Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
File:                     b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa (raw, json)
Hash identifier:          w6LLlYKDxCsT0jUPHoRaNizYQHkGr/DRmthdee+hMWc=
Subject key identifier:   A9:F6:C1:21:0B:1F:09:67:96:A0:40:58:D0:F4:2D:B2:64:F8:26:58
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584A06B727261A7E795C7BBF8CA8
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
Signing time:             Fri 30 May 2025 15:24:39 +0000
ROA not before:           Fri 30 May 2025 15:24:39 +0000
ROA not after:            Thu 28 Aug 2025 15:24:39 +0000
asID:                     26548
IP address blocks:        198.45.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:b7:27:26:1a:7e:79:5c:7b:bf:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May 30 15:24:39 2025 GMT
            Not After : Aug 28 15:24:39 2025 GMT
        Subject: CN=afeacc03-3de0-4092-a813-b52716545241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:1a:bc:48:fa:ca:42:52:76:39:9e:ea:a5:
                    d8:d6:07:c4:20:0c:6c:48:57:6e:5b:8f:a6:9b:21:
                    ce:9a:aa:1d:3b:b0:fb:24:c6:b4:9a:14:c2:5c:73:
                    a7:b2:e1:f1:78:64:52:d3:13:3d:52:c7:55:45:e2:
                    cd:44:f8:2d:a9:ed:55:65:3b:9f:ac:a6:60:65:31:
                    3b:72:46:6e:e7:b2:f2:d5:8b:ef:b7:57:ae:57:ae:
                    9e:99:0d:dd:c2:1f:f6:f4:d1:26:42:da:c3:81:a7:
                    a5:5d:06:cc:14:45:fc:2b:9f:37:65:05:6c:66:6b:
                    f7:0d:7d:5e:33:af:f6:da:f7:e7:50:b3:df:67:39:
                    0a:2b:de:df:97:19:90:c1:ee:37:27:7c:5b:b9:41:
                    d2:c7:1e:93:50:90:2e:68:94:72:de:1f:a4:35:77:
                    b1:97:9c:7c:7f:36:ae:b0:1d:4d:ff:32:68:4d:61:
                    81:9f:c2:f5:d2:27:03:aa:57:03:2d:97:d5:c2:0a:
                    14:28:6c:9c:cb:f2:7b:e5:86:04:22:d4:1c:d5:91:
                    81:86:39:a5:a3:c3:44:75:2e:21:8c:c7:c2:f6:ff:
                    7e:28:37:3d:d9:81:4d:87:3e:fd:53:d2:ca:f1:45:
                    f6:e7:24:d3:12:ba:2f:cb:b5:96:4c:dc:e6:90:33:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:C1:21:0B:1F:09:67:96:A0:40:58:D0:F4:2D:B2:64:F8:26:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:37:19:10:fd:61:a7:e6:ab:db:3f:5e:6c:a5:7f:35:09:
         d6:b5:78:a2:2a:9e:ac:ce:13:30:35:68:39:3f:dc:d7:85:12:
         af:54:b5:a5:16:e4:ee:07:4d:87:59:3b:78:6b:da:ac:3b:89:
         f5:ed:4b:ba:6e:39:30:bb:1e:dd:48:1f:98:e4:ed:c5:21:e7:
         ca:68:d6:fa:63:67:dd:f3:e7:62:bf:cc:fa:d6:d6:8e:01:33:
         39:7b:98:c5:59:b9:b7:fb:f1:f4:6b:f7:74:00:31:57:52:c3:
         87:6b:a3:61:c8:73:a8:a2:b6:7d:89:14:6f:d7:ca:55:93:95:
         4a:02:58:99:25:cb:62:32:a2:27:4c:9f:76:bf:7e:c1:38:39:
         58:e5:d3:97:ea:a0:43:95:b3:b8:d7:b2:1f:3b:d0:2f:94:5c:
         49:ff:2f:75:6c:da:cc:f6:5d:a2:ed:23:d6:da:21:f2:54:f4:
         22:fc:30:f4:bc:78:10:9f:82:15:82:4e:82:d9:eb:21:b6:ad:
         70:43:1a:a0:e8:16:40:d2:51:28:8c:e9:65:a3:8f:66:13:9a:
         35:1c:7d:01:fc:11:da:bb:a7:ef:b8:c5:ea:93:e6:c5:91:d2:
         9f:0e:3d:ad:a7:00:51:44:83:58:b5:32:2a:fc:c5:43:7b:c9:
         76:2b:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:21 2025 by rpki-client