Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
File:                     6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json)
Hash identifier:          iEUWVagZ+jplqMlSJB5UuDIQ9VAsGlzfYbQEzq7s1S0=
Subject key identifier:   DA:A1:9B:2A:0A:3D:B3:B0:94:F6:A5:78:1E:2D:5E:4C:65:E7:CF:68
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584A10354D564B004008C2628F80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     30607
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4d:56:4b:00:40:08:c2:62:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=4c26dc4d-6895-4ea7-a764-792d2e497991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:b5:a3:02:26:dd:f2:58:85:ea:f0:a1:ef:
                    be:bf:62:f3:19:d1:71:89:60:32:0f:f2:28:bd:4d:
                    5f:e5:6d:ab:d5:b4:82:45:ec:5d:5d:ea:7e:2b:d0:
                    d5:8c:2d:20:47:9d:5a:56:4d:8d:28:20:e9:15:7c:
                    f1:03:68:0f:8d:f9:b5:0e:6c:44:42:79:0c:6b:40:
                    4c:71:a9:be:3e:98:cb:b4:ae:da:fc:f4:28:4c:2a:
                    1f:b9:12:a2:54:0f:a3:7b:2a:ba:88:78:77:16:4d:
                    38:cc:9a:61:5c:8c:cc:7a:7a:91:ef:a8:44:f9:5e:
                    92:09:12:d2:7e:97:fc:b2:c3:95:25:f5:45:c3:f3:
                    6e:10:10:02:51:a0:71:33:a1:11:0c:f1:95:6c:89:
                    26:78:ed:13:82:ef:97:76:d2:9c:1e:3c:67:51:1d:
                    8c:74:83:1e:e9:83:0e:24:b0:4b:28:5f:b4:29:2d:
                    f5:7c:00:84:4f:b9:2c:68:b0:a2:96:c4:f7:d9:35:
                    e1:4f:aa:ac:08:d2:8f:0e:5f:b6:0c:e1:de:00:25:
                    13:17:03:7d:36:5e:3f:9f:c5:0e:15:22:df:75:84:
                    57:28:f5:7b:28:c6:6c:47:9b:02:77:b9:86:df:e5:
                    b4:fd:c7:19:8e:32:14:52:37:c1:e2:74:fb:c5:56:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:9B:2A:0A:3D:B3:B0:94:F6:A5:78:1E:2D:5E:4C:65:E7:CF:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:c4:4f:cd:82:f4:bd:df:a5:38:94:f9:6e:e1:51:14:99:
         6d:e3:ac:96:e0:89:a4:cb:bf:a8:1e:96:a6:c6:f2:41:65:7e:
         08:d3:d5:e0:61:6b:c4:68:45:fd:c7:3c:1f:9a:27:6d:91:7a:
         94:20:dd:8e:ed:7b:d0:fc:d2:34:03:98:dc:68:9f:4a:74:25:
         2b:28:4f:ad:3b:83:bb:40:31:c8:eb:98:d0:99:8a:9d:50:63:
         34:70:d1:14:f1:db:f1:2c:87:b4:0b:e2:4a:a0:2c:99:3f:c0:
         e3:40:50:9d:10:fb:23:c7:08:00:de:55:d9:a3:9a:b9:dc:81:
         bf:41:51:4c:c3:79:73:49:bc:9e:a1:1c:0d:18:f9:72:72:b2:
         9c:8e:2f:4d:57:6c:6b:59:4b:7b:84:16:99:95:1d:09:64:1e:
         0f:4d:09:21:f5:d9:49:9a:2e:dc:4d:73:7f:9b:00:64:99:13:
         c5:c9:fa:1b:13:c7:25:4f:5e:d0:8c:76:9b:79:96:60:4a:5b:
         b7:32:82:a2:24:6f:cf:6d:f0:4b:7a:85:89:1a:17:c3:68:bc:
         84:21:e9:ff:f3:fa:17:07:b9:cb:bc:6a:bd:6d:b4:e8:7f:b9:
         12:fc:de:fd:cf:12:2b:c2:a0:b2:71:fb:b8:37:d2:9c:25:c3:
         50:95:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:45 2025 by rpki-client