Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa
File:                     762b713f-cd50-3156-9140-2a8d57854133.roa (raw, json)
Hash identifier:          WzLHzLBzFkBsrYUbPcOSquABtVczdTi/5FJRDCDnhp0=
Subject key identifier:   7D:12:82:F5:AD:55:9B:D8:48:4B:FD:58:9D:75:C0:A0:D5:B7:6B:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95447A1B60887928C50E780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa
Signing time:             Thu 08 May 2025 15:41:07 +0000
ROA not before:           Thu 08 May 2025 15:41:07 +0000
ROA not after:            Wed 06 Aug 2025 15:41:07 +0000
asID:                     36621
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:47:a1:b6:08:87:92:8c:50:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:07 2025 GMT
            Not After : Aug  6 15:41:07 2025 GMT
        Subject: CN=339cded0-7ad0-4c9f-aaef-5398e95cadf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:4d:07:e1:e1:fb:2a:7c:3b:42:fd:33:16:
                    17:27:7e:47:7e:a5:59:f2:d7:bb:c0:b5:b2:59:6d:
                    41:cd:63:25:fd:8a:19:7d:e6:b3:d5:a7:38:1e:ac:
                    89:bf:b9:9b:9a:69:8d:4d:b2:74:99:da:cc:e2:d7:
                    16:28:07:c0:a2:53:f1:70:ed:1c:f8:c3:5e:e2:20:
                    8d:0d:7d:19:64:de:d3:18:f7:bd:a2:f9:fe:d4:c6:
                    70:6b:73:ee:bb:06:8f:0c:4d:f6:fd:1d:2d:8d:61:
                    e9:fe:06:e0:bb:12:16:c3:9d:37:9d:02:50:f6:4a:
                    86:86:db:39:22:0b:07:57:9d:2c:6d:f0:d0:78:ba:
                    e5:22:0e:1e:d5:42:af:fa:53:22:9f:87:5c:7c:ed:
                    e4:54:e8:f3:44:b1:83:60:25:ce:7a:70:e0:c3:43:
                    6f:2c:b6:df:24:e9:07:32:cd:74:e6:c8:16:5d:18:
                    c6:30:43:ec:f3:36:05:17:44:7c:8e:86:2b:2c:91:
                    23:c8:da:3e:2f:0a:28:21:b8:ba:1b:c0:f0:e5:8e:
                    7a:61:6e:7c:e7:6d:4c:01:08:70:c3:98:17:7d:4f:
                    de:c0:d6:10:7f:6b:08:10:87:e5:cf:07:56:b6:a3:
                    ec:cf:d8:3f:95:8e:01:3b:d7:00:6e:bb:74:31:9b:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:82:F5:AD:55:9B:D8:48:4B:FD:58:9D:75:C0:A0:D5:B7:6B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/762b713f-cd50-3156-9140-2a8d57854133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:3d:2f:ce:52:df:f2:08:0a:77:11:0e:c0:e4:d0:5a:5d:
         2c:e8:a7:cb:b5:56:32:c6:65:3b:47:1c:be:7e:c0:9b:e4:06:
         5b:27:3a:89:82:90:e0:04:6b:26:d4:a0:8b:7a:ca:74:b0:74:
         67:98:31:c6:e5:e0:24:da:a4:b7:2d:ff:1a:83:39:92:0b:47:
         ed:79:71:e1:c5:11:e7:92:ba:e8:e5:b2:9a:dc:3e:d7:32:7c:
         99:12:2f:27:0a:87:0e:c5:21:40:ee:08:5f:bb:12:32:0f:6c:
         73:e7:31:44:86:ae:d9:ce:6f:8a:59:b0:5c:8b:d0:be:5e:ca:
         d0:1a:f1:e5:8b:7a:a8:e2:d5:03:98:03:cd:9e:ac:80:9e:a5:
         41:53:3a:67:24:73:06:fd:bd:b8:9a:a4:5c:81:3a:06:5f:00:
         29:9a:3c:a9:56:63:58:1e:d0:4e:a1:0a:1b:55:f2:09:93:d7:
         9d:6e:88:57:9d:f8:fa:6d:f5:a8:77:e0:2f:68:1c:1a:ef:10:
         67:f8:61:c3:5a:64:73:e3:06:05:a4:b5:56:9c:1c:b1:da:95:
         44:dd:e3:26:e6:fb:19:c4:61:3a:aa:84:b8:16:72:0d:1b:fd:
         5e:c8:d6:50:13:df:80:7f:43:d0:5c:d5:cb:51:3b:68:9d:3f:
         f9:35:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:36:38 2025 by rpki-client