Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa
File:                     9fb0e461-b76c-3855-80c1-e2c736d9d409.roa (raw, json)
Hash identifier:          JKVedr1VbLILzQYugEyZdvYGRidc8xQlRW4V6vV4v2k=
Subject key identifier:   75:83:2C:B5:0B:2C:0C:EE:61:55:CA:04:AB:55:7C:44:83:5A:27:D4
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F43285849CBCF879226E4BCCFA4E1F400
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        198.182.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:87:92:26:e4:bc:cf:a4:e1:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=0246c728-063b-4f2b-b8f6-71e2a8b69708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:4d:ac:e3:4c:0b:a2:4f:cc:68:ae:1b:80:
                    14:ba:5c:cf:04:da:42:59:0c:3e:65:1f:2c:4a:1a:
                    d6:b5:d6:70:93:e0:2a:8f:6f:30:9a:7b:39:0d:39:
                    e8:91:69:e5:87:9b:8f:74:4f:7c:db:9d:2c:01:14:
                    96:d0:a3:5b:bd:4d:54:3f:02:55:6f:fc:71:2e:02:
                    16:5a:ca:54:09:88:88:6d:0c:db:9e:d7:26:47:f8:
                    f4:67:12:00:54:78:29:ba:6e:e0:bb:94:5f:72:5e:
                    5f:b7:99:49:ba:f3:4f:98:c8:16:98:5d:a2:89:1b:
                    0c:09:2b:93:fd:b3:39:cc:80:41:95:b5:e7:dc:f7:
                    b1:ad:35:f5:8e:49:af:aa:c4:ac:4e:33:1f:2a:98:
                    33:ef:c8:23:53:b3:17:15:46:57:d8:51:b9:fd:0a:
                    8e:e8:a1:a4:9f:a3:b3:48:df:74:d5:23:ca:cd:9d:
                    e8:cf:82:4a:e4:ff:91:c6:ba:9d:9e:2d:65:17:34:
                    f9:e3:17:1c:6a:22:3d:93:a9:8d:ee:92:65:09:54:
                    ce:11:a7:f2:79:e3:36:eb:ce:27:91:53:ff:16:b5:
                    e5:a9:4a:dd:7f:6f:fb:4f:54:d3:ae:69:ca:91:b7:
                    1b:d4:1c:79:6f:2b:9a:e4:11:88:63:be:71:1d:cf:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:2C:B5:0B:2C:0C:EE:61:55:CA:04:AB:55:7C:44:83:5A:27:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:21:d0:73:fe:ab:2d:f9:f3:a5:5a:a5:1f:fc:82:05:b5:
         35:91:0d:54:26:16:fd:d1:c6:1e:55:0f:18:7c:c1:e9:8b:26:
         38:ae:75:d7:01:2e:72:36:0f:19:3d:0d:80:74:86:98:01:96:
         9c:ad:4d:09:a1:a5:df:1b:53:3c:a2:e8:d8:c4:be:49:42:2c:
         f9:d7:80:f3:0d:40:f8:cf:f8:ce:fa:58:42:a5:96:2a:b2:1c:
         51:28:74:2c:7c:85:0e:2a:91:15:bf:b0:08:64:71:4e:d7:92:
         fa:c7:7b:8d:28:a2:b1:ec:28:ae:dd:0c:fa:f4:05:e6:99:d9:
         73:73:48:16:cb:69:6e:5b:d3:e3:8a:49:31:8d:47:11:a0:6e:
         cf:f6:23:9f:d1:fb:14:07:40:97:ee:7b:61:f9:2a:b4:42:61:
         84:1d:ba:ee:41:54:8a:1c:9e:16:64:da:cf:c2:0f:9c:01:7b:
         b4:9f:5b:7c:fc:17:7c:3c:84:de:40:5c:21:5d:f2:0f:90:d1:
         e1:02:14:b0:17:31:d4:5f:ff:1d:4a:3d:b5:88:85:eb:95:e2:
         32:aa:83:34:00:84:af:0a:0a:ba:e9:a5:ea:56:1d:0f:8e:1f:
         16:c1:2e:a1:df:b4:62:ee:5f:13:3d:7a:ed:d2:c4:ad:7d:f5:
         ba:67:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:54:57 2025 by rpki-client