Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
File:                     ef0050c0-8aa7-36b4-bac5-551957984623.roa (raw, json)
Hash identifier:          r0+uHED5AtYDsiGHpIlHr4b/leKw8IySQImEP1CCUUI=
Subject key identifier:   DC:72:74:F7:EB:E8:AB:0E:EA:B5:79:4F:33:CA:83:F4:E3:CD:78:03
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584938A02EB2915A2381C0EC3780
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa
Signing time:             Mon 17 Mar 2025 19:41:50 +0000
ROA not before:           Mon 17 Mar 2025 19:41:50 +0000
ROA not after:            Sun 15 Jun 2025 19:41:50 +0000
asID:                     49981
IP address blocks:        198.1.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:a0:2e:b2:91:5a:23:81:c0:ec:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Mar 17 19:41:50 2025 GMT
            Not After : Jun 15 19:41:50 2025 GMT
        Subject: CN=900d9dcc-63fb-4354-aa91-fe9d3cdaaffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:2a:7c:1e:e4:fe:21:03:06:a4:88:d1:84:
                    19:28:84:b3:c1:68:17:fe:b5:e0:34:9e:dd:d3:bd:
                    85:88:ca:47:10:dc:b2:d8:db:aa:ed:f5:61:7d:94:
                    af:57:f3:dc:20:c0:48:8e:fe:39:d2:5e:d1:a6:51:
                    c6:dd:89:74:7d:ae:2a:a1:5f:f8:13:78:fc:8c:9b:
                    04:38:ee:af:7d:a9:45:6c:4e:ce:7c:b4:21:9f:88:
                    74:07:32:f4:f7:a8:fd:ee:bf:f3:ef:14:8c:88:5c:
                    08:9e:30:18:a2:a4:97:2d:32:82:cb:37:4d:87:39:
                    3e:5c:77:65:56:87:96:07:60:2a:d2:43:2a:66:68:
                    95:1e:e0:cb:15:39:f7:2a:a5:85:72:28:79:d6:99:
                    f5:e8:13:7e:ea:8d:27:95:92:3b:95:bc:58:92:9d:
                    fc:4d:be:27:1c:98:bb:fa:9b:a6:a5:cf:03:1f:65:
                    1f:86:8b:55:ea:a4:49:7e:00:3b:6e:a6:bd:70:9c:
                    a7:4e:38:a8:16:73:cf:65:d3:19:48:8e:9a:a8:5d:
                    fa:0e:6b:e0:90:86:24:f6:74:95:7d:b2:d1:31:16:
                    d9:ef:eb:78:f9:f2:c2:fa:ed:ed:dc:28:d0:73:78:
                    fd:aa:2c:9c:4c:81:10:57:14:ed:28:fd:55:e6:99:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:74:F7:EB:E8:AB:0E:EA:B5:79:4F:33:CA:83:F4:E3:CD:78:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ef0050c0-8aa7-36b4-bac5-551957984623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:db:68:62:13:02:e3:10:3b:eb:6f:2b:31:b4:39:c8:b8:
         d4:b7:4d:23:dc:5e:43:1a:3f:5e:24:1e:44:9b:1e:92:cf:b3:
         c3:2d:84:5b:03:ec:c1:02:59:39:75:d0:12:d0:f7:bd:38:62:
         37:81:0d:1b:ce:7b:be:6e:1d:5e:43:29:8f:a4:49:b5:25:d0:
         78:a8:88:dc:77:77:98:d8:9a:a1:51:1d:24:45:3f:8f:06:ec:
         fc:f6:88:34:4e:88:6b:a3:9c:0a:34:e2:c2:95:e4:b9:b3:19:
         76:7d:2f:68:de:c8:1a:aa:85:63:93:cd:23:fc:e9:96:02:7a:
         00:f5:77:e1:42:e2:2b:d1:c2:b3:2b:47:6b:63:fd:9f:e9:d8:
         73:25:ea:a8:b8:a2:6b:92:aa:ff:70:6c:82:59:ec:ee:30:95:
         9c:7e:57:08:b0:df:ff:62:e3:d3:e6:34:d5:55:24:96:98:7c:
         1c:c4:0d:43:6e:f7:f6:ef:f5:2d:0b:3a:6a:6d:cc:85:64:84:
         7f:a3:21:c4:27:51:bf:87:bb:3e:2f:f0:01:d1:2f:80:f7:35:
         ac:3f:c2:62:e9:6a:98:df:fc:84:f7:46:81:d6:d2:66:b8:4b:
         7c:a7:e1:46:9d:b6:df:14:61:a3:85:90:b4:96:77:0c:9a:5c:
         ab:c7:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:42 2025 by rpki-client