Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa
File:                     5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa (raw, json)
Hash identifier:          zlpkThXl3AS0URUNrDCNlulWomlqWLuuo3yfTfbSeHQ=
Subject key identifier:   07:03:80:08:42:C6:FE:3C:14:36:E2:06:FB:EE:39:C0:66:7B:99:26
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285848C9B0D98FFB450FA38995C320
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        198.48.128.0/17 maxlen: 17
                          198.48.128.0/19 maxlen: 19
                          198.48.160.0/21 maxlen: 21
                          198.48.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:d9:8f:fb:45:0f:a3:89:95:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=698168f3-fb2f-423f-a521-deb3c983d658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:be:e8:bc:8f:a6:59:dc:d8:e7:12:41:20:
                    d3:b2:02:ad:cf:87:ee:8e:60:82:ae:64:f5:57:c2:
                    32:4b:2b:ca:81:ab:95:c9:7a:18:3f:3a:a0:02:c6:
                    7e:8b:ef:78:bf:91:62:c1:3b:c7:82:16:e2:12:0e:
                    b2:97:dd:dc:b4:90:e8:09:27:00:11:33:be:2c:22:
                    07:48:50:b3:fa:89:a1:05:5c:a8:20:b0:e4:c2:eb:
                    eb:b4:e3:8c:06:96:20:b1:b2:80:09:c5:20:60:3c:
                    8f:a0:93:f8:96:44:25:67:b1:0e:49:fc:7c:14:81:
                    dd:fc:13:08:b6:c1:85:62:48:69:85:cd:54:37:7e:
                    d0:f0:d3:e3:a4:7a:64:79:ae:0d:7e:4d:67:0c:5f:
                    7c:63:22:f8:5b:f6:8e:74:e6:1d:b3:e6:ad:d0:69:
                    90:f0:cf:49:46:99:16:f5:08:b0:d5:0c:cd:b4:12:
                    c0:34:67:37:5a:46:c9:8f:c2:3a:b3:bb:e2:23:43:
                    b3:9a:c3:81:3f:66:7c:6a:41:a0:83:cf:b9:6b:a1:
                    f3:e0:50:68:28:d7:f4:f2:03:bc:d2:17:60:6c:a9:
                    88:62:84:bd:1f:f5:2a:17:db:7f:45:b9:79:5b:98:
                    60:ac:cb:cb:f4:dc:05:7e:1d:80:98:c1:db:0d:4d:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:03:80:08:42:C6:FE:3C:14:36:E2:06:FB:EE:39:C0:66:7B:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.48.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:6e:d1:a3:12:3e:a5:88:5b:ff:5d:d7:91:70:c0:25:20:
         a2:e8:df:32:be:ef:14:59:ca:80:de:07:20:06:a7:ca:ae:1e:
         9b:d3:12:ba:04:79:f4:55:0e:65:fd:97:bf:db:77:75:c5:85:
         1f:4d:b2:88:fe:31:eb:d4:dd:27:1d:bc:b7:89:48:e5:1a:9c:
         85:6b:31:3a:9c:ec:05:62:64:4e:7b:13:ec:36:5f:6f:24:26:
         f1:8e:a3:9a:e9:f4:90:94:26:0c:99:0d:0f:9f:0a:9e:c0:cf:
         f0:ed:53:13:ac:57:89:51:10:79:c0:7f:d7:c7:71:63:4c:41:
         14:98:2a:8a:66:30:0a:78:50:d3:4a:22:f4:ee:c4:c4:92:e5:
         9d:ef:84:33:bf:e0:65:fb:14:0a:f3:9a:01:41:bb:d2:3f:d9:
         e8:8b:cf:dc:fe:26:94:b0:9d:c5:39:42:a8:09:5d:3d:f9:66:
         16:c3:bb:28:46:f2:23:85:17:7b:80:a4:dc:8e:e6:84:f5:d9:
         02:a3:ed:fa:45:0d:d8:48:18:20:3a:95:8e:e2:d2:19:31:d1:
         98:94:8f:9b:63:b0:f8:47:60:a8:27:b6:83:59:89:cc:86:2b:
         06:0d:43:d2:7f:62:65:97:2f:a5:40:41:39:0b:88:d8:13:72:
         c8:b2:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:19 2025 by rpki-client