Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
File:                     6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa (raw, json)
Hash identifier:          pyXUh4RlvrAGbEy/GlfhXSrmuvx99/yVaK6PiCGqAzY=
Subject key identifier:   9B:1A:89:D3:98:ED:29:BB:AB:2F:AA:D8:8D:0A:88:37:BC:CD:78:5C
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F432858489075F25C26D0CE9D2F12DB00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     16509
IP address blocks:        198.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f2:5c:26:d0:ce:9d:2f:12:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=ef309754-34ba-4527-8aad-e4449cd32b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:e7:fe:73:f3:7c:50:17:5b:e4:d4:8f:2f:
                    cf:8a:59:19:8c:89:ef:a3:76:ed:b6:7d:99:92:02:
                    37:05:aa:ef:e8:16:ce:f9:d7:4c:17:e0:40:ed:8f:
                    08:ec:51:2c:19:17:25:7c:d6:c0:c0:00:30:89:c1:
                    2a:20:7a:3a:4b:b7:bc:ed:82:69:37:0e:59:79:54:
                    47:e8:bb:62:59:b6:b6:3e:d0:4b:fe:05:c0:d4:e2:
                    62:fe:cd:cb:62:84:c6:5d:b2:ee:11:a6:65:b8:da:
                    28:ef:c9:92:61:7d:65:10:d5:ff:3e:50:71:ca:6a:
                    1d:23:6b:3a:99:d4:21:65:1d:d4:33:d0:76:91:4f:
                    e5:4e:1f:03:ae:00:15:05:c1:a7:9c:b5:16:3a:42:
                    2e:08:40:21:d5:dc:bf:0d:a8:4d:90:59:bd:7e:89:
                    27:e7:ba:8a:b6:f9:00:81:81:1c:b7:70:28:cf:8e:
                    ef:45:9d:5f:f6:91:6e:20:1d:89:ea:75:d0:f4:64:
                    4c:93:39:d3:f9:81:ba:25:dd:70:cb:3d:dd:87:7e:
                    57:ef:bc:70:80:e5:39:4c:00:55:e7:d8:d5:75:0e:
                    5e:0e:44:bc:02:d1:d0:0c:45:cd:be:79:cc:ff:6b:
                    73:86:a5:ec:39:39:4c:c6:a2:ae:29:d3:56:7c:1a:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1A:89:D3:98:ED:29:BB:AB:2F:AA:D8:8D:0A:88:37:BC:CD:78:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:9c:ef:a8:c7:7b:10:fd:7e:b5:3e:c0:49:62:be:fb:1d:
         9f:a7:49:f4:a6:e0:73:da:0c:93:30:1a:97:35:d6:6d:2c:76:
         b7:07:3e:56:84:8e:0d:36:87:ab:ab:92:a8:1b:56:27:48:2f:
         6d:45:19:20:d6:74:84:76:85:d0:61:39:1f:57:7a:8f:cd:07:
         0e:dd:d6:e9:71:0b:5e:09:a8:87:9c:52:b1:40:dc:68:15:e7:
         8e:6b:0c:fe:c2:67:b3:48:e3:86:07:0f:a7:30:30:28:da:9a:
         ce:16:67:a0:18:97:ea:9f:df:50:1d:94:99:6b:00:3f:7f:5d:
         d7:80:df:7f:53:c1:aa:ac:a7:89:ca:1d:7a:b8:e3:dd:f6:77:
         4e:2f:bd:9d:bd:24:e0:4a:40:f0:7c:c6:21:63:ab:33:00:c4:
         d3:49:b4:46:59:eb:bc:2d:ca:d1:c3:83:84:5e:9e:a2:b8:8c:
         11:df:79:0a:ef:97:87:b7:a6:23:54:3f:fc:d4:e6:81:10:11:
         b5:3e:29:03:eb:78:c8:62:58:f6:74:f3:69:06:2e:a0:e1:e6:
         60:fd:7a:f7:c5:bf:04:67:5c:ff:23:81:a8:bf:66:16:9d:ab:
         5f:0e:ae:e8:f2:15:5c:5e:fc:2f:32:cb:00:db:0b:37:5f:5c:
         16:6e:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:51 2025 by rpki-client