Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
File:                     81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json)
Hash identifier:          dgTQ+LOAV2Mei/WXqH2dRfry1t25WMq4Lpra4mqMQQQ=
Subject key identifier:   D4:4F:6F:A1:78:CA:F0:EB:50:F6:8B:31:D7:20:DC:5E:E3:CC:11:3E
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F43285848EC96953E9F32594828BED700
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        198.137.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:95:3e:9f:32:59:48:28:be:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=d7b1740a-c11b-469d-a53f-2c40bba08422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:82:3c:cd:0f:41:9c:a7:66:f3:2b:64:dc:
                    50:fd:7d:7e:31:ff:c1:dd:d6:3c:45:ef:c5:72:e7:
                    c8:21:81:6c:d4:0a:a8:82:27:47:d7:a3:ae:10:48:
                    ad:77:8f:1f:51:cc:2d:4f:95:fe:c2:63:01:55:58:
                    4f:b8:be:55:6d:1e:03:21:8e:23:c9:ee:47:8f:15:
                    a4:46:1f:7e:b2:80:72:4e:35:7d:0a:f3:8e:9f:a3:
                    c5:9e:ae:9e:6f:53:22:34:3d:8e:27:9d:5b:be:e5:
                    01:c9:f2:70:2d:0c:a3:ca:a6:97:02:6e:36:da:25:
                    31:25:ce:01:11:82:44:9e:5b:0c:76:ba:fe:39:d6:
                    51:ec:9c:e2:42:40:d8:fb:0e:6f:3b:08:fc:55:94:
                    e0:2e:c0:c0:fc:ec:c9:67:b5:53:0a:ff:ce:5d:e2:
                    e2:ed:d5:2c:2a:bd:9a:eb:a7:fb:c1:b7:d6:61:12:
                    5c:94:66:6c:92:fc:37:bd:db:45:55:19:d8:54:da:
                    65:e5:14:70:a1:20:bf:5b:26:bf:a0:b6:3b:e4:71:
                    12:a8:a2:15:f2:2f:5d:02:1b:ba:03:52:e1:b2:07:
                    fe:4f:13:ce:16:a2:8e:44:b8:bd:ec:83:c3:07:db:
                    e7:e6:df:9f:f8:c1:69:31:91:c7:01:ac:c5:c9:ef:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:6F:A1:78:CA:F0:EB:50:F6:8B:31:D7:20:DC:5E:E3:CC:11:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:35:33:c9:aa:98:c9:c6:59:ca:a5:f9:ad:e3:fe:a8:70:
         5b:0b:5c:8b:ea:9d:65:5b:d8:86:cf:d9:9c:ca:61:3f:24:b1:
         5a:fc:94:18:e3:e1:a6:85:ae:f2:3a:a7:b7:cf:4a:a1:4b:fd:
         27:20:e8:82:80:77:7b:95:a8:a4:82:d3:44:37:63:15:2e:d0:
         a6:62:a9:99:76:7a:6c:1c:14:4f:7e:31:9a:48:5c:b5:6c:30:
         d6:07:39:41:3f:f3:0d:32:a8:37:78:0a:c6:d8:1a:b0:8b:c3:
         f9:cf:e1:c8:4c:95:ce:fc:ee:80:60:16:0d:02:4b:0d:00:41:
         c5:b4:8e:7c:50:67:40:cc:94:9f:72:2f:83:10:27:57:3a:7d:
         a2:f3:b9:46:84:46:33:d6:d2:07:f6:29:e3:36:7b:49:15:36:
         70:7d:3c:50:9f:e4:3a:3e:f0:b9:3b:53:4e:f2:07:a1:b0:98:
         77:55:1a:13:b5:30:3a:4c:94:2f:56:c5:ce:05:7b:01:f6:46:
         56:f3:62:96:26:45:78:d3:a0:ee:d2:5a:4a:cb:86:fd:ad:dc:
         36:0e:8b:7f:02:eb:0e:c1:da:e9:be:3e:d4:a4:f8:a0:9f:1b:
         c4:91:6b:20:ea:cc:bc:d2:9b:86:1d:65:22:20:93:c4:b9:a0:
         f1:3d:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:39 2025 by rpki-client