Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa
File:                     c552fca0-c03d-318a-8de6-dedb585a74d7.roa (raw, json)
Hash identifier:          Sqi70zbXfRwiWaFQhANZG4B5dpaVBAbCN7p0/vfC2eY=
Subject key identifier:   65:AB:26:C0:40:66:62:8D:02:20:4B:DE:C0:B2:9D:2A:DE:61:DC:3B
Certificate issuer:       /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
Certificate serial:       010D0C9F43285848C6E635F0A571A433A6D4A4A0
Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        198.235.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:35:f0:a5:71:a4:33:a6:d4:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=cde26952-f45f-44dc-99a4-3347a7374303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:49:64:af:3e:de:3b:bb:b5:57:5a:60:72:
                    3c:57:1e:fb:78:66:23:59:9c:62:34:db:6c:c4:71:
                    0c:c5:98:f3:50:ad:49:bd:17:67:d7:ca:bc:0c:4b:
                    70:f5:31:62:86:43:42:d0:d2:0d:02:ba:2f:c9:80:
                    e4:f4:e5:b8:05:9e:ce:11:f5:cf:92:40:ae:b8:9a:
                    b4:99:ab:cd:e7:e1:60:bb:e8:37:8c:b3:75:ee:42:
                    44:1b:73:a3:58:fe:28:42:35:12:3b:18:15:be:39:
                    22:b2:8b:1d:76:6c:36:14:94:f1:7f:e7:52:fb:ee:
                    50:41:ee:85:4c:ea:9f:be:5e:c6:65:84:72:27:08:
                    8a:06:30:21:50:51:f6:4c:50:56:a4:82:dd:27:07:
                    f9:de:5c:7e:fd:18:1a:3b:e7:ab:6d:83:ad:9a:86:
                    c2:4c:87:ec:e0:7b:a3:2f:b9:47:af:d5:22:55:82:
                    0e:97:98:17:5a:12:9d:bf:57:87:ea:c3:bd:fa:9e:
                    9b:c1:23:32:4b:51:87:1b:da:0a:b4:cd:75:8e:6a:
                    7d:5e:5b:73:f1:6c:65:ae:b0:3c:0a:eb:20:ea:04:
                    a2:f2:ee:3c:bd:2c:50:40:50:0b:34:ed:68:69:22:
                    5a:87:18:6c:cb:4a:f8:77:ee:52:ec:e5:7d:46:cd:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:26:C0:40:66:62:8D:02:20:4B:DE:C0:B2:9D:2A:DE:61:DC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/c552fca0-c03d-318a-8de6-dedb585a74d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:f5:9c:7b:fb:43:00:aa:fb:da:22:43:1f:d2:3e:a8:da:
         26:6b:e4:3a:af:1f:04:fc:4c:d1:0d:ce:85:a6:bd:05:81:c4:
         bc:38:b7:93:0c:8b:9e:3c:f3:e3:b8:db:23:1e:c7:70:10:f6:
         3e:2f:2b:22:b7:64:23:93:7e:18:c7:96:51:80:25:18:bd:b6:
         2a:57:68:b9:4a:cf:b9:4c:82:4f:f3:26:6c:14:9e:cc:e2:fe:
         21:39:16:08:d5:bb:d4:09:a7:81:85:e9:cc:5d:3a:9f:b5:53:
         ef:5c:90:8c:91:11:80:29:6f:4a:e7:c7:52:7f:b0:96:97:d0:
         dc:0f:19:8a:4e:95:09:5c:bf:72:09:9f:8d:b0:cd:76:11:23:
         07:bf:76:a0:ba:7e:18:35:d5:59:88:26:9b:fb:e8:2c:ea:ce:
         c4:d2:4b:9e:16:3e:c5:3b:63:08:5b:b5:07:00:b2:1c:66:fb:
         ab:dd:73:13:fa:67:f9:2b:76:06:6d:76:69:53:3d:a6:a8:ca:
         ae:e6:0a:9e:dd:0a:fc:58:e7:0b:68:0a:0f:b5:12:05:11:a0:
         43:45:03:fb:46:21:3b:4b:8f:93:ba:47:fd:52:f0:bb:bc:93:
         b7:c6:ef:4c:1a:f7:91:79:cc:17:cf:6e:bd:7a:29:53:95:c8:
         60:27:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:59 2025 by rpki-client