Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
File:                     4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (raw, json)
Hash identifier:          VMaOAU9kxvdjnHtdkhBH0jutCseqj2ON+pbOAoimS7c=
Subject key identifier:   2C:FD:80:A1:33:8B:A6:A5:8C:AF:04:7C:F1:15:F4:04:6A:D4:CA:25
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F43285849C904E02052F3109E00488080
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     22966
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e0:20:52:f3:10:9e:00:48:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=15b30708-624e-4aac-9686-41c5939f2e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5f:97:63:a6:5d:7f:81:fe:a0:7c:98:61:2c:
                    b7:68:12:04:6a:1c:e6:d0:de:d0:2c:30:69:d4:0b:
                    58:d3:4d:7c:5c:03:2f:f1:64:18:37:8d:86:b0:38:
                    21:16:d3:71:7b:25:81:72:0f:2f:31:09:98:73:f8:
                    bb:f4:00:61:b5:ad:94:3f:f1:90:e4:78:7e:5d:2f:
                    2d:7f:54:98:cd:67:b3:5c:0e:3e:09:de:9d:bd:12:
                    d5:f9:32:0c:be:01:cd:6e:75:e3:ac:9e:d7:af:cb:
                    32:3c:97:c9:e7:a6:1b:80:de:3c:37:d0:e0:7e:c6:
                    03:ec:09:65:a6:ca:2b:20:a4:55:8f:92:db:37:3d:
                    79:74:ac:74:3f:c3:ed:ec:82:57:34:50:3b:01:6d:
                    69:aa:f9:68:8a:51:e8:1e:ee:93:82:af:10:b0:a7:
                    58:e3:00:c4:86:a8:9f:22:b7:83:32:b3:40:6c:a6:
                    23:38:ab:18:b9:6c:7f:47:a5:69:47:6f:6b:bd:99:
                    08:9f:4a:95:a5:75:ac:aa:b7:3c:80:16:f4:f7:9b:
                    00:b9:cb:2d:5d:ac:15:94:86:f0:37:0e:d3:bc:0b:
                    bb:0b:9b:a5:36:65:b3:2b:40:af:af:ac:4a:b6:19:
                    2e:87:25:cc:54:04:10:a2:cf:8d:9d:46:58:cc:d7:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FD:80:A1:33:8B:A6:A5:8C:AF:04:7C:F1:15:F4:04:6A:D4:CA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:73:46:fe:4a:0c:18:fd:4a:e6:49:48:be:54:42:f7:fe:
         ff:57:28:1a:39:83:84:27:63:2a:48:82:41:20:1d:b1:8a:9f:
         d7:8c:7e:7e:5e:f5:70:07:25:d9:23:06:26:57:29:f5:57:f9:
         63:5d:f7:ad:cf:15:80:94:be:af:b0:bc:d3:85:cb:a4:f3:c6:
         cc:a9:4e:4c:da:4d:55:03:72:22:60:bc:a1:44:15:6a:eb:d1:
         9d:52:89:e2:85:e9:2e:5a:58:db:3b:b3:20:de:74:16:ba:88:
         be:37:06:3a:56:be:b2:1e:26:c2:d5:32:9f:50:8c:4d:be:e5:
         77:8a:63:ec:9f:79:82:02:70:9a:e2:df:d4:e2:ee:d1:aa:70:
         1b:13:cf:16:dd:68:39:fb:54:2f:a9:15:3d:0a:24:ce:c8:a6:
         91:2f:56:aa:3d:fe:b8:7c:a2:2f:c4:cb:4b:37:5b:c9:f6:81:
         5a:d6:e1:09:7c:00:88:6c:2c:7d:bf:cc:95:db:5f:d8:54:f7:
         fb:63:56:20:75:f3:2a:51:f2:66:9c:1a:4d:47:d0:0a:18:47:
         9f:96:8f:49:9b:8c:25:49:ac:b2:25:65:f4:d5:6d:c7:dd:e4:
         e9:62:1b:93:94:a4:15:9c:38:5c:9f:38:c3:d8:ff:ff:cc:20:
         36:19:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:45 2025 by rpki-client