Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
File:                     229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json)
Hash identifier:          9PFEf2vlkJYXv2XlynQ7zTgDxi3eZh0Kr9AT5UVwKGg=
Subject key identifier:   44:DA:AC:96:AD:5E:DE:D2:18:5B:9B:52:A9:76:C9:54:33:E3:6A:76
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285849C904DF6F9FE31168B0CF0080
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     2906
IP address blocks:        198.38.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:df:6f:9f:e3:11:68:b0:cf:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=434be295-1076-4400-af75-cbbdce860d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:1e:1a:fc:30:13:57:79:27:b2:a6:e0:6f:
                    d5:ea:d0:78:c2:b8:be:13:c3:92:4b:d9:22:ed:41:
                    bb:b7:21:8a:eb:35:67:fd:58:5d:ea:51:26:8e:10:
                    b6:9d:04:3f:de:76:53:23:e1:af:c3:c4:c0:61:62:
                    cb:b3:37:15:bc:4c:68:b3:e1:30:e3:26:95:5f:28:
                    f6:b7:69:65:ed:a9:37:c8:98:ce:71:8e:24:67:44:
                    c9:2a:29:8c:1a:d3:6e:3d:72:59:bd:64:48:ad:b1:
                    ee:41:34:0f:8e:14:6f:fe:dc:d1:66:c8:12:14:e2:
                    1f:a3:ea:24:62:57:79:94:d1:d0:bc:f9:9c:b3:e8:
                    1c:01:fa:05:0a:a0:ba:a2:25:35:c8:76:ce:f5:26:
                    3f:6e:cf:75:cc:bd:a5:65:89:c7:da:b2:ee:15:64:
                    29:38:1b:7a:13:a1:80:2d:48:d6:8a:27:31:f9:73:
                    e7:f2:a6:fd:7a:ee:16:e4:2d:84:f5:fe:d0:75:69:
                    05:b4:65:79:6c:3a:52:82:97:12:5c:55:c7:48:53:
                    44:03:43:24:8e:54:60:21:d0:1b:2d:29:96:c5:13:
                    34:07:c9:bc:30:27:25:11:f5:d2:c6:74:8e:cb:1b:
                    5f:be:ea:1c:e9:9b:5e:17:d4:ac:87:26:67:63:c8:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DA:AC:96:AD:5E:DE:D2:18:5B:9B:52:A9:76:C9:54:33:E3:6A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:74:4c:ad:36:78:42:c7:5d:a3:c4:ab:3b:2a:bc:f6:da:
         53:0e:02:14:79:3b:ed:df:5d:27:34:b2:2c:a8:52:2c:e4:e0:
         7b:8f:d3:d7:5c:e9:52:8a:33:ee:54:86:25:19:a4:54:2a:54:
         00:08:7f:47:1d:ba:50:7f:27:5a:63:8c:71:d4:cd:86:d0:c2:
         80:c5:be:53:9b:d5:f3:fa:63:d9:41:6b:26:2b:e2:31:5b:43:
         46:73:3f:b8:2d:11:91:cb:6c:81:58:5c:d4:76:56:06:f3:da:
         ca:b5:ff:2f:66:61:91:2b:c1:ff:1f:be:11:30:81:00:18:6c:
         39:d2:e6:fe:e7:c9:a2:fc:c6:9c:57:ea:7f:18:88:aa:8e:f0:
         cb:d3:eb:a3:18:da:2a:b6:60:3d:9c:06:12:85:bc:7e:6c:fd:
         c0:2b:6b:fb:35:b0:4b:d9:a0:20:8a:68:d9:3c:bf:ee:b7:db:
         d9:5c:ec:5c:f2:14:99:08:7f:ef:8d:57:75:ed:4d:77:95:19:
         0f:72:23:a5:0e:31:8a:c3:58:a6:77:65:46:89:5b:2f:66:0b:
         10:44:c2:94:15:d7:ae:d8:69:8b:2d:31:7f:97:82:1d:41:f6:
         9b:83:26:fd:a3:e9:ba:3e:0e:97:a8:04:5e:fe:d2:6a:f8:d1:
         16:5a:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:25 2025 by rpki-client