Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
File:                     ce18774d-344f-36c4-9f23-6fece962f73e.roa (raw, json)
Hash identifier:          09HwXunKjM/1x+3TEvvcUTYCj5a7vG9u4Pb6VOtdsfg=
Subject key identifier:   99:5B:C8:41:9E:19:81:F6:CC:5A:7E:51:B6:0F:A8:88:2E:41:EE:2E
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285848FD56D13361D3C549113B23C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     2559
IP address blocks:        198.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:d1:33:61:d3:c5:49:11:3b:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=62d67b2f-7d1f-4d3e-b84a-59d30d1a3a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:3c:b4:45:ed:f9:a7:a3:35:46:5c:85:10:
                    55:98:0f:e7:53:98:91:11:55:30:c5:95:6d:0e:73:
                    d1:18:1a:8b:ed:16:0e:e4:89:da:ee:e4:3c:6e:ee:
                    2d:92:d3:1a:e3:42:38:13:50:84:fc:6f:5c:85:fc:
                    f1:11:e5:25:87:da:e5:e9:ac:f6:60:b4:79:4c:0f:
                    19:4d:03:2a:91:3c:86:a2:20:0a:f9:45:78:bc:97:
                    c5:c7:bd:57:d8:62:8c:6e:89:81:98:ae:35:ed:5e:
                    01:31:bd:ca:9c:23:c7:39:af:73:bd:c0:15:2e:35:
                    31:32:2d:6f:53:dc:d3:16:79:79:9d:65:21:39:ab:
                    e1:12:39:57:6a:4c:b1:03:02:65:da:e1:32:c1:3a:
                    7f:2e:07:cd:b2:6b:fc:53:b6:00:35:18:a4:90:89:
                    16:dd:be:b4:d8:9d:ba:0e:e7:c4:20:67:17:ec:b2:
                    ec:5d:bb:d6:bd:ac:8c:9c:21:35:d4:0f:ad:69:84:
                    bd:18:7f:0d:32:d6:97:6d:61:21:7b:4f:9c:a6:55:
                    68:1d:97:5f:bb:92:89:b0:34:cc:4d:79:7b:33:65:
                    fa:43:72:56:29:ed:27:61:13:27:75:db:6d:af:3e:
                    f0:21:3f:61:36:78:3d:e7:a6:5a:0e:9c:46:b9:e2:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:C8:41:9E:19:81:F6:CC:5A:7E:51:B6:0F:A8:88:2E:41:EE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:8e:5c:62:2d:f3:15:79:0e:75:03:20:47:d2:a2:1c:91:
         22:af:7f:c8:04:87:ef:d5:75:c5:af:7c:e7:2c:47:57:61:e9:
         47:08:51:54:dc:b8:41:5d:04:2d:f0:d2:40:f4:00:8b:fc:27:
         27:31:b3:7c:fd:84:24:b0:3c:55:80:bd:99:d1:2d:05:81:4c:
         b3:93:bb:4b:1d:32:c7:8e:15:9a:f6:b3:24:08:42:cc:de:1c:
         38:46:30:51:c5:44:4a:dc:1f:66:fd:f9:d3:0e:0c:d2:73:7f:
         e2:74:ba:d0:bf:29:c6:3a:94:9f:42:8c:ea:35:0e:68:f9:a7:
         fe:56:9e:7a:b4:4e:1e:02:92:a2:63:ee:aa:b2:e8:9e:eb:e1:
         2e:2b:d9:8c:62:99:d6:47:8c:89:b6:53:8e:22:af:a8:f9:79:
         d0:88:e3:fa:05:b2:cb:a0:ea:82:0c:0a:e2:39:cc:00:4c:bc:
         d2:a9:8d:23:84:fe:62:8b:9b:e3:ae:83:a4:60:9a:a7:54:a4:
         9d:64:f4:e3:c5:f6:15:8e:7f:d6:92:a0:79:6a:54:10:8d:d5:
         95:ea:9f:22:df:15:5d:a7:c1:d5:ed:c1:7a:7e:99:68:0c:0e:
         6a:ad:94:65:f5:d3:3a:8b:90:50:aa:a0:a4:a5:d9:5f:16:43:
         d8:98:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:02 2025 by rpki-client