Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
File:                     8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa (raw, json)
Hash identifier:          jjqK1EGDJpdL+68gC5yeWOvLZ2Gwe9cxwV1TBKBEX3w=
Subject key identifier:   DB:A4:15:C8:77:D5:21:98:3F:F6:14:CA:01:E0:77:F0:62:C1:5B:25
Certificate issuer:       /CN=5e580e37-3db1-41d1-ae09-7e84348caffd
Certificate serial:       010D0C9F43285849F9DFD146CD4CB594AE0F3D00
Authority key identifier: FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     17207
IP address blocks:        198.59.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d1:46:cd:4c:b5:94:ae:0f:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e580e37-3db1-41d1-ae09-7e84348caffd
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=cfdb6c66-28f9-44a8-88fa-9b2878556c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:31:4d:7f:30:e3:30:7d:da:ac:94:66:db:
                    84:a1:09:5b:97:92:30:d0:db:8a:2a:6d:06:e0:e9:
                    af:43:81:0d:32:10:12:29:e5:0a:5e:17:09:76:11:
                    d2:f8:9c:21:d7:36:1d:c7:de:7a:07:a1:0a:9e:29:
                    61:a4:0c:6e:af:84:a1:ac:51:1d:d6:bd:c5:93:89:
                    32:7e:79:31:7f:75:16:76:34:e6:81:ab:36:ee:5d:
                    5a:8e:1f:a4:c8:7c:8f:e2:68:cb:70:1d:5a:2f:4a:
                    83:d0:63:0a:db:19:90:a6:ed:5d:a9:ab:6e:da:f2:
                    2a:f7:d4:d0:47:24:ab:53:f7:3d:59:c6:a9:00:93:
                    0a:8e:ea:49:de:c7:5e:cf:d4:ac:b3:36:08:32:ce:
                    16:52:26:e5:f2:18:d5:6b:69:9d:60:6f:7f:5b:9a:
                    7d:42:6d:de:31:34:9f:29:ba:ef:f5:71:27:1c:fa:
                    5a:80:0f:62:ec:8c:ba:75:98:d5:cb:62:7f:c7:54:
                    36:27:e6:73:c1:b9:4c:14:36:43:3d:1b:4b:9a:d8:
                    6e:e9:94:43:98:c8:50:84:db:3f:89:65:a5:2f:9d:
                    be:ed:ba:d7:1f:60:66:e6:db:be:d2:8c:4d:8b:5d:
                    b4:17:03:0d:11:69:aa:e6:d8:26:dd:cd:11:7e:6d:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:15:C8:77:D5:21:98:3F:F6:14:CA:01:E0:77:F0:62:C1:5B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/8bd88a3a-7580-3c3e-8cd3-8ec3d05ba56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd/5e580e37-3db1-41d1-ae09-7e84348caffd.crl

            X509v3 Authority Key Identifier:
                keyid:FD:BE:C7:47:D3:CD:1B:2D:E7:F7:64:60:9F:03:41:94:6A:4B:98:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5e580e37-3db1-41d1-ae09-7e84348caffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:d2:05:e6:db:e9:18:cb:a6:1c:db:0b:29:6e:f5:b1:72:
         8d:75:fc:9f:f0:1d:2b:fc:69:dc:ff:d1:ed:4a:b3:c3:62:5c:
         11:62:34:42:e9:75:dc:56:82:a8:40:bf:a9:21:d1:69:b7:c7:
         1e:e8:2b:a7:40:36:dd:32:ad:02:13:5b:d0:10:af:e4:40:a2:
         86:ea:6f:ae:26:a6:fb:a0:4e:4b:1d:c2:1b:26:3d:92:90:1d:
         4b:2f:c5:4d:61:1e:97:0c:24:2a:9e:14:32:62:22:b6:b6:87:
         01:f3:cb:08:df:e8:dd:22:23:a1:55:0f:40:f4:49:02:73:6d:
         93:0e:a8:87:2f:4d:2a:c4:b1:7e:ae:b6:8a:cf:66:75:59:2d:
         52:25:70:06:dd:5e:a4:af:44:f8:43:cd:b9:e3:34:97:3c:10:
         fc:19:d5:c7:e6:4e:50:07:a2:87:44:8b:d5:e4:2e:ae:06:70:
         7a:8a:d5:b6:ec:d2:f0:99:f4:3a:cf:1b:fb:da:32:37:53:e2:
         c9:e2:99:c1:0e:a3:83:83:53:64:ff:d5:92:a4:f1:26:55:8e:
         b1:df:ca:49:cf:fe:19:0c:ca:2a:85:f5:ae:b5:c0:01:91:e6:
         cc:0e:bb:8d:47:bc:a6:3d:2b:9a:69:26:94:74:a5:d0:b8:d7:
         4e:71:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:14:44 2025 by rpki-client