Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd01e225-d8a6-3a6a-9d96-12cd97e6c877.roa
File:                     dd01e225-d8a6-3a6a-9d96-12cd97e6c877.roa (raw, json)
Hash identifier:          bDgQ0ix6a3U2tso8T6cDGjXJpkmvykduFLoiLrZb9WM=
Subject key identifier:   A2:F0:A0:DC:96:BF:42:FE:72:84:42:5C:15:8F:B7:EE:68:1D:72:AD
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A1B5FFBE7569B5BA08208A140
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd01e225-d8a6-3a6a-9d96-12cd97e6c877.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        198.235.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fb:e7:56:9b:5b:a0:82:08:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=8bb3cdb6-4ad1-49bc-8acc-6f584fc32aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:3b:83:c4:a2:a5:2b:af:98:8a:66:2b:e3:
                    a1:e8:52:ab:f7:21:00:da:5b:dd:1f:ea:3d:0a:0c:
                    19:ab:dd:1b:2a:43:12:4b:55:1e:e7:a8:ce:7f:74:
                    21:e2:00:68:9f:65:ba:34:5a:87:e9:fb:c1:41:a9:
                    60:89:45:22:11:73:ba:c6:8a:a7:3e:43:80:da:1d:
                    b0:e8:c9:2e:d0:af:64:8e:8f:14:70:39:25:b1:9b:
                    95:c0:24:30:78:1a:0e:8a:a8:b3:11:65:07:d8:b1:
                    2b:57:28:40:66:1b:71:41:fb:80:bb:85:cf:e2:a2:
                    63:e3:94:15:9f:bc:70:73:33:30:3a:18:6b:43:4e:
                    0e:d2:66:ce:61:74:91:43:a8:c4:e8:54:8d:0f:fe:
                    53:13:c5:71:16:15:98:11:8b:b9:49:c8:47:07:8c:
                    d7:68:fe:b0:fd:33:92:44:fa:61:d1:80:9d:8d:23:
                    22:44:db:03:7e:56:17:c0:35:c8:d1:a5:d0:09:71:
                    11:8a:cc:aa:74:81:28:17:4a:5c:91:bc:50:8f:6c:
                    b0:19:90:2f:e7:dd:d1:d5:70:a1:f0:dc:0b:88:71:
                    4b:81:08:a2:b1:8f:6f:71:a8:e1:cd:dd:f5:26:7b:
                    51:3a:ce:2d:c9:cd:50:ad:08:54:32:f9:04:03:2a:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F0:A0:DC:96:BF:42:FE:72:84:42:5C:15:8F:B7:EE:68:1D:72:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd01e225-d8a6-3a6a-9d96-12cd97e6c877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:a5:af:df:5f:3e:a6:3a:80:65:3d:f9:e4:e4:15:b0:95:
         3e:b4:3f:0b:21:4d:23:0c:52:3b:f2:91:5e:3c:61:cf:36:1f:
         35:91:79:9c:49:3a:21:d7:1f:ea:25:fc:b4:5b:14:da:4a:a9:
         1f:60:a2:dd:1c:af:73:a2:4c:94:a5:05:02:fa:93:1b:34:29:
         1d:e7:40:6b:68:03:32:63:6b:c6:b3:40:f3:ec:a4:9c:f9:7f:
         3d:c1:38:8e:b5:9b:6e:a2:03:e8:ff:0c:d6:c1:86:16:e3:56:
         8c:87:dd:e5:27:fc:14:7a:ae:8c:d9:38:97:a2:db:41:47:f5:
         c4:a1:16:21:16:ec:9a:f0:5d:83:84:4b:50:66:44:75:9e:ac:
         80:ec:57:93:65:20:d1:c2:5f:d2:7a:16:70:40:a3:d0:0d:04:
         b7:81:0e:8e:9e:21:ff:d7:71:84:7c:35:26:86:ad:f7:01:b1:
         4a:20:5d:86:6e:29:03:79:9a:bd:10:90:b7:59:22:f4:b5:ee:
         86:7e:38:ac:21:57:6c:78:b0:b5:fe:53:e7:cb:30:ef:90:24:
         56:50:41:c5:29:fc:6b:ae:df:f5:9f:3d:0d:93:ba:90:47:d9:
         6f:58:ad:6b:d6:b7:6e:d9:cb:ac:24:2e:aa:46:7d:37:f7:72:
         de:09:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:54:27 2025 by rpki-client