Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
File:                     3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa (raw, json)
Hash identifier:          Xh05PTJybYLZ0lWZmuorZrqpNCB/S2wJRD9gOr9pL6c=
Subject key identifier:   70:77:4F:95:DD:1B:FA:83:24:0D:98:A0:57:58:BD:75:A7:26:B2:D9
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F43285848EC9691402AE08EFD7B263D10
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:91:40:2a:e0:8e:fd:7b:26:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=2d16b62a-6a23-4c1c-b89d-87332cf04cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:84:de:82:03:89:ac:0d:d0:9d:70:4a:80:
                    b1:54:40:51:00:ea:70:12:61:7f:35:e3:3f:79:1e:
                    98:15:db:54:2b:ca:9f:2d:ab:c9:28:f8:8d:f3:d4:
                    bc:d2:77:9c:e0:e1:f2:8f:52:fd:49:ee:7e:4d:7d:
                    f9:55:b3:7d:f9:40:8a:60:7b:6e:c7:86:2b:31:03:
                    0c:96:21:af:10:86:0b:69:34:4b:b0:a8:9e:fb:86:
                    36:5b:da:66:39:3c:30:4b:16:05:c4:87:8e:4a:2b:
                    22:88:d4:e7:63:a5:80:2c:9b:35:e3:8d:ae:de:fc:
                    1e:23:1d:b5:64:e0:ce:66:2f:f9:b5:86:fb:b3:1c:
                    36:21:a9:44:1b:08:9a:82:dd:6d:e5:22:da:57:53:
                    62:e1:fd:37:fc:55:f7:21:b3:86:f2:dc:20:db:d2:
                    e9:27:ea:22:e0:3a:74:ca:ee:f2:8a:d4:84:cb:fd:
                    43:c7:5a:36:bc:12:a6:b3:31:bc:31:4a:3b:b8:c4:
                    89:0a:f8:73:ab:7d:ee:c0:99:52:55:9e:d4:a7:1b:
                    e2:f9:a9:42:e3:6a:65:1b:6e:22:0e:3a:a8:14:23:
                    c1:3d:a3:6b:3e:92:20:cc:c8:88:0d:2d:65:6b:ad:
                    55:79:62:41:a0:e1:f9:43:cd:bc:42:65:83:f9:41:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:4F:95:DD:1B:FA:83:24:0D:98:A0:57:58:BD:75:A7:26:B2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:2f:c1:45:bd:f7:71:61:bc:30:8a:33:3e:ac:74:cb:a7:
         59:c0:09:c2:da:13:19:ed:ee:bc:60:70:da:bb:1a:09:a7:6d:
         f5:46:c8:35:e6:e2:79:74:c2:78:66:c2:06:19:05:2a:36:00:
         80:a4:8c:64:8f:11:ed:02:09:1b:79:32:7f:29:a7:52:e4:c4:
         ab:ae:2f:32:2c:7a:ac:e5:bc:a0:d6:98:9c:88:e9:5b:0d:c2:
         bd:ba:36:f4:9f:ae:6e:a5:6c:2c:7e:2e:8a:34:44:ea:c9:8c:
         04:7a:c6:72:5c:7a:b6:28:5d:bd:74:2a:ae:e8:8b:11:93:0e:
         b0:5c:fa:37:32:6b:98:de:60:1d:ea:69:ca:94:ea:05:3c:ee:
         ce:27:e9:fc:84:ae:cc:9b:19:ca:e2:9a:d1:84:0c:24:6b:6f:
         ad:23:68:09:5c:ca:24:ad:89:e4:67:c5:4a:1d:56:bc:ca:a0:
         4b:74:90:28:11:dc:6a:a2:e7:55:13:26:5b:95:a2:20:4f:f6:
         12:0f:7f:09:a9:48:84:6d:43:1d:17:84:6f:07:4f:50:4e:27:
         63:f5:e2:cb:3b:34:df:63:af:1b:fb:ff:8a:6e:5f:17:e2:72:
         c8:44:ea:96:84:dd:c6:a8:13:68:f5:08:2a:1d:2a:70:c7:be:
         8e:a2:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:50 2025 by rpki-client