Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa
File:                     9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa (raw, json)
Hash identifier:          57UQYymnUqMh6qdQHHP3qLbfm5VvqD93fbZFlCliMFg=
Subject key identifier:   24:09:93:A2:E9:41:35:2F:F8:E4:C0:3B:E3:38:E7:99:B7:CE:32:4A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A13D32D865214162B2E00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        198.71.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:13:d3:2d:86:52:14:16:2b:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=781f665c-7acb-40a8-823f-8a070b1b029b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:4b:4a:ff:b1:d1:e7:d4:50:11:b6:a3:cb:
                    86:67:dd:95:47:26:70:6b:d3:59:12:03:7c:67:9a:
                    e0:fa:ae:7a:30:36:45:2c:33:98:74:f7:09:7d:ca:
                    54:27:53:ad:2c:7f:b4:89:d8:b3:cc:a7:b8:d4:61:
                    5c:e4:ed:e7:3c:de:6e:4e:a0:4f:21:fb:b2:13:af:
                    e7:61:3e:fe:9c:ed:fd:68:ef:81:a3:1a:9a:d9:a0:
                    50:06:8f:f4:05:72:90:b3:1e:a8:23:4a:78:37:6d:
                    08:35:2d:49:f2:63:43:1f:9a:7d:aa:39:8c:da:ca:
                    bc:6f:a3:96:a7:4e:ce:da:fb:ac:a4:fc:fd:54:34:
                    bf:d7:48:78:72:1c:a7:73:ae:82:68:b9:8f:3f:a9:
                    45:51:49:0d:cc:70:4c:da:17:15:8a:5f:99:dd:aa:
                    3d:40:4b:df:ca:be:30:13:3a:3e:48:81:3f:74:7f:
                    a0:c6:39:36:01:98:da:b8:41:db:17:c7:a4:b2:5a:
                    5f:2f:93:da:94:1b:ac:18:b3:6e:a4:d8:2b:d3:d4:
                    e5:4c:30:ab:73:23:f6:d8:31:f7:a6:e2:be:2a:02:
                    e8:c0:de:7e:fc:50:46:26:9b:c8:a4:34:c2:20:8f:
                    43:2a:fb:ff:57:a7:04:1e:39:bb:ad:ba:72:e2:61:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:93:A2:E9:41:35:2F:F8:E4:C0:3B:E3:38:E7:99:B7:CE:32:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:17:5d:6c:58:ac:6a:d7:ac:2c:81:6f:90:22:ac:2e:1e:fb:
         ce:f4:6a:04:0e:13:28:15:1f:50:6f:95:38:a4:2a:0d:91:88:
         fa:e6:7d:8c:0d:da:0b:66:e7:50:dc:03:c9:e4:82:47:dc:02:
         37:4b:27:dc:a6:10:e0:b2:ae:c9:08:ff:1f:fb:f0:40:e7:22:
         c5:a3:31:fe:0e:14:c4:20:a7:75:9a:7f:1e:96:43:32:fb:4f:
         4e:6b:5f:c5:9c:73:34:e4:f0:2b:35:ee:02:5a:73:f2:83:75:
         86:9c:f4:4a:cb:a5:e2:ac:7e:28:0b:83:c5:d0:b5:9c:7e:d3:
         27:e9:39:7a:21:18:5b:57:a3:86:01:21:c4:37:c4:c6:4d:79:
         38:6d:e9:7b:d7:53:eb:c2:a2:db:4e:af:f4:b1:f9:17:ed:19:
         07:94:05:53:e7:93:09:68:3e:be:b6:7d:d1:df:35:33:05:8a:
         a5:4d:a8:f5:ff:b6:27:fb:19:50:07:88:5f:42:f5:20:f0:66:
         63:bd:a3:9a:e1:eb:b9:0a:7b:6a:85:23:92:f1:89:2f:e7:a0:
         0d:65:b7:3b:b7:15:76:fb:1d:59:2f:cd:ad:b4:44:e0:6b:c3:
         3a:25:8a:da:d6:f8:a3:6b:14:d8:56:0a:57:3c:d8:9f:b9:0f:
         26:03:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:35:20 2025 by rpki-client