Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa
File:                     7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa (raw, json)
Hash identifier:          V4AeI8OhkilPasDjPB/FZZYcDXdBbI3bgRxnPv+Qe34=
Subject key identifier:   9E:21:5A:DA:89:38:86:0F:D8:EF:34:43:8A:DB:D6:9B:FA:3A:C6:92
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F43285849CE9A5246801D986C475DE380
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14907
IP address blocks:        198.35.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:52:46:80:1d:98:6c:47:5d:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7c27bd89-149b-429e-a7fe-054135746369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:4d:ab:47:4b:d5:08:90:4c:30:c7:b1:57:
                    9a:36:ac:6f:e9:bf:1d:40:cc:4b:67:2f:31:ec:fa:
                    d3:35:13:8a:1d:7b:a1:3a:96:a9:59:52:72:94:72:
                    1e:a5:be:d2:92:22:f9:a2:16:0f:bc:c5:e8:ae:8c:
                    11:02:2a:05:4d:70:7b:53:ea:65:c8:50:26:e4:07:
                    c7:36:cb:a1:c6:2c:9e:26:2a:eb:e6:80:4e:cc:6e:
                    bd:df:71:05:04:13:5f:19:91:a5:b6:c3:0a:5f:48:
                    2e:ba:99:ee:49:5c:fb:e5:c8:98:ac:45:1c:97:a4:
                    dd:cc:9f:f8:59:d8:08:e2:0a:4f:68:da:16:67:06:
                    0d:aa:df:d8:ec:2e:47:91:45:d0:19:8f:ce:d3:53:
                    57:a7:c3:0c:9b:3f:a6:68:45:08:7d:52:8e:ea:21:
                    49:fe:53:79:8b:07:69:05:2e:1e:91:67:0b:34:c3:
                    0f:66:06:e0:d0:01:04:e9:e1:96:0f:63:94:69:b5:
                    2c:6b:54:5f:d0:5e:22:a8:d4:03:b2:aa:e9:7c:9c:
                    dd:f9:b0:e4:fa:5d:6f:09:52:ba:eb:a4:9c:83:fc:
                    ba:5e:fc:4e:01:1d:93:09:88:a7:b1:24:40:31:02:
                    13:09:94:a7:be:87:ca:b5:23:cf:79:e4:93:8c:c4:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:5A:DA:89:38:86:0F:D8:EF:34:43:8A:DB:D6:9B:FA:3A:C6:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:43:4b:5d:1b:a1:60:10:2e:65:e8:47:ac:dc:87:d5:ff:77:
         53:fc:0f:b4:08:52:9e:3e:64:a4:ca:8a:95:57:e7:12:c5:5d:
         5a:69:6b:cd:cc:e1:8d:09:55:c5:44:f5:51:05:fe:04:ab:68:
         c8:23:a7:b2:c8:64:e8:49:45:22:10:e4:33:c9:11:2a:f8:26:
         ce:fb:a9:e6:10:c0:a3:4a:4b:fb:e3:58:42:73:5e:0b:02:b5:
         f7:ba:31:33:bb:af:e2:81:03:cd:8b:bf:ec:bc:a2:32:81:38:
         b1:44:55:6c:b5:3c:fb:cb:43:f7:54:bf:78:95:fe:de:37:2b:
         b9:47:77:28:f4:cc:b3:83:58:8f:df:ec:dd:f9:e6:b3:cc:64:
         c6:c1:f9:f5:ae:54:77:33:70:69:02:88:21:24:e3:eb:d8:ed:
         cc:92:1e:a4:e9:86:97:e9:55:81:89:18:5f:b4:6f:68:7e:cd:
         9a:87:1b:66:f6:fb:0b:20:40:4c:2e:24:32:ab:7b:75:e6:05:
         d6:eb:18:99:59:d4:49:52:8e:75:b5:5e:32:b8:d6:1c:c5:41:
         e3:42:a1:91:8b:14:fb:b5:63:fe:6d:12:64:48:0a:b1:dc:d5:
         ee:6b:05:f2:51:f1:cb:10:9a:bf:fc:3e:39:40:c6:c9:49:3d:
         8e:a6:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:58:17 2025 by rpki-client