Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0026092c-f29a-3d8e-a713-cf8c5f1be501.roa
File:                     0026092c-f29a-3d8e-a713-cf8c5f1be501.roa (raw, json)
Hash identifier:          uUgwoD6SvXBNbKTsZ6nMCeeWYUmgbX26R36XIxiwiMk=
Subject key identifier:   92:62:05:76:45:5F:4A:BB:2C:AE:C4:88:F3:3E:FB:38:90:22:1B:DE
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849674EF1AD5A0995ECB0217100
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0026092c-f29a-3d8e-a713-cf8c5f1be501.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     46450
IP address blocks:        198.145.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f1:ad:5a:09:95:ec:b0:21:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=acb9ee7c-18c3-4038-a31c-d744193f1203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:49:50:6e:0e:f4:7e:3c:ec:8d:1b:69:0c:
                    33:c1:48:73:42:44:ba:cd:30:42:26:c2:04:f9:70:
                    a9:63:c3:e1:66:28:f6:5c:bf:0b:88:81:32:d3:83:
                    41:fa:cc:8b:f5:9b:d8:3a:ef:27:8f:3b:23:f4:79:
                    33:1a:9b:49:cb:48:7c:bf:87:52:cc:02:a4:bf:00:
                    d2:5e:a9:11:64:75:8b:6e:ad:c7:0c:b0:31:e6:42:
                    0b:71:e4:33:a7:af:b3:73:e0:ef:a2:25:8b:c5:13:
                    9e:8d:fd:e2:66:12:cc:36:52:c3:f0:f2:a3:7f:d3:
                    c0:f2:30:c8:45:67:bd:3a:77:8b:d5:a5:d5:88:2a:
                    09:52:6b:97:fc:de:4c:02:32:2d:ca:74:8a:46:76:
                    8f:fc:a7:a4:29:67:88:2b:34:17:16:85:ae:64:bc:
                    f9:86:b3:b6:0e:ba:00:42:18:90:fb:bf:bd:4c:3c:
                    fa:d3:a7:f3:ab:c5:20:db:ba:b7:ba:49:1a:59:a1:
                    8b:3a:7a:59:2c:d5:5e:9e:ae:f7:1e:4e:93:a3:1b:
                    75:1c:a9:09:55:35:8a:97:f1:64:01:90:80:47:ae:
                    ce:83:52:ae:e5:cd:50:d7:ff:7b:71:6a:f1:67:4f:
                    a2:09:a3:fa:6e:fa:e8:cd:9a:49:0f:38:fe:05:99:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:05:76:45:5F:4A:BB:2C:AE:C4:88:F3:3E:FB:38:90:22:1B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0026092c-f29a-3d8e-a713-cf8c5f1be501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:c9:91:1a:d5:5e:07:43:4b:56:0f:51:ab:c8:72:1f:68:af:
         41:15:d2:0c:1f:07:31:bc:1f:23:d7:1f:dd:21:d4:49:46:b2:
         56:52:c6:e9:89:8c:37:38:07:9c:9c:91:15:7c:1c:59:57:e9:
         d9:cc:bf:e4:b6:52:e6:a9:d6:c9:b6:da:68:28:c1:7d:6e:1d:
         58:4c:9e:8c:dd:98:5a:65:c5:0b:71:ef:93:7f:1f:61:5a:53:
         50:80:54:20:87:a1:db:53:b6:ed:b9:00:e9:fb:26:fc:86:e9:
         0b:8e:8b:da:0b:41:33:47:bb:c2:27:0f:bb:64:47:79:b4:43:
         ce:85:a1:16:ca:68:b1:a0:eb:bd:db:93:ab:24:22:64:e1:d8:
         dc:87:ea:1e:47:06:8e:19:f1:0b:75:fa:46:9f:c3:9c:9f:e4:
         7e:29:d6:f1:6b:b3:c3:58:74:58:9b:c2:60:62:d2:d8:d7:95:
         1a:f6:7b:59:1e:3e:c3:38:62:d0:06:8f:2c:31:8c:1a:92:d9:
         73:4a:38:8e:4a:cd:2e:36:83:9e:28:1d:ef:c8:af:7d:e4:aa:
         18:16:c8:97:d8:d6:b1:81:bf:ae:eb:8d:92:a1:7e:f1:43:1e:
         d2:73:f8:ec:1b:b4:62:bc:ec:07:27:14:c6:95:81:36:fd:b4:
         67:93:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:02 2025 by rpki-client