Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
File:                     179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa (raw, json)
Hash identifier:          uxCIJmm0nKEaMYbvdsi+pJn4CK0B+cMrdUTnOClMXiw=
Subject key identifier:   11:05:AB:6F:B5:55:FD:D2:AC:9B:F3:E9:C6:85:04:D8:7A:1C:D1:D4
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F43285849244E6E31165A546E3E0FE84C
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     36692
IP address blocks:        198.41.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:6e:31:16:5a:54:6e:3e:0f:e8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=09f3fec0-49d7-49a5-ba21-2ba08dc95a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:f8:bd:e1:4f:c0:a6:21:92:fe:bf:89:4f:
                    8a:fb:06:c6:26:1a:e4:44:0f:6c:7e:94:b0:96:94:
                    e5:45:ce:4e:e6:8e:07:5a:5c:4e:89:1e:93:a8:1c:
                    1f:7b:da:74:cc:5a:5c:7d:45:f1:6c:ef:42:8c:bd:
                    51:0c:81:6e:92:e8:6f:30:a5:46:d7:f3:e4:26:25:
                    5f:df:6e:6b:2f:cd:5c:98:f3:8f:65:19:00:5f:b0:
                    81:51:d3:4a:a1:f8:8d:e9:00:01:58:1a:df:dd:99:
                    0e:1e:67:0b:4b:12:be:e6:1e:d4:53:98:ad:c3:94:
                    7c:c9:97:11:99:c6:d3:aa:a6:f4:c5:1f:8c:12:4d:
                    de:a1:82:b5:48:14:aa:bd:5e:85:36:45:bc:58:51:
                    28:f7:cc:5b:53:1b:7a:84:87:50:e0:27:47:7b:8b:
                    fb:d4:9e:e3:3b:22:a5:ec:bc:af:a5:99:15:25:fc:
                    e5:bd:1a:35:04:29:30:ec:44:97:dd:c5:8e:44:9c:
                    f1:66:76:02:58:44:e8:bd:76:57:f7:83:82:42:05:
                    81:2c:cc:72:2a:c0:d8:9b:13:fc:b1:ad:fa:e6:20:
                    e1:99:ec:83:f2:67:df:39:ca:96:4e:a4:56:ab:68:
                    ee:13:1f:8a:f0:75:db:81:52:b4:64:84:76:14:74:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:AB:6F:B5:55:FD:D2:AC:9B:F3:E9:C6:85:04:D8:7A:1C:D1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:15:f0:e0:f0:ab:fc:58:be:a1:42:9d:17:9c:f7:5b:d3:21:
         fa:c2:98:bc:da:03:6c:f7:20:b9:b2:f7:7c:13:ee:a1:a0:3d:
         96:00:3a:b4:5e:b3:5a:ec:5e:4a:3a:e8:6a:8f:f9:c3:e0:df:
         d8:98:60:87:35:4d:f2:5b:f3:b7:57:5b:55:ad:6a:7b:ad:4d:
         44:74:f5:71:e2:86:47:04:9f:cd:fd:55:ef:ae:7f:b6:c8:cf:
         f9:59:29:5e:c2:2d:07:e2:5d:7d:29:ad:36:ed:af:ad:c1:9c:
         75:04:28:70:fd:2a:0a:83:f6:b6:25:9b:d8:83:a8:f1:9d:3c:
         ce:99:87:94:e1:7e:cb:22:73:28:a4:c6:6a:8a:dd:03:87:75:
         a9:f5:ae:be:92:cb:fb:92:43:c6:0d:96:15:2e:90:98:cb:83:
         be:38:86:66:b0:72:0f:96:ab:cf:56:48:b9:44:f2:a4:c6:f1:
         c0:bc:4d:7e:68:ad:4f:f2:e2:33:ae:20:b8:99:c5:f9:c5:00:
         f4:b5:82:56:bc:1a:7d:ae:e5:ef:2f:63:11:69:dd:a8:38:a9:
         8b:99:f1:c8:59:ad:d9:f6:05:e4:5e:8e:ce:3c:c0:e0:4d:70:
         7f:41:2e:f2:6f:07:88:21:f9:bd:ad:09:97:df:22:0e:4a:95:
         a3:ac:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:41 2025 by rpki-client