Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/d7ec5f05-ab79-3772-b93c-5abf74755b5f.roa
File:                     d7ec5f05-ab79-3772-b93c-5abf74755b5f.roa (raw, json)
Hash identifier:          quAhOODCalN4iVeK4sphebdgndhI1QKZS3jtdGxwn18=
Subject key identifier:   B3:B7:58:70:AD:1F:FF:0F:15:1C:D7:B2:C0:57:C9:4B:4B:FB:58:31
Certificate issuer:       /CN=a1b2096e-e67b-4008-8d1f-efdddddeaea7
Certificate serial:       010D0C9F4328584949FE9623F76BBF1275C54220
Authority key identifier: 25:41:A5:7B:A1:EB:17:45:63:9F:F5:5D:B8:75:27:87:65:EB:02:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/d7ec5f05-ab79-3772-b93c-5abf74755b5f.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     397300
IP address blocks:        198.190.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:96:23:f7:6b:bf:12:75:c5:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b2096e-e67b-4008-8d1f-efdddddeaea7
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=dc35220a-334b-4e69-ae03-2ad942ded749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:63:76:09:d7:8e:d7:74:18:8d:f1:f7:ac:
                    a4:0f:c7:72:77:ae:92:cb:40:4b:84:0b:b8:ce:34:
                    8a:e6:ad:86:95:93:dc:46:19:8c:43:36:40:e2:61:
                    95:f5:f8:95:24:64:a6:de:0d:db:26:5a:94:b1:03:
                    fb:99:54:55:43:34:f6:6b:ab:b2:ed:90:fe:2e:6c:
                    fe:44:f1:ac:27:17:cf:68:3f:0e:43:c9:d7:d9:bb:
                    8e:67:86:99:3e:c3:c8:e6:0c:e9:a6:b8:8a:62:52:
                    3b:4a:67:5b:4d:9d:90:8d:c6:5f:c8:7a:7d:a8:c3:
                    5e:0e:d0:8a:87:b0:43:02:06:16:4f:67:a2:e7:8b:
                    9b:32:6d:3e:13:da:9c:2e:02:8a:fc:32:ed:ab:b6:
                    7e:9c:f0:bd:eb:56:60:68:ce:76:98:45:c3:03:1f:
                    83:ae:af:55:3d:01:33:c1:5f:ab:d8:2f:c1:ed:ff:
                    5c:38:1b:24:39:be:eb:de:5a:83:74:ea:59:5c:c2:
                    ad:4b:47:21:47:cc:15:8d:13:40:53:da:e4:89:94:
                    f1:a5:4c:fe:d6:72:dc:e5:31:8a:45:b6:38:a5:65:
                    14:e9:61:83:cd:ef:01:19:25:fa:2c:ba:f8:3e:3e:
                    76:7d:78:06:c0:b4:71:c8:e2:90:62:45:32:00:50:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B7:58:70:AD:1F:FF:0F:15:1C:D7:B2:C0:57:C9:4B:4B:FB:58:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/d7ec5f05-ab79-3772-b93c-5abf74755b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7/a1b2096e-e67b-4008-8d1f-efdddddeaea7.crl

            X509v3 Authority Key Identifier:
                keyid:25:41:A5:7B:A1:EB:17:45:63:9F:F5:5D:B8:75:27:87:65:EB:02:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1b2096e-e67b-4008-8d1f-efdddddeaea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:9b:7e:ef:29:dd:99:2d:f3:6e:51:72:f2:b8:eb:43:4b:
         c5:a5:e9:d7:d9:3b:cf:ec:7a:e3:bc:87:4e:7a:dc:54:4d:b9:
         0a:90:a4:01:3f:af:f9:df:a0:c3:bd:71:b3:88:91:b7:d0:60:
         bb:e6:ce:7d:cf:b9:92:07:b7:c9:ed:cc:b7:e9:56:0a:5a:a8:
         aa:24:2f:06:d0:ef:e1:e4:e6:09:68:7c:a0:04:80:6d:8a:03:
         4e:93:8f:be:dd:df:98:08:3a:35:45:4c:92:c0:3d:1d:18:b2:
         16:63:13:03:5d:e7:b1:7c:08:eb:22:f8:21:d9:c7:0f:48:10:
         70:6c:c7:84:d6:99:7c:05:b4:ef:19:31:c4:a8:e4:dd:e3:d0:
         a0:7d:c7:65:7c:4f:a4:cc:11:1b:b3:bc:fa:26:cd:8c:7a:f7:
         0e:59:b2:ad:dd:6b:12:fb:eb:96:f5:18:a1:f5:2b:a2:33:33:
         6a:e0:6b:94:83:da:56:97:45:b6:de:19:c7:f8:4a:0b:63:25:
         c3:c3:90:3f:6a:c5:8e:c2:4f:4a:74:61:a0:2a:30:72:92:54:
         b3:14:4a:a0:7f:bf:f6:19:89:d9:fa:90:67:09:e7:ea:ff:a6:
         d4:8b:8a:dd:68:d2:00:dd:1b:d5:83:9d:4d:2a:f2:2e:8b:a1:
         85:af:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:33 2025 by rpki-client