Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa
File:                     ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa (raw, json)
Hash identifier:          EIEDWagTUxmJXPMgAGokOpcDVIGzcER2i7M7WEcbJzs=
Subject key identifier:   DB:9B:A9:00:4D:06:38:4B:12:FD:70:EF:9A:F3:D6:B9:4D:5D:F6:72
Certificate issuer:       /CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
Certificate serial:       010D0C9F4328584A43DB0424B8FD4C5ADBCE78C0
Authority key identifier: 16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     8075
IP address blocks:        198.185.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:04:24:b8:fd:4c:5a:db:ce:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60c8d18-b5ca-4397-838f-45c2e16a1a7a
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=653fc095-99af-44d7-9f80-c0a592a522a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:43:26:e4:1b:6a:9f:03:46:90:f3:ff:e8:
                    0b:2c:20:dd:64:31:1f:59:9f:aa:29:4f:fe:f0:69:
                    5a:ba:0b:ba:5d:94:38:83:86:fe:3d:8d:94:42:82:
                    50:11:74:6d:45:25:bf:9e:ec:54:f1:54:6d:6c:04:
                    a0:82:6f:2a:b2:35:45:57:9d:c2:f7:68:21:07:34:
                    da:6b:af:fc:3f:e1:5c:68:7c:a4:5e:28:2b:97:d6:
                    07:ca:83:72:c3:7c:70:f2:70:59:61:82:3d:51:42:
                    e8:18:10:3f:0b:01:ac:c8:4e:27:15:8c:04:f1:96:
                    97:af:0e:e3:54:cd:26:4c:a8:93:f9:ab:72:fe:5d:
                    91:06:0d:40:6e:0a:3b:ee:2e:ed:67:62:33:fc:d3:
                    de:68:67:00:2e:b4:b0:ea:19:2e:2c:3b:48:d0:ef:
                    1e:f3:72:dc:ea:84:6a:d6:ef:79:9f:48:15:1a:6c:
                    b7:8f:fe:59:9d:03:0a:2c:45:29:7a:dc:c6:6c:43:
                    68:25:c9:b9:de:64:76:f5:2c:e6:ca:c7:62:c1:8c:
                    42:5b:30:d8:74:46:b8:4c:25:d8:45:84:05:7e:f9:
                    9c:a2:e2:a3:15:bb:aa:79:58:48:15:53:12:f2:02:
                    b2:67:25:5e:c2:9c:35:6e:ce:83:ed:a6:89:85:7a:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:A9:00:4D:06:38:4B:12:FD:70:EF:9A:F3:D6:B9:4D:5D:F6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/ec2b1cea-8c10-323d-a380-9cd5525e33b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.crl

            X509v3 Authority Key Identifier:
                keyid:16:07:A1:04:B1:F6:A6:12:15:88:D8:50:BE:26:41:29:AC:3C:5A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e60c8d18-b5ca-4397-838f-45c2e16a1a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.185.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:7f:a4:17:bd:0d:e1:d7:0b:8b:da:18:03:89:52:25:55:
         dd:06:e9:91:2e:bd:89:1d:c4:c9:0a:6a:0e:c7:59:67:d9:db:
         12:f1:a9:29:a2:6f:33:d1:6d:33:54:5f:87:92:24:88:cc:11:
         f8:2c:81:a1:fe:cc:d1:df:c0:e7:28:25:cb:15:9b:90:ab:ba:
         41:28:72:ef:1f:be:a0:15:dc:34:b5:eb:ed:1f:17:53:e1:26:
         d7:d7:b9:ad:4b:7e:b4:2a:87:3a:0a:bd:07:ff:1d:b5:f8:28:
         7a:27:91:ab:18:7b:58:96:fd:ad:26:a4:e5:b6:2a:cb:0c:57:
         02:d2:cf:c5:4f:5b:40:a7:b1:39:4c:4b:cf:75:ca:cd:59:a9:
         cc:92:e3:0a:90:25:86:17:01:9e:76:37:7e:5c:b4:b2:08:28:
         3f:3d:09:97:71:da:b0:6c:59:5d:60:41:b3:cb:ac:e6:cd:33:
         a2:3c:6d:08:2a:b6:a6:98:fb:b5:19:49:48:81:ea:58:3f:c8:
         2c:9a:be:43:f2:bf:10:ab:62:ff:64:64:56:2c:a5:59:d9:03:
         a0:08:e1:bd:51:4a:ad:0e:7a:5d:91:03:76:fc:85:55:14:c5:
         a5:35:9d:d5:30:d1:c1:b2:c2:a1:9f:6c:07:d1:4d:89:64:63:
         b1:3f:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:15:06 2025 by rpki-client