Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa
File:                     6ce7d7a5-b002-382e-8094-978c1c15f725.roa (raw, json)
Hash identifier:          CHhaGuoAqM0ZS+P65X5I3Oo8pAe0cLfdgC6ciosWSFQ=
Subject key identifier:   27:51:C9:85:C8:DC:BF:6D:68:F9:4C:F3:0A:E4:12:D8:E1:BB:B8:7D
Certificate issuer:       /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Certificate serial:       010D0C9F43285848EF613886A986C2964D89A700
Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        199.47.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:38:86:a9:86:c2:96:4d:89:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=14b27e74-c877-4cbe-bf02-5309e87b306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:c1:d4:d8:90:3d:05:16:fd:66:b5:75:ee:
                    54:c3:d3:59:2b:84:20:9a:57:2f:65:52:f1:68:31:
                    dd:1e:d8:2f:09:59:07:8a:99:6e:8d:ea:75:c0:ff:
                    98:78:86:d1:a7:94:d2:f7:4d:c4:c3:7a:d5:12:68:
                    23:16:81:be:76:56:2c:80:01:ab:58:d1:21:0e:81:
                    47:29:6f:f0:18:55:da:63:fc:2f:95:10:ff:ed:5b:
                    51:81:ea:ee:a0:30:1b:c8:7c:37:d3:89:ed:1b:eb:
                    df:2f:fe:9f:09:b1:99:f5:3d:6f:9e:73:4b:78:62:
                    27:7b:4f:78:52:95:48:9b:88:15:59:3d:d3:b4:ad:
                    a4:f5:32:8d:41:98:34:44:9d:d7:57:98:fb:6c:a4:
                    2b:5f:01:3b:77:78:78:e4:84:1f:f0:96:84:48:f6:
                    85:00:0c:fc:2b:57:73:4f:a2:2a:07:7c:b7:b5:f4:
                    bc:1a:d3:88:a4:03:90:69:0e:52:62:03:df:91:2f:
                    35:c2:58:96:d7:e5:97:db:55:e2:1a:38:95:34:75:
                    80:81:d6:db:03:22:9a:87:36:40:8b:7a:82:2b:de:
                    93:ff:07:aa:1c:30:7f:e7:02:2e:60:16:df:ee:b9:
                    3f:93:8c:77:8c:aa:a7:f7:13:aa:15:d9:4f:c7:5e:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:51:C9:85:C8:DC:BF:6D:68:F9:4C:F3:0A:E4:12:D8:E1:BB:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:15:54:70:4b:4f:64:ed:a1:1f:15:43:4d:04:b2:2a:90:7b:
         bc:12:0b:71:f0:dd:ec:c7:8c:af:17:6c:a2:d9:8c:34:37:5e:
         10:9a:7c:96:45:f3:9b:8c:84:73:35:9c:bc:f9:af:a3:df:ac:
         7c:f8:98:58:c3:a1:b7:be:e2:aa:98:65:7e:33:28:b4:3c:38:
         58:4e:47:45:8a:f6:64:69:f1:de:57:e9:3c:0c:45:c4:6c:38:
         f9:67:f6:2f:59:29:59:d0:ab:dd:98:17:ca:42:26:78:d5:89:
         5a:ed:29:0f:6d:ab:01:12:50:1c:c9:8c:b2:04:c6:f9:78:4a:
         c8:0c:c6:34:a3:97:bd:0a:bb:87:73:bc:a2:dc:a2:0d:84:fe:
         97:08:00:de:9e:e7:58:0f:22:1c:22:9e:4e:b6:8a:c6:02:64:
         ab:5e:1f:30:1b:c4:de:b4:d3:c3:3d:40:c7:7d:b2:89:22:5b:
         9e:df:0b:55:e1:4f:ee:a9:4b:2a:53:5b:a3:36:bf:e9:fc:74:
         be:6e:81:31:54:50:2b:e0:22:75:ac:48:fa:54:b0:b5:ad:b7:
         2b:e9:45:db:6f:12:de:53:f5:c2:47:cc:bf:0d:d7:88:a0:4d:
         b4:99:99:4c:84:db:6a:24:ea:0c:ce:e7:2e:f3:69:64:8e:56:
         fd:2f:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:30 2025 by rpki-client