Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1849bcbc-4a78-3d71-ab89-c4deed2dc2ed.roa
File:                     1849bcbc-4a78-3d71-ab89-c4deed2dc2ed.roa (raw, json)
Hash identifier:          924E2SSpKDLv3dtlXQnLywFfVu0GiV5dQk1/pS5anCk=
Subject key identifier:   67:27:E4:C5:BE:0E:09:F2:74:01:1E:42:1E:D8:88:6B:D4:BE:6C:32
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F43285848BFF4EEF35A1C87FAB83B7400
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1849bcbc-4a78-3d71-ab89-c4deed2dc2ed.roa
Signing time:             Sun 02 Feb 2025 14:19:48 +0000
ROA not before:           Sun 02 Feb 2025 14:19:48 +0000
ROA not after:            Sat 03 May 2025 13:19:48 +0000
asID:                     6079
IP address blocks:        198.1.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:f4:ee:f3:5a:1c:87:fa:b8:3b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb  2 14:19:48 2025 GMT
            Not After : May  3 13:19:48 2025 GMT
        Subject: CN=1c565ce2-c2c1-41ca-81d6-0750d6a69124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:a1:fe:87:65:a8:21:d1:cd:80:d7:de:38:
                    71:dd:43:a8:e7:03:04:17:b7:a5:ac:93:3b:72:2d:
                    69:af:20:35:4b:3a:c7:03:21:c4:02:c9:cd:0d:84:
                    9b:dd:1f:f5:e1:03:7f:22:f0:bf:5e:b0:87:84:c5:
                    af:7b:e1:b2:5c:b8:d0:d3:01:7b:44:09:87:bb:e4:
                    65:77:50:f6:db:79:fc:60:06:f4:c7:f1:07:fd:60:
                    06:9f:65:af:c9:93:af:4d:c9:8e:00:34:1e:5f:0f:
                    9a:0c:fa:3a:81:ae:56:d1:4d:1a:80:c9:ab:11:92:
                    12:01:55:d9:dc:15:30:e9:cb:85:03:e8:e8:6e:11:
                    84:aa:7c:a3:b7:7f:02:a9:ba:d3:63:46:2d:5c:52:
                    f5:ee:35:d8:d7:57:dd:fa:c6:65:9e:25:19:07:d4:
                    a8:3f:5d:2f:71:d5:7c:74:c8:a4:48:2b:63:c3:52:
                    7f:d3:38:d7:33:0a:98:90:49:81:fd:f1:b1:14:2e:
                    d3:10:7f:2b:ce:28:35:1f:34:27:af:2d:61:36:d0:
                    78:03:dc:e0:d3:af:1f:a5:12:56:06:2e:69:80:2e:
                    1e:79:a8:b1:b5:ed:71:21:65:b1:bc:33:c2:6a:4b:
                    13:48:7e:80:ad:68:9f:36:a0:cb:ae:df:00:30:52:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:E4:C5:BE:0E:09:F2:74:01:1E:42:1E:D8:88:6B:D4:BE:6C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1849bcbc-4a78-3d71-ab89-c4deed2dc2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:ca:4f:98:c1:96:88:d1:68:5e:82:5f:3b:ef:5b:83:94:
         4a:17:bf:9c:7e:2a:de:c2:49:9d:cd:b0:ae:cc:ce:08:ec:2c:
         16:0a:3f:29:43:96:d4:7a:a2:bc:a1:15:24:4e:2e:f4:38:e8:
         13:5b:49:ac:43:8b:28:77:c7:85:b7:3f:21:dd:f8:a9:7c:14:
         f9:78:1d:77:d3:f1:ae:fc:7d:bd:ae:62:b2:da:f5:c5:83:5e:
         3d:f6:6c:c3:d3:ce:db:3c:70:8c:be:36:4a:1c:bd:40:ea:9f:
         33:26:ed:f1:ec:a5:92:71:8b:30:88:55:83:b2:b9:8a:41:bd:
         1a:e4:bf:ba:61:47:a8:dd:34:55:cb:75:7c:fa:3c:15:3d:ff:
         48:08:92:9d:0c:ce:9f:78:dd:ae:a6:5e:38:8d:42:08:a5:2d:
         56:3d:33:df:90:3a:4a:83:ef:a1:c6:57:22:cc:c6:31:aa:81:
         b2:df:05:53:30:05:8d:79:87:a6:1c:37:49:d5:82:a5:f2:97:
         48:d0:bf:9d:17:f8:b2:4c:b5:2c:31:f3:47:a2:ef:f9:c4:0e:
         5a:b5:08:11:67:4e:02:ac:25:dc:be:45:ae:ae:11:83:dd:8e:
         b6:eb:fc:47:ca:60:86:59:2b:a5:a0:5c:10:bd:83:b2:a3:e1:
         a9:dd:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:45 2025 by rpki-client