Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
File:                     3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa (raw, json)
Hash identifier:          sPzU78rilm77N6Tnbx9ilNzi51pkPA/y0DFRYi5AKwQ=
Subject key identifier:   36:90:DA:C4:3B:22:5F:53:D9:8C:41:D5:96:D3:09:F2:55:EF:38:A9
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849C20A1266568B4A35C7AE2380
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14061
IP address blocks:        198.232.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:12:66:56:8b:4a:35:c7:ae:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=926de4d9-0561-48dc-91c1-aaa656bd375d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:56:ac:01:a9:06:50:b4:62:fb:2c:d6:41:
                    ad:ab:7e:45:e0:e4:68:7e:b3:ab:fb:5c:56:4b:bb:
                    98:13:c1:22:88:62:0b:26:a7:18:31:07:65:42:dc:
                    84:15:1e:cf:dc:71:5a:44:d9:b2:5f:b7:a9:36:fd:
                    fa:64:51:1f:ac:6a:55:8a:3d:eb:1b:33:f6:49:c3:
                    75:dc:c0:73:be:b5:e4:bf:ff:d7:c0:cf:ee:a6:e4:
                    a4:70:f7:19:bb:d1:df:52:cf:77:f9:ee:8a:35:79:
                    c0:88:92:b9:a4:e5:85:57:00:d4:c3:cb:68:db:e8:
                    4b:e9:a0:28:a7:63:62:85:d8:0f:33:90:44:ee:9e:
                    44:e8:6c:a5:e4:b8:84:5f:3d:3b:46:bf:8c:45:79:
                    2f:9e:57:dd:2c:a4:9e:53:ea:3c:72:ea:2c:56:23:
                    d8:12:ce:17:f2:08:70:10:16:4d:5e:37:de:98:84:
                    18:1f:e0:2d:7f:e8:05:67:6b:43:12:1a:0d:b6:91:
                    7e:18:5a:c6:9d:2c:5f:11:4a:1d:85:f9:4a:48:c5:
                    d1:0a:31:33:d8:37:f1:da:10:ec:4e:35:ea:f0:79:
                    f3:0c:44:7e:26:02:5e:0d:76:ba:59:42:54:c3:b3:
                    e4:97:c3:54:90:a2:dc:c9:8e:78:c8:bb:83:98:3c:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:DA:C4:3B:22:5F:53:D9:8C:41:D5:96:D3:09:F2:55:EF:38:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:e9:6f:6c:96:f2:d1:88:92:3f:16:d0:c1:8e:c5:be:bf:
         0a:dd:91:36:3b:0a:4f:b2:b0:e0:3c:d5:d9:30:bb:57:ce:26:
         d7:87:1a:02:a5:7c:f0:2e:c0:80:07:62:1c:2f:e6:27:c0:1c:
         be:c9:06:60:4c:a0:41:55:fe:f4:e2:13:ee:12:bc:25:1f:a7:
         f5:49:b4:1d:fe:f4:96:b4:dd:9b:76:68:e8:60:69:87:09:30:
         a1:cc:5e:1e:04:1a:7f:22:a7:48:f3:36:31:f8:b5:91:a2:c0:
         c7:e6:60:21:ac:b8:f7:08:d1:30:c9:dd:91:ff:48:2f:a7:63:
         60:a2:e8:1d:99:5e:60:c3:8f:87:62:39:f3:5c:44:14:32:1a:
         a8:35:b1:ea:af:ae:6e:a2:d2:6e:0b:d6:3f:f4:4d:fa:4e:f6:
         2b:dc:85:d1:a5:52:dc:b6:53:82:15:4a:73:8e:b8:2d:39:b5:
         55:9a:ab:97:8d:e8:83:1c:45:d1:c5:8a:ae:9f:a6:5e:de:ed:
         b0:41:c5:d9:ae:74:12:05:0a:ad:8b:5b:a5:8b:a2:f0:cd:44:
         d9:7a:b2:24:a8:a9:bb:f9:ec:d4:97:65:c3:e8:bf:09:ee:be:
         a6:87:ae:cf:d0:bc:ba:f0:dc:b2:3d:2c:13:cb:4b:03:5a:97:
         e3:da:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:50:35 2025 by rpki-client