Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa
File:                     79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa (raw, json)
Hash identifier:          zZwfatlBEvNEIHKB2Ypy8r1uY5EPjw6Q9rzHz3/KJJU=
Subject key identifier:   3A:46:22:96:4B:0B:75:09:02:97:59:FB:0C:58:37:1A:E3:7D:41:3E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA52B11B8A5ACF3A7B8480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     40311
IP address blocks:        198.45.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:52:b1:1b:8a:5a:cf:3a:7b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b58265fa-49d8-49e3-bdd6-29d0a4cf2f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:76:e1:fe:d0:06:0c:c7:98:f9:b1:68:1d:
                    51:28:3f:65:e1:40:c1:d8:32:85:29:38:35:e8:60:
                    df:1c:54:ca:3c:90:8c:9e:62:0c:a5:6f:32:49:e1:
                    f9:35:a2:ac:72:94:ca:9d:1b:fe:ed:6f:10:20:13:
                    25:b6:96:96:20:3a:2b:e5:73:75:2f:77:0f:97:80:
                    6a:46:0c:c6:d4:6d:ee:bc:af:91:d1:3b:ee:46:09:
                    f1:79:10:e0:54:7e:1b:e3:14:c1:3b:b6:e9:2e:a2:
                    00:9a:56:22:41:0c:d0:af:f4:dd:fe:ce:89:f9:69:
                    d7:fc:ec:d3:de:62:d7:b1:95:23:c5:79:0b:c6:25:
                    0a:29:11:9b:01:0f:1e:28:31:26:86:50:ba:01:88:
                    07:56:43:4b:9b:15:b8:61:c5:31:c4:b5:de:23:34:
                    d2:fb:12:f3:fa:19:db:71:b1:75:b7:23:ca:ea:ae:
                    df:8c:0e:0c:9b:29:f3:30:6a:7e:69:09:9c:f6:df:
                    75:92:17:22:28:ae:5e:5e:e7:02:97:41:bb:c5:e4:
                    29:cd:0f:e5:99:ea:ab:dc:83:a1:b6:67:d1:64:eb:
                    e3:96:58:a1:c1:aa:01:d7:a5:b5:d2:b0:3a:f0:bf:
                    a4:8b:ac:ed:f9:04:46:eb:b0:f1:df:73:31:03:de:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:46:22:96:4B:0B:75:09:02:97:59:FB:0C:58:37:1A:E3:7D:41:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/79d04c2e-e692-3e1a-bd27-4b3e903424cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:ec:45:70:27:a7:5b:78:f3:19:b0:b8:e1:35:bf:9c:d8:
         a7:74:e2:61:10:be:2e:ba:b7:df:d1:40:a8:39:29:0c:da:d9:
         33:7d:40:d2:79:9f:f7:5e:95:45:81:60:ba:70:b9:bd:d3:49:
         76:5c:02:8d:0b:89:d2:9c:f9:64:9f:83:51:24:b6:27:91:4f:
         3d:27:a5:13:9e:3b:a0:f3:75:8c:bc:49:1f:60:e6:d9:d8:a7:
         7e:02:34:fe:88:9c:5e:f2:82:93:eb:6d:c4:99:e9:4c:6a:ef:
         62:8a:81:8e:22:22:60:78:8c:be:5a:5e:65:c2:31:2a:58:9b:
         b9:84:13:93:02:48:9f:bf:0a:fd:9b:6f:4e:3d:2f:54:f2:44:
         99:bd:1a:7d:51:fc:0a:50:32:75:94:56:9c:b4:93:84:b6:5d:
         03:e8:95:ed:1f:38:5f:54:05:b1:ae:c9:3b:1e:64:62:19:d4:
         b8:d3:c8:fd:33:3c:1c:24:3d:ec:35:5f:ed:33:bc:de:b9:db:
         95:f9:8f:23:86:50:fb:a9:bd:95:73:7c:ae:bb:e5:73:82:33:
         c6:04:2d:6a:e5:1a:2d:60:de:21:03:e8:64:c5:96:88:7e:8d:
         bc:da:66:8a:d3:1f:b3:82:10:a8:44:94:22:90:6e:af:e3:d5:
         b5:df:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:41 2025 by rpki-client