Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/e0ab5e2d-72d9-3c01-bd9b-ac3616a44f89.roa
File:                     e0ab5e2d-72d9-3c01-bd9b-ac3616a44f89.roa (raw, json)
Hash identifier:          xwlFj5T1lsgAa6Q5Sv97H80QfA/sUZBx1M1IfMLKhM8=
Subject key identifier:   FD:EB:D7:96:92:19:E2:06:B3:A2:92:AE:35:4D:FC:A8:94:5F:DE:48
Certificate issuer:       /CN=d80ecca4-df87-49ed-896a-31c912ba8c98
Certificate serial:       010D0C9F43285848EC9695AB09EA3AD9E3F10980
Authority key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/e0ab5e2d-72d9-3c01-bd9b-ac3616a44f89.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     26370
IP address blocks:        198.163.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:95:ab:09:ea:3a:d9:e3:f1:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80ecca4-df87-49ed-896a-31c912ba8c98
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=295c87b3-88ee-42cc-adb3-eba318878ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:3d:52:13:0a:70:6e:56:58:db:b5:c0:24:
                    f8:63:5b:13:d5:1a:ea:bb:91:b8:16:e5:1e:af:7b:
                    5f:58:c6:8e:ce:51:8d:58:4d:93:b9:f4:1b:fa:08:
                    db:27:37:f5:e8:70:22:1c:fe:ee:17:5c:0c:e6:d1:
                    dc:66:76:07:96:44:f3:41:7d:b7:17:27:a2:ea:a1:
                    19:1f:bb:aa:77:ea:fb:f9:75:2d:f8:74:6b:d7:10:
                    83:88:71:9b:2a:54:1f:ae:74:5a:d1:19:84:56:ce:
                    f5:c5:98:9b:b7:99:07:2f:e9:88:f8:ad:9f:29:c7:
                    ef:e8:32:ed:19:b2:2f:a0:5a:2b:f3:bf:ea:55:bc:
                    e7:f9:74:cd:33:3d:19:58:c7:97:ef:fa:fb:95:f4:
                    1a:c2:48:bc:fe:d9:59:97:eb:51:15:36:70:2a:83:
                    ef:ca:56:f5:4f:68:79:d2:38:40:92:7d:ae:95:fd:
                    ad:77:42:2c:96:51:5c:6a:76:cc:8a:fa:95:65:b2:
                    cc:ba:ed:2c:80:34:78:76:56:5d:59:ae:59:db:18:
                    ce:0b:37:6c:20:eb:eb:f0:58:42:75:20:75:2f:e1:
                    33:ae:52:6a:6c:ab:01:bb:b4:ca:d0:8c:f4:08:5d:
                    12:1c:f1:7c:4b:03:26:2c:f7:ca:aa:ef:04:56:2a:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:D7:96:92:19:E2:06:B3:A2:92:AE:35:4D:FC:A8:94:5F:DE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/e0ab5e2d-72d9-3c01-bd9b-ac3616a44f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.crl

            X509v3 Authority Key Identifier:
                keyid:FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:29:a8:a8:7b:32:d6:fa:be:c8:c0:76:29:5a:79:8e:65:
         3a:58:53:35:91:12:d0:95:3f:2a:2b:c5:0b:3b:a4:86:61:d1:
         7f:c5:60:f6:03:84:8f:11:10:70:1d:4b:c1:e4:ac:14:90:57:
         56:87:cc:7c:27:70:eb:c8:d5:c2:b6:d4:c0:2f:8f:93:a9:94:
         9a:a4:a8:4b:2c:33:90:fb:01:a4:24:95:9e:02:5b:e8:58:dd:
         71:a8:9d:e8:65:ea:81:9a:b6:e8:6a:38:52:65:60:7a:31:2b:
         06:0c:56:19:e6:bd:4e:87:e4:1b:58:5c:d6:61:b4:da:1e:4f:
         c8:3a:c3:6b:cd:b0:7b:62:0c:25:ef:29:4e:a9:bf:b5:e9:20:
         9b:8c:27:25:e7:0d:d9:e9:80:df:ac:ec:8f:f6:45:32:bf:51:
         a7:d6:b1:ad:a7:08:a0:66:44:20:4d:7d:46:57:17:27:0f:7c:
         ba:42:85:6b:5e:5b:55:e0:91:25:69:9f:49:6c:6a:2c:a0:8c:
         95:4e:9e:89:9a:bb:a5:65:d7:66:15:10:8f:db:e4:0e:6e:92:
         62:da:d6:fb:d7:7f:59:14:c3:0c:e5:26:74:0e:4f:ba:4b:da:
         63:39:eb:dc:2c:5d:6b:2b:d9:cb:fa:fe:ce:d6:24:8a:5d:37:
         d1:63:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:45 2025 by rpki-client