Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa
File:                     ab2f321e-03b1-3793-839e-0511ef8aaa27.roa (raw, json)
Hash identifier:          QHSYaG9H4Nsl1/YGgn5uYBTCbrod64fdlOVHyYQD2AI=
Subject key identifier:   2E:AC:AA:FE:48:33:59:A7:2A:C6:2C:5D:43:FD:1B:77:68:6A:42:F1
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F4328584A46A5A8BC520B361F12645320
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     64199
IP address blocks:        198.178.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a8:bc:52:0b:36:1f:12:64:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=de11ae96-e299-4f4a-9899-e0cfb5721d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:54:3a:81:8e:54:1f:ee:09:5a:c7:e0:46:
                    55:6e:a5:36:b3:d5:c9:d3:94:f3:60:79:fb:66:f3:
                    2b:82:3f:e3:a4:35:7a:9c:78:25:67:2e:40:7c:52:
                    03:ae:e5:df:e4:43:e3:4f:05:dc:5d:25:e5:32:10:
                    83:d0:35:e1:61:a0:f8:28:be:63:53:db:04:a3:94:
                    21:e4:6e:ad:8c:35:fe:b5:9f:c6:d4:bb:32:a1:b4:
                    06:7e:93:b2:5e:db:f3:2e:08:30:3b:cd:36:de:42:
                    5d:94:67:b1:c4:b7:cc:d6:c1:ff:1e:4d:30:ce:2f:
                    7c:13:3c:7b:74:82:d5:0c:4c:1d:e2:ca:9d:63:13:
                    dc:69:81:01:64:8c:f6:c2:6c:60:82:55:f1:49:b9:
                    8a:aa:f3:5d:8c:6b:7b:1f:3e:8c:b8:45:67:ec:c8:
                    b1:f4:eb:05:e2:0e:c5:31:d1:91:ce:2d:ed:6f:62:
                    ca:d6:dd:86:a3:95:58:bb:ab:de:51:ba:74:9c:3d:
                    e4:59:5d:43:e9:f6:ca:72:48:5b:ef:c5:c3:a1:c7:
                    18:da:ad:29:6e:7b:a5:21:0e:98:95:3d:84:d6:da:
                    72:d0:0a:76:08:75:1e:1a:40:03:63:ed:3d:75:ad:
                    5d:61:4e:f0:88:92:e0:09:ef:a7:a7:35:d6:ca:6e:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:AA:FE:48:33:59:A7:2A:C6:2C:5D:43:FD:1B:77:68:6A:42:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ab2f321e-03b1-3793-839e-0511ef8aaa27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:be:8b:73:cf:5e:88:a3:c0:4c:33:b3:47:c3:01:93:fd:
         63:7f:5f:85:93:7f:b2:19:ff:56:4d:64:14:ed:03:ae:14:eb:
         5b:71:e4:37:39:8d:63:28:75:3d:cb:de:48:b8:09:28:4b:80:
         e2:a1:00:de:50:20:b3:44:5f:7d:b2:83:b3:e6:e3:d6:9d:02:
         b9:0c:53:ae:88:0e:eb:67:e9:4e:28:6a:6b:4b:41:7a:2c:dd:
         b4:05:96:05:96:9b:2b:95:ff:38:88:eb:d5:de:19:e4:8d:af:
         99:1c:34:75:63:8b:20:48:0a:9a:d6:2e:99:8f:d8:20:ec:c2:
         e7:a6:9d:eb:5e:1d:73:6a:bd:36:0d:c7:d8:c9:5a:c4:14:2b:
         f1:b3:e4:b0:57:78:fb:d5:28:f4:b8:08:1d:51:d2:c6:99:9a:
         10:00:b6:b4:f0:44:7f:36:a3:35:27:f2:ce:7e:92:d4:ac:a8:
         61:b9:bf:65:26:ad:90:9d:66:8b:10:fe:20:be:a5:25:2d:29:
         e6:05:a8:f4:67:c8:37:6d:b8:dc:fb:27:8e:14:49:36:4c:f3:
         0a:85:52:ac:f0:44:e4:d2:b6:0b:a1:51:a8:98:db:c4:ac:6f:
         6b:ef:cf:a6:39:66:85:0b:af:56:a0:46:6a:c0:68:76:89:96:
         10:89:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:11:39 2025 by rpki-client