Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
File:                     995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json)
Hash identifier:          8J4v2wdyb2Pq3jMrL4is71FX03+xhBebHcR7rktaeds=
Subject key identifier:   BF:5B:F1:E6:19:E4:3C:90:D9:46:68:38:44:A9:E7:DD:E2:40:09:02
Certificate issuer:       /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Certificate serial:       010D0C9F4328584A3A157BD5F79C8A9F1E0BEF80
Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     60011
IP address blocks:        198.199.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7b:d5:f7:9c:8a:9f:1e:0b:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=1d8e1007-8bb0-4297-a6b2-859b0778a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:32:b3:20:9c:16:83:d5:58:39:e5:43:93:eb:
                    73:2a:2b:9f:18:9c:6f:6e:af:9d:ce:37:64:6a:5a:
                    98:0e:88:c5:9d:e2:7a:63:1c:1a:02:06:c7:01:dc:
                    14:74:40:99:13:36:13:10:11:78:12:df:53:5a:f2:
                    a1:c2:0e:01:8b:1c:7b:98:54:66:04:7c:1b:86:30:
                    0e:44:6f:f8:e0:32:ab:50:f3:1f:61:09:93:a3:16:
                    92:a9:11:b7:5c:a7:1b:5f:41:7a:00:63:68:c2:ee:
                    06:01:c1:fc:01:50:e8:49:04:8c:87:f6:bf:8d:55:
                    d7:58:cd:e3:63:4e:7d:68:5b:fe:40:3b:0b:33:94:
                    3d:35:5e:10:3e:39:29:be:c7:5c:ed:da:44:e7:8d:
                    2d:e0:1f:ab:b1:3a:51:24:3d:a1:fd:94:66:7d:2b:
                    08:42:89:f4:d0:be:cc:51:32:03:a6:af:03:e5:08:
                    b4:df:56:fe:65:90:82:67:14:e3:c8:7e:25:07:a8:
                    ec:1c:88:f6:9c:24:7b:09:40:77:fa:f8:2e:15:9d:
                    be:dc:e0:1d:e0:79:43:15:ba:f9:b9:be:90:cc:3c:
                    a6:ce:90:62:4f:79:2b:22:29:3b:4c:b8:cb:b3:f8:
                    e8:6b:cf:e7:86:ea:79:4f:77:36:45:a1:06:fc:db:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:F1:E6:19:E4:3C:90:D9:46:68:38:44:A9:E7:DD:E2:40:09:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl

            X509v3 Authority Key Identifier:
                keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:eb:43:25:02:70:b0:44:79:19:47:cd:c2:e5:2a:fe:44:19:
         83:e8:f5:6f:9f:46:39:19:eb:a5:15:e7:79:ea:27:70:c9:6a:
         b5:d3:3b:9b:1e:7f:4e:56:82:54:01:c2:86:95:24:5a:37:ea:
         87:09:da:cc:be:7c:60:9d:9f:93:a9:16:d7:12:96:ea:df:bc:
         e2:c9:4f:d4:ed:f8:36:68:ac:70:be:f1:50:8e:69:18:6a:2e:
         d5:9e:a5:c0:61:85:dd:e5:b7:f4:4a:4e:c5:ba:be:be:1b:f5:
         ae:2f:00:33:ac:45:42:d4:55:69:e5:a2:49:8b:12:8a:ed:a9:
         93:25:75:74:f5:cd:7c:f7:02:d2:48:97:f7:42:58:6d:e3:f4:
         64:93:04:62:1d:31:6d:c6:85:e7:91:7d:25:ae:9d:82:a4:76:
         9f:92:2b:38:b5:2e:78:a6:21:3a:db:1b:15:c9:da:aa:02:31:
         b4:f8:22:6b:10:13:6c:a1:53:c2:99:50:1a:37:5b:c5:36:f7:
         04:ff:f9:a1:0a:53:76:7e:7b:2b:21:21:83:24:24:49:92:5a:
         24:fd:f2:d7:12:71:07:64:df:fd:d5:e7:dc:c1:04:75:4a:c4:
         df:c8:41:3e:86:78:1d:5d:a8:4c:45:9d:00:c0:8c:15:5b:2a:
         cd:3a:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:21:20 2025 by rpki-client