Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
File:                     255548dd-3457-3897-86da-ed823c5f8b42.roa (raw, json)
Hash identifier:          fogu/bjLp+YQDLexaU3DgHNcbsGaRNtThduekgxSxaM=
Subject key identifier:   38:1A:AB:A6:03:6E:42:AD:EF:DF:2C:D5:23:F8:FA:7C:9A:B5:4C:B8
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584B13D6BD9C7383AFB52B18E380
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     2152
IP address blocks:        198.188.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bd:9c:73:83:af:b5:2b:18:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1c0e16f9-4a3f-43c6-aee7-c38f95ae26c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:f6:ae:dc:75:80:57:17:7b:0a:84:6f:83:
                    02:c9:77:be:b7:03:b4:bb:fc:30:a4:b9:6b:78:ef:
                    dc:35:2f:0f:ab:66:03:01:55:b1:13:c0:3f:dc:02:
                    ac:9c:ee:9e:62:a2:5d:91:34:64:fe:b0:ea:bf:49:
                    01:19:29:13:e1:79:22:77:f0:16:ed:f3:0a:2b:6e:
                    5e:f0:6a:ea:ce:75:ad:09:15:ec:73:86:c1:01:af:
                    15:3d:41:09:53:50:9f:ca:9b:b0:fe:6d:9b:7a:1f:
                    ff:e2:8c:eb:70:cd:4d:83:ee:f8:64:d0:62:57:c3:
                    85:f2:e4:8c:39:26:62:d8:e9:70:7b:e2:b8:27:b3:
                    4b:c3:9e:80:ea:d9:24:8a:f0:fc:7a:90:cf:0a:48:
                    3a:52:ee:de:b1:00:90:e3:e9:02:a4:cb:24:59:f3:
                    2a:ac:59:43:42:c2:66:11:74:ae:dd:20:13:48:d8:
                    4e:c5:79:21:de:5a:3f:6a:97:54:bc:af:e5:88:31:
                    cb:81:30:1d:c9:0e:79:43:ed:8a:38:0f:3c:96:68:
                    26:57:bd:01:2c:09:9d:2b:80:8b:6c:07:fc:7b:99:
                    28:01:dc:32:fd:fd:ed:19:53:f4:63:72:6a:cf:4d:
                    6c:ab:97:ae:45:1f:b3:8e:6e:1f:92:b5:8e:8e:d0:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:AB:A6:03:6E:42:AD:EF:DF:2C:D5:23:F8:FA:7C:9A:B5:4C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/255548dd-3457-3897-86da-ed823c5f8b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:01:9b:b0:01:e1:67:5e:3e:d6:7a:a8:00:e0:e2:e4:60:
         76:72:d4:dc:d5:6c:63:e8:31:1d:8e:6e:64:6a:ee:bb:44:e9:
         dd:86:7f:64:83:94:75:cf:9e:74:0c:c7:70:85:54:51:c0:98:
         06:c5:78:ce:1f:25:48:d6:e6:5a:11:53:b4:7b:06:b9:84:0d:
         d3:a5:1e:a9:db:cb:a6:54:9b:31:45:6e:91:21:88:ef:f7:88:
         d7:0e:77:05:7a:4f:af:13:d2:bf:d6:39:9d:f1:62:e1:23:0b:
         5d:ce:a7:07:4f:2f:6b:71:ef:77:29:96:8f:9a:2e:6a:86:2b:
         58:8e:b0:9a:6e:d5:19:12:37:7c:91:81:6f:12:d9:48:d3:76:
         b4:6d:61:12:32:58:51:58:8a:17:2f:3f:1c:bd:ad:39:95:93:
         d6:dc:b9:bd:16:8a:d9:7d:7d:3c:fd:04:53:15:a8:49:32:81:
         2f:9b:fe:70:96:38:6f:3b:73:bc:f0:02:05:39:41:13:47:e3:
         9c:0f:6b:8b:df:c1:e4:45:15:9d:a2:d8:91:81:08:d9:01:6f:
         f8:2e:e5:36:53:b8:a8:ed:c7:ae:5e:d2:5f:14:10:25:45:50:
         da:18:3e:1f:5f:13:6e:aa:d1:f9:e0:aa:f9:9b:3f:25:5c:ca:
         89:16:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:27:47 2025 by rpki-client