Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
File:                     ab0417bd-e109-3009-93c0-f235c176e944.roa (raw, json)
Hash identifier:          V7Z5EIvHO+bFwMVJooWfSEDjm4CIEBFgysUpEBZNc5A=
Subject key identifier:   70:5D:BD:8F:0F:BE:FA:EC:85:5B:DC:1F:D0:CE:E6:4F:7D:2E:77:8B
Certificate issuer:       /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
Certificate serial:       010D0C9F43285849BDDA3BACE3F308812F56AC00
Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     62830
IP address blocks:        198.62.201.0/24 maxlen: 24
                          2620:52:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3b:ac:e3:f3:08:81:2f:56:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=32bb9d90-39e6-4dcc-b08e-b3d05644d567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:58:f5:00:41:49:af:1d:72:cd:40:9f:0f:
                    db:a2:06:7e:68:16:26:ce:95:22:38:8b:99:df:3a:
                    dc:56:fd:42:6c:8b:9f:11:72:0f:2a:04:7b:78:f9:
                    ba:65:0c:b2:d6:5b:f8:76:79:6b:3a:5d:91:cd:ba:
                    39:b5:36:f3:fb:6d:4d:0b:ae:06:56:fe:17:d7:14:
                    31:57:d9:db:ca:47:14:0f:cb:77:b0:c1:f1:cf:d4:
                    32:eb:35:79:f0:6f:46:ec:5d:ff:96:2e:98:e2:43:
                    18:d8:5f:f4:df:d1:36:c0:8e:25:09:5c:01:cb:d3:
                    8a:4a:08:26:44:4b:ed:ab:ac:b2:b6:b2:68:b1:9c:
                    06:08:9c:d1:d1:ea:bb:8b:cd:a8:88:46:aa:99:5e:
                    e0:ac:c6:cd:7e:ab:ee:c1:f2:3c:5d:61:16:7d:79:
                    69:32:00:6d:60:63:0b:db:0c:5b:6e:30:30:c9:31:
                    92:66:46:bc:05:63:38:c0:3c:1b:51:b5:97:7a:26:
                    3f:d3:9e:9f:7c:7e:da:48:a8:4b:ee:35:11:1b:c0:
                    08:33:bf:96:0a:8f:ea:e5:78:16:05:98:77:b5:1a:
                    7c:45:88:f5:df:08:5e:92:d5:2c:86:ed:73:03:52:
                    5f:83:f3:98:bd:e2:5b:0c:a8:bc:6d:76:c4:91:dd:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5D:BD:8F:0F:BE:FA:EC:85:5B:DC:1F:D0:CE:E6:4F:7D:2E:77:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.201.0/24
                IPv6:
                  2620:52:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:82:7e:35:0b:b2:1a:c3:9d:ae:0f:54:ba:5c:da:42:cc:
         2b:60:5c:ef:80:34:ee:be:0d:92:e0:d9:e0:e8:d6:6d:f4:2c:
         76:4e:a9:e7:b3:3f:18:76:a3:bd:15:6e:f7:f8:91:32:3f:5e:
         1e:00:a9:8d:bf:5c:c7:7a:d1:ed:fb:36:5a:d7:66:11:5f:5b:
         ef:b2:0c:9b:82:b9:bc:41:3a:30:14:d9:c4:df:2c:02:7b:be:
         26:26:a1:0d:4d:13:32:89:be:bc:c9:f9:f5:ab:b3:77:51:61:
         68:ce:60:97:a2:a5:94:ed:88:4c:22:6e:8a:db:8e:f8:f5:95:
         5b:4b:1b:d5:ff:21:43:7e:3f:65:5b:a6:24:b1:7b:3b:ee:ab:
         c4:ce:fb:cf:ea:8b:26:86:e9:4b:ab:7c:cd:98:38:7f:8a:ef:
         6a:13:96:de:b5:d8:d7:be:46:b5:69:c8:ab:49:44:e7:c9:c4:
         ca:ef:9f:00:6a:28:39:f4:3e:c4:78:6b:af:64:69:04:48:47:
         d0:e9:7f:22:a7:41:d1:e2:17:12:e1:7b:9b:eb:cf:f8:1d:18:
         8d:19:15:08:e8:88:bd:b8:35:f8:59:73:88:a6:fe:d4:d0:ed:
         4e:65:b0:4e:c4:5f:6c:af:f2:03:64:92:7d:7c:56:43:0a:01:
         aa:bd:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:37:00 2025 by rpki-client