Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
File:                     a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json)
Hash identifier:          crgOp55RbAkQ5Tnp/+G7yVqBKE1NZH7hVOkGqmrCq8Q=
Subject key identifier:   7A:53:75:A7:46:50:C2:CF:B4:3F:52:E8:B0:89:80:99:21:76:7F:25
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584A050A7D300A68D4E4A7C1D520
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     17024
IP address blocks:        198.135.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7d:30:0a:68:d4:e4:a7:c1:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=5a51d8e0-67d1-4ff1-a661-263995a2ae84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:64:35:66:9d:b9:fc:df:55:b4:ca:5a:1e:
                    79:0c:52:35:03:73:44:7e:1f:0f:00:95:1a:12:b4:
                    ae:e2:5d:ff:84:3b:fc:3b:47:99:4f:d4:f5:4f:2f:
                    ae:7d:69:cd:39:d6:3f:74:c6:69:cb:65:50:66:b5:
                    8a:0e:ac:b3:f4:ff:07:3d:00:56:4d:d9:01:85:16:
                    64:df:58:da:bb:d7:20:c7:6e:f9:96:c7:ef:32:07:
                    73:51:ff:f5:72:71:51:a2:51:43:a7:92:94:e0:fc:
                    aa:ee:87:4a:be:d0:37:e0:69:1e:f5:7d:5a:a6:78:
                    9d:e7:83:14:50:31:4f:1a:12:c1:6e:3b:e9:ca:7c:
                    25:fb:57:16:fa:81:6e:1c:57:f3:13:6d:8a:1b:1a:
                    22:16:8d:d6:21:f9:c5:49:a9:da:e5:45:70:95:e6:
                    6e:d5:d0:36:be:91:94:45:3c:f8:24:4b:a6:10:8c:
                    3a:4e:8b:e9:ed:36:7d:16:51:f1:24:af:45:d5:40:
                    5a:dd:eb:d6:99:01:da:af:2b:e7:51:e0:c9:d6:69:
                    a1:cf:77:15:18:df:ad:d7:a5:99:ab:d3:53:50:ad:
                    61:f7:31:3c:5b:89:74:52:ce:78:2d:ae:e1:48:b7:
                    f3:e6:5a:a7:6e:fe:6e:87:48:cc:a5:db:af:75:e3:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:75:A7:46:50:C2:CF:B4:3F:52:E8:B0:89:80:99:21:76:7F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:d2:bb:b9:ce:a7:ca:7a:2b:52:ef:e4:b3:00:4a:bb:82:
         49:e9:76:4c:1a:28:09:5f:f6:0e:c1:1b:c0:82:a3:96:c5:b7:
         46:34:27:47:b2:3a:1d:b9:11:a2:1d:02:5a:30:5c:93:50:ff:
         96:5c:fa:62:d0:81:f4:e7:93:76:8b:3b:e0:51:04:ea:51:97:
         53:d8:9e:f4:fe:ad:d4:c2:35:80:87:6c:6b:2c:9b:bd:26:ad:
         23:03:9b:77:3b:b0:03:0c:37:b3:60:68:1e:15:bd:fb:68:a3:
         44:8d:4b:f6:e8:27:23:65:7e:ac:1b:8d:34:32:50:48:36:bf:
         86:37:86:54:95:b4:f3:69:72:7b:a7:40:f1:6c:f4:3c:2a:17:
         58:fc:6f:ed:a6:42:64:05:5b:68:12:9a:3e:98:2d:ca:6b:0a:
         96:bc:4f:42:24:44:10:38:5b:23:01:8a:12:da:78:33:eb:2e:
         22:35:f3:7b:b9:81:03:1a:7a:52:25:52:97:83:14:24:26:b1:
         54:bf:2c:ee:f5:57:a9:c9:24:bb:3d:bb:15:65:17:e4:17:b6:
         fb:4b:9b:2e:c5:90:94:1b:44:ab:44:92:8c:2f:da:01:55:be:
         a0:0c:b9:ca:10:d1:83:81:2d:1e:e9:30:42:79:e1:79:85:88:
         f1:00:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 03:30:00 2025 by rpki-client