Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa
File:                     46e9f517-eb87-34a5-9509-23f3b4683a98.roa (raw, json)
Hash identifier:          IsTG2AF+dyhOBgsIYBAhVy4gbhLBu1dX9scqJKLZNww=
Subject key identifier:   B3:F2:A8:FA:D3:5F:C8:A8:DB:8B:82:8D:01:A9:68:0F:77:AE:F0:F3
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858492E13BE811891EF153DD424E0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     32780
IP address blocks:        198.145.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:be:81:18:91:ef:15:3d:d4:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=1172b7ac-626b-454d-9ca6-aecec602751c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:67:76:b4:44:2e:3d:cc:a8:70:1e:7d:90:
                    ed:4b:03:04:1a:80:09:c1:1f:82:aa:9b:cb:04:f9:
                    3b:f2:9f:40:9f:c9:dc:c5:5b:c0:40:4b:46:24:1b:
                    a1:9d:41:96:62:6d:8d:d7:68:98:3a:aa:17:bb:2b:
                    21:a8:8a:ed:f4:af:0a:08:17:98:b6:01:13:2b:7c:
                    f3:2a:53:9c:9c:39:0e:e3:e2:6b:2e:3d:1f:c0:d0:
                    1c:1c:da:a8:1f:7a:1f:e3:91:9c:34:2a:b2:7c:9e:
                    e7:9c:f6:99:77:bf:48:03:ee:a7:ae:76:eb:fe:02:
                    fc:1c:f0:1b:0d:d5:7d:5a:6c:0e:ef:8b:ce:5a:23:
                    45:f0:03:06:75:12:ba:fc:f0:17:1a:1b:76:b3:24:
                    40:46:6a:1e:77:15:eb:70:ca:06:a3:05:54:4f:89:
                    a8:0a:15:c1:2e:b4:ce:96:05:2c:99:d1:33:3c:51:
                    32:bc:3c:53:c9:7e:fd:6d:be:74:de:0a:e3:47:9d:
                    6a:f2:94:2e:de:57:65:d7:89:a4:aa:ad:12:67:7f:
                    c8:6d:aa:47:a4:f5:25:db:ac:cf:cf:31:f6:d0:9f:
                    31:66:1c:4c:b4:98:9c:68:3a:cf:06:92:1c:fc:68:
                    be:cf:80:5f:aa:34:39:8f:72:be:14:c8:4e:2d:92:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:A8:FA:D3:5F:C8:A8:DB:8B:82:8D:01:A9:68:0F:77:AE:F0:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:96:75:d5:6d:2e:15:4a:5e:73:66:ac:b0:1f:af:d7:63:
         09:20:59:a8:89:dd:1c:7b:26:df:11:7c:58:4b:97:9e:7a:87:
         88:87:46:b0:fb:e5:04:11:79:11:11:4a:fe:f6:6f:8a:88:97:
         2e:2b:5b:7e:21:97:9e:a1:30:a7:e4:3f:98:fe:12:66:80:d9:
         e4:50:11:86:b0:0e:24:23:0f:5e:d8:23:3d:da:6c:01:f6:81:
         cd:10:12:72:50:f3:5d:f6:c2:2a:4e:c9:87:ee:01:98:00:ed:
         51:36:5b:03:10:51:8e:3a:fb:80:dd:90:e9:22:1c:6f:48:f4:
         88:36:77:f8:40:d9:7a:fc:ec:32:1a:ea:d7:00:ea:e2:46:1a:
         a2:02:9d:17:30:2b:df:65:2b:ca:7d:3a:3d:33:ae:95:25:e6:
         b4:e1:4e:bb:b3:b3:89:83:ab:e4:67:13:37:ed:db:67:6a:18:
         04:2f:b1:cc:9a:0e:68:0f:c5:3a:54:ff:5e:88:28:b6:15:47:
         6b:fc:59:24:51:15:f8:5f:d0:78:a8:ee:98:70:1e:d7:9d:7f:
         04:f0:71:82:28:27:93:89:80:cc:ea:12:63:db:29:b9:da:65:
         8c:4f:0b:81:30:34:6b:f3:20:e9:ad:58:0f:08:c3:fe:cd:07:
         9c:44:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:58 2025 by rpki-client