:70:a9:
                    e9:df:15:22:32:e2:b8:15:3c:72:f2:b8:db:39:c6:
                    aa:0c:cf:58:d0:18:c0:f5:87:c9:13:95:dc:bf:37:
                    0a:77:69:fb:2f:75:33:e9:86:33:ab:34:3c:3e:63:
                    0f:95:4b:97:09:10:6e:93:3f:2b:e0:1d:4f:a4:c2:
                    f7:45:f6:76:c1:4c:9a:bb:65:10:f2:4d:f5:2f:01:
                    00:bc:5a:12:6b:8a:6a:98:dc:93:4d:16:2c:b7:ff:
                    1d:95:36:eb:d2:83:e0:41:77:ad:19:4f:54:d3:b9:
                    a3:32:d0:2a:cb:d3:d0:9f:16:21:89:04:29:ed:1c:
                    5a:2b:ad:d6:ee:1f:b9:7f:58:0f:80:11:c4:31:77:
                    f0:34:e6:fa:a4:d2:35:0c:96:e6:31:50:fb:3a:29:
                    68:03:7a:f0:ec:2f:f7:e2:9b:9f:25:12:c8:b2:ee:
                    85:71:fe:c6:eb:33:fb:a9:0d:22:b5:f8:89:90:8f:
                    9e:e7:04:52:11:a5:b4:8f:ae:f6:2c:12:6c:93:c7:
                    d8:35:f1:0c:13:5e:56:c4:34:37:a4:c1:21:44:c3:
                    75:60:9c:f3:ca:32:fa:70:d5:7b:82:dd:bb:ad:2f:
                    a8:99:4c:06:e9:8b:94:c0:59:7b:40:52:f8:37:71:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:36:13:C2:DD:72:BD:63:4E:C0:50:D3:DB:0A:80:B8:AB:7C:04:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:de:f7:06:32:cc:7e:88:30:7c:77:30:b4:0d:8a:e0:c0:3c:
         45:01:cf:ca:0e:37:77:1e:1e:e2:b9:20:61:32:53:5d:d7:a2:
         17:6a:39:11:bd:c6:0f:7a:d6:29:a8:4b:8d:3f:dc:cc:61:63:
         91:fc:27:a6:5e:25:63:39:44:21:bd:df:7b:09:28:12:7a:e2:
         7d:b6:0d:6b:25:1e:c7:85:43:9b:03:12:a6:53:9e:e0:98:d3:
         e9:a7:7f:05:ab:5e:3d:dd:af:f8:2c:31:0f:a8:0e:9f:2a:f6:
         54:ad:31:d7:0c:89:e7:28:e6:65:99:be:36:63:75:a1:db:cc:
         c3:fa:a8:11:f7:a4:2e:f3:3c:fb:aa:dc:9c:ad:e3:8d:07:7e:
         38:0d:88:1b:ea:6f:8a:cf:01:0e:f9:2c:a6:fb:4d:27:cf:18:
         d1:d3:c2:2f:01:94:ba:e9:fd:f5:f7:14:89:98:47:fe:9c:17:
         5f:6b:e2:e3:47:ea:aa:66:05:af:87:bc:45:3a:76:9a:8c:2e:
         c3:5a:85:bd:00:9e:2b:d0:f3:9a:55:69:56:76:47:63:e4:8e:
         d2:20:81:67:c6:8f:ae:ec:ba:b1:5e:9b:90:20:93:e2:aa:b0:
         50:c7:63:2e:3a:50:31:0e:0b:5d:45:b6:09:8f:d8:c5:64:b7:
         01:6c:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:08:00 2025 by rpki-client