Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c136120-ea38-346d-ac0b-170d181570b8.roa
File:                     2c136120-ea38-346d-ac0b-170d181570b8.roa (raw, json)
Hash identifier:          YMVJT8hxAj88UZCqGtlvTlWbhFWeQpH2H4e3yqT5UnU=
Subject key identifier:   DC:53:02:49:AE:9B:41:40:6F:BC:24:2D:18:DC:FB:6E:6D:61:5F:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95447F168EF360749F55480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c136120-ea38-346d-ac0b-170d181570b8.roa
Signing time:             Thu 08 May 2025 15:41:07 +0000
ROA not before:           Thu 08 May 2025 15:41:07 +0000
ROA not after:            Wed 06 Aug 2025 15:41:07 +0000
asID:                     36622
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:47:f1:68:ef:36:07:49:f5:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:07 2025 GMT
            Not After : Aug  6 15:41:07 2025 GMT
        Subject: CN=4f85672d-5820-487a-b941-e736793a5bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:85:46:66:6e:46:3a:41:54:ee:a2:12:a9:
                    4b:a8:5f:92:0e:59:a2:51:21:49:38:52:ae:50:07:
                    c4:32:d8:84:a3:89:98:fd:16:f4:8d:16:f7:48:d0:
                    5f:20:43:42:01:db:0c:28:db:6a:4b:2f:77:5d:ba:
                    70:ab:4f:9b:cd:8a:6a:91:4e:6c:9e:b4:0e:da:31:
                    59:b9:d4:17:78:e7:fb:f9:62:67:12:48:28:32:3a:
                    ec:3e:7c:bb:3e:ce:9d:ae:8c:26:6a:36:8e:0e:82:
                    64:aa:6c:27:ba:a2:a6:01:b3:66:cf:d1:10:51:f7:
                    3e:47:2a:51:50:08:f6:8d:16:bf:6f:ff:a5:29:67:
                    a6:b9:fa:16:e8:03:14:ef:d8:fe:ce:6b:cb:b7:e9:
                    a4:4a:6b:28:31:01:1c:6a:1f:0f:2c:24:1f:c0:b5:
                    9e:b3:a6:36:d4:b5:57:0c:15:da:4d:9f:ad:bf:8e:
                    6b:85:60:ac:16:e0:ea:e1:92:49:63:2d:ed:18:e8:
                    4c:6c:7d:3b:1e:3d:7f:d8:76:95:bf:72:7b:c7:d0:
                    09:df:14:99:ca:74:41:9d:ea:57:92:0a:b4:e2:33:
                    68:5b:90:b0:5c:83:5b:2a:9f:48:67:96:47:1b:57:
                    99:4e:c1:af:a4:cf:e9:66:9b:54:b8:f9:69:08:12:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:53:02:49:AE:9B:41:40:6F:BC:24:2D:18:DC:FB:6E:6D:61:5F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c136120-ea38-346d-ac0b-170d181570b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:88:82:c9:8f:19:3f:2b:f4:cd:0d:c7:c5:6d:93:b2:13:ea:
         6f:b8:5f:d0:b7:55:fa:4a:f9:8f:2f:aa:f6:77:0a:a1:98:4c:
         8e:a9:fe:60:bd:ed:35:e5:de:20:34:d0:2d:f9:e2:dc:bb:a4:
         bf:c2:b3:09:f3:59:92:18:3a:17:e3:9e:8c:5d:67:9f:bc:d8:
         5a:21:00:84:e6:6f:82:14:bf:0e:af:77:ea:49:81:73:d7:31:
         fb:23:eb:e6:fa:7e:58:e3:49:f0:7e:ca:f8:71:05:4a:60:07:
         1c:64:92:9e:ef:75:66:5f:c9:73:21:0a:ff:c0:e6:be:87:77:
         26:bd:c0:4b:92:12:76:26:fb:74:c5:d9:6d:7f:0b:07:4f:41:
         ae:23:9f:f0:99:0b:42:6c:22:a6:24:b2:27:fb:1f:83:c6:b9:
         dc:c3:a0:58:4b:15:f6:7b:48:9f:14:40:81:63:c4:33:19:8e:
         e3:27:df:8d:91:06:03:66:35:34:9d:6e:43:e7:91:04:52:6e:
         ad:ef:a0:a9:48:37:21:8e:de:ef:e2:e0:4d:72:8c:60:ee:e1:
         1a:65:87:09:aa:4c:0f:38:74:71:f7:2f:45:e1:48:44:eb:14:
         38:60:00:40:5e:6c:08:15:54:58:50:0e:8e:e4:b1:3f:61:d0:
         09:a5:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:39:53 2025 by rpki-client