Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3c6cbb-394e-3cc4-a312-d927d89943ce.roa
File:                     3c3c6cbb-394e-3cc4-a312-d927d89943ce.roa (raw, json)
Hash identifier:          KUhiYZe9yX3eHdn0ryahsngq2wIkXKYkSRdsx7H/X0Y=
Subject key identifier:   0C:85:62:88:57:8A:14:C5:0A:00:7D:F2:DD:8E:53:71:2E:43:CC:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C954487974AADD35A0D50540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3c6cbb-394e-3cc4-a312-d927d89943ce.roa
Signing time:             Thu 08 May 2025 15:41:07 +0000
ROA not before:           Thu 08 May 2025 15:41:07 +0000
ROA not after:            Wed 06 Aug 2025 15:41:07 +0000
asID:                     397201
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:48:79:74:aa:dd:35:a0:d5:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:07 2025 GMT
            Not After : Aug  6 15:41:07 2025 GMT
        Subject: CN=8f92214f-79ae-4ba8-b9ef-65742e4bd464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:47:51:f9:f1:e9:e8:89:dd:6b:3f:bd:94:
                    41:4e:e0:2d:e8:bd:4c:6f:ed:59:92:ec:95:21:0a:
                    f6:79:fe:24:27:49:01:22:32:de:4c:7a:cd:71:a9:
                    9a:a9:83:09:51:9f:f8:bf:d5:14:7e:1a:a7:bc:a5:
                    7b:ac:78:ff:10:72:99:ea:48:99:2c:63:80:7f:fa:
                    84:ca:d1:bc:1b:ef:c0:7f:71:ab:9d:cb:84:d7:35:
                    af:c2:0d:0c:fc:08:e3:f5:85:76:f5:e8:63:e2:5f:
                    17:7e:5c:cd:98:74:d4:05:7e:8e:aa:44:6d:aa:99:
                    52:43:d2:7a:b2:d8:e2:e4:f2:d7:95:6a:ad:7e:8e:
                    6b:9e:5d:59:23:d3:36:66:33:1e:fb:2a:49:c8:62:
                    45:69:d4:1e:19:b3:b2:6b:34:a1:07:37:94:95:0d:
                    43:b4:c8:37:b6:1f:e4:29:3e:45:80:fc:b2:b3:12:
                    d6:43:71:be:f3:b3:7c:05:1b:25:1a:90:9f:bf:3e:
                    2e:bf:72:8b:67:3a:2d:f7:91:9a:0b:07:d6:a5:ba:
                    1b:54:42:1c:03:6f:c6:50:a8:32:6f:86:bf:61:19:
                    48:51:38:8d:fb:ce:80:86:b5:a2:37:a5:c5:29:aa:
                    8b:9e:e7:7c:fd:d1:7c:c0:f9:80:15:31:0e:4f:e1:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:62:88:57:8A:14:C5:0A:00:7D:F2:DD:8E:53:71:2E:43:CC:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3c6cbb-394e-3cc4-a312-d927d89943ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:81:19:3e:2e:00:f9:84:2a:23:48:ce:85:52:2f:e7:ad:
         6d:8a:87:3d:85:67:bc:40:08:8e:0d:f2:1b:e6:77:b5:d1:12:
         f5:df:bd:f9:81:13:ca:3a:94:1c:91:0c:b6:93:53:fa:4d:df:
         41:2c:41:4e:35:a2:42:11:db:12:dd:02:a1:b1:ba:cf:3a:d2:
         72:c7:c9:ea:c4:19:e4:77:db:87:19:d5:e7:89:46:71:63:a3:
         fc:28:c9:3c:b4:47:b9:3e:67:7e:e2:32:8f:54:73:80:42:3c:
         3c:45:b2:7f:50:39:83:74:dd:0d:e9:f9:e1:fd:8c:bb:7c:ee:
         fd:c6:63:79:3b:83:2f:cc:28:5f:b5:b1:5d:9d:98:61:7c:8f:
         4c:75:6d:27:13:11:4c:58:cc:92:32:35:7d:25:09:df:6d:de:
         66:88:cb:84:d3:31:ab:95:52:58:04:24:37:f2:54:0b:0e:df:
         23:50:b9:67:08:7e:1b:f2:2e:6d:0f:a7:29:9b:56:a5:45:66:
         87:79:2c:c5:68:6b:c4:63:c8:ac:13:ea:2e:a2:46:db:58:3f:
         2e:ee:fe:89:cf:b2:dd:65:22:06:64:0d:24:1f:bf:d1:a6:ac:
         21:55:14:6e:61:b1:ad:12:0d:7e:66:e4:73:6d:ea:cb:b0:ba:
         fc:8b:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:42:47 2025 by rpki-client