Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa
File:                     c4584eab-d322-3113-a0ef-1bd70b1326ba.roa (raw, json)
Hash identifier:          x6FSvke8I1hMq4fGMUN3s8/m2y6aqnrUhiu1gYWXxis=
Subject key identifier:   C9:90:96:0C:1C:71:4A:DC:29:3D:DF:66:EA:76:95:00:C5:73:65:49
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285849C0A4D7F290EB3EE2D34E37E0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     20177
IP address blocks:        198.248.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d7:f2:90:eb:3e:e2:d3:4e:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=da09cdde-1034-4a8d-bc68-f30186278122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:c2:29:8b:3f:71:13:94:2d:53:7f:e6:7e:
                    da:84:28:05:76:04:ef:00:f2:e1:fc:90:3b:3f:09:
                    00:b8:fa:3f:32:9b:e2:eb:35:9b:a0:63:ce:1e:04:
                    71:d9:5b:b5:ff:7e:81:ab:19:df:59:40:f9:cb:6a:
                    c0:12:9b:08:27:53:45:e6:66:81:34:8b:5f:76:7f:
                    66:1c:e5:b6:5c:af:c4:85:fd:37:c1:f2:52:69:fe:
                    6b:f5:a3:28:4d:a1:28:af:4d:ce:12:61:c0:a8:d7:
                    7f:9f:b9:f0:cc:2c:39:ee:b4:f9:ff:09:bf:3d:ba:
                    d3:13:72:98:ad:0f:03:f1:1d:78:8f:a2:d7:74:1f:
                    1c:35:59:68:73:0d:11:3c:09:5b:a4:2c:31:2b:9b:
                    f1:da:f4:7c:94:c2:a1:66:de:7e:00:7f:95:db:94:
                    55:52:b9:79:7f:d2:1c:62:b5:c2:ac:e8:35:25:98:
                    e9:96:1d:bd:59:1a:0d:f8:d0:ea:10:8d:21:12:31:
                    b4:a6:9b:06:a4:af:f0:85:fe:86:65:ae:7f:47:fd:
                    f1:de:4b:79:1c:93:b1:e6:44:3a:58:05:08:97:23:
                    81:7c:37:3e:54:0f:4c:b5:10:88:44:1e:19:dd:d1:
                    2b:b2:80:6b:17:a6:7f:8b:88:45:38:60:90:cd:26:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:96:0C:1C:71:4A:DC:29:3D:DF:66:EA:76:95:00:C5:73:65:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:da:01:91:b1:86:47:ba:8a:ea:7d:a6:8d:0c:d6:7b:68:4f:
         99:72:ac:59:e4:95:34:6d:f4:64:3e:24:bf:d4:18:55:c2:5a:
         49:7c:cf:3b:02:5b:42:da:12:9c:ff:41:c0:ab:9e:5c:d4:09:
         4b:55:0f:73:73:1b:14:d6:1c:8b:9b:de:fe:00:01:47:3b:1e:
         d8:ab:22:9a:0a:a0:35:71:7d:ed:d1:fd:9d:3b:91:50:02:f5:
         50:7a:16:44:ae:1b:af:d4:c6:c6:82:8d:05:e1:fb:67:31:1e:
         49:16:0c:61:5b:03:c4:aa:c4:aa:78:0d:e8:28:8c:dd:1d:0b:
         8d:f0:81:05:ec:59:a9:7f:0b:fa:2f:96:e8:6b:9a:08:53:3a:
         aa:fe:36:7f:37:e9:73:5e:d7:d2:84:a0:fc:01:8e:50:7a:38:
         d2:6c:fc:f1:fd:af:57:a6:f1:c2:3d:d4:08:79:6b:ac:6e:3a:
         36:5d:09:ec:4a:45:eb:d4:35:d7:d1:f1:21:c2:51:86:ce:bb:
         51:43:a1:9b:ef:50:a8:52:8d:3f:91:bc:4e:84:36:a7:1c:e7:
         f0:68:74:18:c7:e4:86:d2:9d:6a:63:7a:23:70:9a:9a:b7:94:
         54:85:e2:7b:b7:a4:a4:59:ba:74:c0:bc:77:1a:7f:88:0c:c1:
         23:3e:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:43:19 2025 by rpki-client