Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5db29ff-ae94-3aa8-b853-6cba766c992f.roa
File:                     e5db29ff-ae94-3aa8-b853-6cba766c992f.roa (raw, json)
Hash identifier:          GNXNuvlFhVMh2KUXfIFasa+A2cz1CmRQw0m71URX5JE=
Subject key identifier:   5C:1C:75:AA:C6:44:CF:F6:4A:9F:A2:45:0A:B2:EC:84:E1:7D:D2:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C9544620CB4E1C9E9796A060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5db29ff-ae94-3aa8-b853-6cba766c992f.roa
Signing time:             Thu 08 May 2025 15:41:06 +0000
ROA not before:           Thu 08 May 2025 15:41:06 +0000
ROA not after:            Wed 06 Aug 2025 15:41:06 +0000
asID:                     396558
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:46:20:cb:4e:1c:9e:97:96:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:06 2025 GMT
            Not After : Aug  6 15:41:06 2025 GMT
        Subject: CN=a2967675-1fe6-496f-b356-e642eb286292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:b5:24:c3:62:35:68:06:06:26:f8:22:2e:
                    5c:ea:97:1a:5c:24:3b:44:23:32:f0:82:1c:06:88:
                    b6:13:d2:67:0c:9c:25:d2:d0:b4:ba:6e:9b:d6:83:
                    36:ba:d4:9a:91:b8:21:24:6d:8e:72:3d:97:78:5b:
                    73:6a:ab:fe:83:b0:d4:f4:fc:78:b7:d8:ee:e2:58:
                    b2:70:84:a4:7f:fd:64:de:f8:15:54:f4:39:91:8f:
                    f5:4d:9b:84:7c:51:7f:e1:c7:dc:43:92:65:c7:57:
                    02:80:b4:f5:12:6d:6b:4a:58:cb:3c:2c:29:a8:de:
                    28:24:07:88:29:ed:c8:99:df:74:79:4e:bd:96:b8:
                    66:ca:66:09:93:bb:df:ad:fc:44:4f:28:86:ce:01:
                    52:9e:d2:74:1e:7e:02:ca:fe:18:21:6b:47:4b:75:
                    41:7d:7a:81:68:0e:5b:e5:82:b4:81:ed:77:5a:8e:
                    1f:6c:64:de:0b:1c:99:5d:af:f7:38:78:96:cd:49:
                    85:1f:f0:8a:ab:98:57:fa:a1:d2:2d:f7:b6:5e:0e:
                    a1:ae:c7:e5:b8:6f:7c:d8:5c:8c:dd:e2:bb:69:b3:
                    e4:9e:84:00:3f:48:cc:f0:48:d8:f2:da:d9:c6:dd:
                    f6:70:1a:72:d6:e9:f5:29:b6:63:0e:bc:69:78:8c:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:75:AA:C6:44:CF:F6:4A:9F:A2:45:0A:B2:EC:84:E1:7D:D2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5db29ff-ae94-3aa8-b853-6cba766c992f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:dd:8a:44:95:2d:4b:f8:c6:c8:e1:2e:a1:44:fb:a5:2e:49:
         f9:eb:a2:41:6a:ec:50:ec:4e:5b:9d:68:cd:04:1f:7b:98:f7:
         c8:49:e0:dc:c7:ee:eb:88:f7:bc:2b:fc:42:86:c1:33:ac:d4:
         04:62:ad:0a:59:01:6f:c9:a0:96:ed:c0:9d:ce:41:98:d9:14:
         69:da:38:42:71:60:99:98:09:70:67:42:54:1c:1b:e0:98:36:
         97:4d:de:24:f4:7b:bd:58:ed:51:71:d4:b9:73:bd:31:33:5e:
         74:8e:6b:f1:31:4e:9f:08:c2:64:7a:de:14:8a:0a:62:bd:dd:
         ed:36:fc:67:46:25:55:44:70:7a:bc:2c:67:6d:c7:27:a8:fc:
         47:cc:86:ae:18:b7:5d:03:52:37:56:a3:25:29:84:a8:9c:f3:
         8a:4b:cf:a8:a3:5c:55:c2:f2:db:c9:9a:30:a2:1e:76:9c:c9:
         2d:ab:2d:67:ca:4a:5e:95:02:6a:c2:c4:99:0b:6b:43:48:28:
         a3:5b:fe:b1:c3:88:65:98:82:6b:71:31:08:9a:94:4e:58:99:
         c5:0d:eb:08:1b:72:f1:91:42:98:f0:80:19:85:bb:65:b4:c4:
         26:27:64:b0:2d:04:a5:e1:7a:fc:70:4c:72:40:63:c4:cd:80:
         20:d6:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:00:43 2025 by rpki-client