Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa
File:                     3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa (raw, json)
Hash identifier:          Dl6+RLMn/VWDRmtaIZ97HjbxA0iw7YZWPlNk15ybW7w=
Subject key identifier:   D1:34:F8:3F:8D:FB:14:2E:54:37:A4:64:0C:9A:01:CA:07:D2:4C:B4
Certificate issuer:       /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
Certificate serial:       010D0C9F43285848D2113E9ED3453C1FBE901800
Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     22840
IP address blocks:        198.245.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3e:9e:d3:45:3c:1f:be:90:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=3a1d1756-d3a5-4d2f-b33e-a61c7ae1761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:28:c8:bc:f0:6e:72:fe:36:1c:c8:7d:cd:87:
                    cf:7a:56:f2:3c:73:8a:2b:ef:a0:5d:b3:1a:a8:44:
                    d2:0b:e9:55:c4:fa:80:3f:05:ba:57:28:a5:a2:38:
                    e0:c8:f6:eb:61:a2:4b:20:4c:e1:31:7a:94:ec:d0:
                    1c:fa:06:08:0f:cf:7d:ca:9c:88:44:61:91:12:40:
                    7c:eb:0b:ce:d2:bf:2a:73:1b:7f:9f:ce:81:d1:4f:
                    76:04:78:93:55:1a:ba:ef:6f:a4:c0:79:31:65:59:
                    09:6f:a0:f4:18:23:28:19:27:1b:97:d5:45:df:48:
                    11:18:2d:47:3d:0f:db:f1:42:b9:f1:58:05:77:a7:
                    ea:23:60:54:38:1b:7d:26:81:02:7c:d5:a7:62:00:
                    86:66:d4:41:d3:2d:94:7b:9e:0f:5a:c9:6d:2b:1e:
                    ff:a0:1b:13:a9:c5:53:36:a6:af:da:01:6f:cb:b9:
                    36:ad:2c:9a:16:40:81:7e:6c:08:92:37:78:05:69:
                    04:44:9a:a6:ad:24:87:3d:90:52:9f:a8:0b:bc:10:
                    b4:38:37:bb:2b:72:07:2e:02:6b:64:66:a6:11:e7:
                    ee:ed:cc:bc:e7:f7:c5:86:db:00:f7:8b:6f:55:3d:
                    ab:81:75:36:08:52:a1:53:7e:0a:5d:b0:9f:80:57:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:34:F8:3F:8D:FB:14:2E:54:37:A4:64:0C:9A:01:CA:07:D2:4C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl

            X509v3 Authority Key Identifier:
                keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:d6:a1:5b:49:12:3c:af:bd:90:a7:f8:91:66:ba:72:09:
         00:b8:79:5e:b9:11:27:73:b1:b9:81:4d:e6:7c:52:5a:53:5b:
         80:2d:30:57:ec:06:bf:0f:f8:76:87:75:10:9b:78:3b:70:af:
         38:19:22:53:70:1f:ac:f1:63:40:d9:15:02:cd:b7:52:89:35:
         22:04:9a:a8:54:c5:09:5a:76:d9:68:c9:17:39:ed:c2:22:3a:
         72:29:1b:20:56:ef:02:83:ef:ff:d5:37:ee:44:e0:b9:c2:2f:
         03:ae:78:a8:0c:c9:8a:f8:1c:74:3a:e2:96:66:d6:c8:5d:1b:
         cf:e4:ab:0f:7b:e2:d2:6e:6f:27:44:d5:94:12:c6:cc:8c:4e:
         d4:97:b1:d1:b3:9a:5d:b7:e9:7a:b7:5a:f0:9c:bc:2f:99:7a:
         ef:cf:14:c3:db:ab:75:49:30:e1:0a:d1:53:31:a8:52:36:a9:
         49:66:ba:4e:e5:fd:32:af:2f:b6:ef:c4:87:05:91:3e:20:d3:
         81:fe:81:56:66:cf:26:14:56:50:dd:23:5e:a6:87:31:66:28:
         fd:2a:9d:51:76:e1:0d:62:97:51:2e:c8:d1:63:7c:47:8a:d7:
         34:e9:9a:8d:98:16:58:a5:dd:9e:70:9f:fc:b3:33:a4:cd:5a:
         be:f2:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:35 2025 by rpki-client