Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
File:                     2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa (raw, json)
Hash identifier:          PD3wOIBuK+6LbkqJkiyq5uZxAzV3DBB0Lwu2teg8ftQ=
Subject key identifier:   E0:D6:F6:B6:4A:C2:66:27:1E:34:48:30:69:44:EB:0A:D3:D1:CE:21
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285848DD3BAA4AE8CA1B95DE9E8E80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     2559
IP address blocks:        198.241.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:aa:4a:e8:ca:1b:95:de:9e:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=31e66dfa-345e-4222-a689-148d26042606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:7b:07:b9:f2:c9:e1:38:61:d1:39:67:35:
                    2c:3d:1d:79:a2:7c:b2:49:3a:07:b6:47:10:91:65:
                    2f:97:ce:3b:69:0d:40:0c:a7:b2:69:65:2c:02:d1:
                    8f:c2:b1:ec:61:70:c0:7d:f8:1a:34:e6:3c:82:37:
                    7a:4c:38:dc:37:42:1c:79:fa:d0:3b:8f:19:84:9b:
                    a2:e2:2f:ba:5a:f9:e9:dc:8a:66:b5:a0:47:53:71:
                    f3:a9:ca:cf:36:f6:83:12:70:28:a9:20:c6:8c:e1:
                    b5:f4:2a:10:ac:9d:20:2f:70:c1:3c:6b:45:36:81:
                    8a:6c:e8:8b:75:fd:f3:46:a8:fd:99:d4:da:21:7b:
                    5f:08:cb:13:1f:eb:56:56:dc:53:d2:12:f4:41:93:
                    b8:22:3b:ee:7b:83:4f:fc:e1:d9:44:c6:20:cc:2c:
                    b6:4b:ca:b3:06:dd:e7:06:1a:3e:14:b6:96:2f:05:
                    bf:f8:f4:94:b1:28:3c:fa:9f:e4:1b:53:06:5c:59:
                    1b:13:c1:d1:6f:d2:91:98:82:75:f7:5d:20:a8:c9:
                    83:4c:bf:85:34:87:f0:69:06:c0:8b:33:fe:4e:e9:
                    70:69:48:5b:b2:cb:95:45:75:b2:a6:86:56:77:af:
                    97:dc:24:db:10:e9:d3:fb:42:ec:29:71:fa:d9:b7:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D6:F6:B6:4A:C2:66:27:1E:34:48:30:69:44:EB:0A:D3:D1:CE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:9b:77:d0:d7:b1:50:ef:2e:de:85:47:2f:0a:37:67:f7:
         3a:60:f9:cb:b4:0e:38:d0:00:59:b2:56:ee:45:05:71:1b:a4:
         4b:15:bf:58:49:02:d1:30:c3:4f:58:28:fc:34:f4:e1:99:de:
         7f:8c:52:3e:70:f0:f4:13:0f:e7:bf:01:bd:f5:5f:0d:66:62:
         43:12:dc:e9:d9:4d:f0:d9:e8:66:10:b0:4f:a5:2d:48:51:5a:
         8f:ef:d7:32:e3:c1:08:a9:af:3f:4a:cb:de:8d:58:cd:b0:a7:
         ca:52:ff:e6:6e:9c:4f:c8:2f:3a:aa:3b:71:51:06:6c:f4:df:
         0d:b7:1d:31:1e:fc:2b:2c:72:ea:7d:2d:44:84:60:d8:27:94:
         1e:bd:2a:2b:5e:80:bc:9f:b8:6b:cf:79:2d:60:9e:87:74:e4:
         30:cf:93:16:91:60:c9:41:a1:45:12:80:17:e8:03:b4:19:8f:
         53:00:d7:cf:36:64:4d:82:39:1f:8c:a8:5c:dd:b0:6d:40:dc:
         30:f5:e6:eb:09:40:2e:8f:d9:6b:ad:38:8d:d0:24:c9:87:b1:
         7b:4a:24:57:29:0f:b7:9f:39:b2:92:6d:8d:cf:97:be:c1:13:
         9f:b0:2e:a8:43:72:c3:6d:fa:27:28:20:b4:05:4d:f7:ec:f3:
         e2:cc:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:45 2025 by rpki-client