Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa
File:                     a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa (raw, json)
Hash identifier:          FXPrYSazBqam8jyiDyspYSXPgU/i9j90ES/BHu7ifvA=
Subject key identifier:   50:0F:DE:69:B2:BA:C9:F6:33:91:6E:71:1F:04:CF:8C:82:F7:B7:D4
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F432858496CE4430D69F7C98B39883A40
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     62246
IP address blocks:        199.188.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:43:0d:69:f7:c9:8b:39:88:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=2e92acee-b700-4269-adce-1997ebca0935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:77:94:f7:5b:38:7a:f7:ed:46:bb:5f:83:
                    a5:e4:1a:f2:28:56:65:63:f7:10:27:3c:a5:21:13:
                    f5:eb:59:67:88:15:ee:da:b2:4e:97:26:d3:28:21:
                    6a:b6:0a:ad:e1:26:e2:db:45:07:93:d2:23:2e:7c:
                    8e:f8:51:cd:3d:a3:e0:19:a5:49:33:f6:5c:49:8f:
                    d7:17:46:68:a2:20:53:f4:cc:72:36:ae:80:eb:b4:
                    25:fc:fe:67:f8:52:e5:ec:47:be:a3:ad:ed:a3:fc:
                    f0:15:00:9a:d8:58:33:02:f4:77:33:c8:1a:14:86:
                    25:8f:e9:f7:16:83:f1:7f:70:a6:19:3a:1b:f4:0c:
                    85:f7:32:ba:7d:cf:92:f7:0b:f6:89:8c:d1:30:83:
                    87:07:64:eb:48:db:04:f8:51:d0:af:2c:40:f0:80:
                    a0:3a:19:68:b3:8e:b4:f7:b6:7c:eb:96:ee:f8:dc:
                    a1:e4:b9:e5:64:af:85:a9:ba:7b:4c:76:69:ee:fb:
                    f6:d2:fd:85:a2:2e:59:36:43:7c:66:1a:b7:c4:c7:
                    e8:ee:c8:9d:70:52:02:ea:ec:00:d6:0e:75:9b:1e:
                    e0:50:1e:79:d6:5b:31:1e:2c:b3:97:26:07:2a:81:
                    c7:3e:bc:c1:53:ce:33:ab:99:cc:12:44:8f:a0:d9:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:DE:69:B2:BA:C9:F6:33:91:6E:71:1F:04:CF:8C:82:F7:B7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:24:db:fd:1c:62:72:77:ec:fb:9e:af:3a:6b:bd:4f:9a:85:
         e0:b4:d8:db:98:68:7c:59:a0:98:fe:12:f0:79:ad:fc:93:8c:
         fa:23:c0:50:0f:49:01:7b:13:26:39:33:c2:8e:ad:7c:ec:6f:
         38:70:12:e5:35:1a:3e:a6:0a:5c:e1:29:74:4b:07:c1:b2:19:
         2f:e1:06:1c:57:80:51:1f:30:2d:b0:57:6d:1a:18:c1:83:03:
         42:e2:92:d3:c9:f6:c6:62:5e:8d:a1:2f:24:bf:a0:82:2c:5a:
         3c:89:1f:7a:b3:b8:2d:28:92:a3:36:98:38:73:77:9f:25:cf:
         6e:e3:b9:75:77:c2:95:e0:23:00:67:4f:0e:c2:11:76:49:17:
         f8:9e:e2:85:22:5e:5c:07:8a:8d:fd:28:dd:42:b7:d3:80:2a:
         ec:c8:09:b1:54:50:79:13:05:31:22:8d:74:b1:26:d6:f3:ec:
         88:28:ce:e7:25:4a:51:a3:66:fb:4d:75:2e:13:a6:94:6f:47:
         8b:c5:83:10:93:7e:a2:6f:2c:0c:98:f0:db:d3:d3:5a:6c:0d:
         96:6c:29:15:1b:45:25:e4:88:5d:b5:b2:e6:2e:40:98:4e:67:
         bc:4b:ff:ea:0f:13:53:e8:f1:8d:34:0e:5d:a5:99:8e:c2:69:
         b2:01:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:03:01 2025 by rpki-client