Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
File:                     6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa (raw, json)
Hash identifier:          t9yRIc8yvCKLoLDBtd9xW5mO/10zKVlCJrFsWrff+1I=
Subject key identifier:   86:A9:1E:7D:D4:BF:31:9F:10:50:E0:F2:79:C7:26:8A:5D:97:55:98
Certificate issuer:       /CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
Certificate serial:       010D0C9F43285848EF613618E0E954576716B580
Authority key identifier: 0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14697
IP address blocks:        198.168.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:36:18:e0:e9:54:57:67:16:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=1f5f11d6-9d3e-4a42-9f06-2498b4dbef2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:0c:81:a1:68:fc:16:dd:1e:3b:6e:03:8e:
                    71:eb:29:61:0f:94:0c:2c:52:bc:2b:fc:2f:74:e2:
                    05:32:12:aa:4a:07:c2:3b:b7:e4:98:3b:87:38:fc:
                    ed:2a:c8:bb:9e:3c:35:db:31:5e:5d:5c:99:0d:63:
                    c2:81:c0:75:d3:a0:1b:43:a2:48:aa:07:7e:b9:c3:
                    2a:de:15:f8:f1:76:6e:49:9a:10:27:35:7d:78:39:
                    a7:b5:f3:23:fe:85:71:1b:48:7c:19:1e:e0:0a:45:
                    53:c6:88:54:91:1a:1b:4a:2b:21:d0:a9:f0:b3:06:
                    80:a3:dd:a8:e6:28:4b:bc:98:8c:1d:f1:5d:69:0b:
                    60:66:5b:92:48:42:f6:c5:90:bb:e0:5f:33:8c:15:
                    77:1d:68:a7:a1:3d:a1:e5:94:01:0e:ef:75:20:e6:
                    a8:f1:74:db:50:34:d6:d1:2a:3f:ef:74:b1:60:61:
                    fa:0b:3e:63:27:6d:c0:96:33:9a:9a:50:07:22:da:
                    3f:a0:d6:b0:42:dc:9a:4b:b4:59:55:06:ca:3f:b9:
                    f8:23:b3:05:7d:a9:8c:b1:8b:04:39:a7:84:0f:1a:
                    d7:b2:86:ea:3f:8a:63:29:85:e4:2e:d3:a4:4e:70:
                    ad:c4:f8:aa:40:05:2f:e4:97:4d:49:f5:d8:86:a6:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A9:1E:7D:D4:BF:31:9F:10:50:E0:F2:79:C7:26:8A:5D:97:55:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl

            X509v3 Authority Key Identifier:
                keyid:0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:5f:2a:44:d1:4e:e4:df:3e:89:0e:9b:5a:e0:cb:4a:22:
         3a:b0:82:97:9d:45:7b:a9:6d:f7:3a:1e:01:96:bd:11:83:14:
         23:50:7a:ef:6a:de:9a:bb:9b:c4:1b:12:13:01:2f:12:87:fb:
         d8:30:52:a9:12:4d:23:6f:29:5f:0c:74:e9:f3:31:3c:86:ca:
         15:3f:d3:3e:16:66:64:bd:cf:c0:fc:d2:d4:78:76:ed:22:6b:
         f7:66:cd:42:1a:7f:c2:b3:32:da:e5:9b:c2:55:9c:10:13:9e:
         cf:7f:22:7f:58:6e:7d:40:c6:f6:19:25:53:2d:08:58:62:d0:
         f8:82:d1:5f:fb:82:72:85:d2:f2:2e:a9:77:13:a0:35:4c:0d:
         4f:d4:67:bd:40:46:6a:fc:65:ca:66:c7:bc:00:43:b8:ae:9e:
         66:e7:53:cd:17:c7:73:0f:d9:31:a8:f8:bf:95:72:65:9b:01:
         43:6b:3a:95:c5:58:ae:a8:be:8b:f4:10:57:a6:10:84:83:16:
         5f:ce:ce:88:35:09:1f:5c:c9:54:ad:02:aa:3a:8f:a4:18:2f:
         42:f2:8c:e8:06:6b:4b:8e:7b:b9:f8:ed:00:d0:af:d3:74:14:
         90:d4:ad:5a:7b:4d:d1:53:9c:6e:fc:c3:ac:04:13:56:a1:ec:
         f4:a8:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:21 2025 by rpki-client