Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
File:                     33383e35-cfc9-334b-848e-ad7ba56090f1.roa (raw, json)
Hash identifier:          cmgneD8kRG7JBVbt0FkigKFLMwk7ZiDP2I1En5TB3kc=
Subject key identifier:   AB:D3:5E:C1:0E:5D:FF:BA:DE:31:41:38:56:73:99:5C:9D:6F:B8:31
Certificate issuer:       /CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
Certificate serial:       010D0C9F43285849D85F939D4610E949F1D740D4
Authority key identifier: 4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     55179
IP address blocks:        198.168.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:93:9d:46:10:e9:49:f1:d7:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=d43484f4-87ce-4abe-b0a7-5c97aa80eb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:f3:e2:2f:8b:73:82:d5:db:0b:3d:af:7b:
                    3c:16:47:4c:46:c7:c5:41:00:6c:e3:b7:68:99:57:
                    ee:6b:c1:e6:0c:1c:c6:9a:e4:ec:96:b8:3e:2f:dd:
                    97:36:04:f1:c5:ef:0a:87:ca:b9:85:53:3e:ff:89:
                    47:2a:90:f5:56:56:a7:b8:ac:2c:73:f5:1d:30:49:
                    77:10:29:6b:6a:e4:c9:24:c0:86:51:40:dc:f7:9c:
                    0b:7b:d6:cf:73:57:c7:fe:a1:48:5e:6a:c1:a6:20:
                    8e:cf:8c:58:c8:9e:67:6f:d6:99:97:64:02:8d:84:
                    ff:dd:32:d9:09:b3:6c:7e:b9:fd:e8:21:8c:1d:4d:
                    69:63:ec:0d:1b:1f:16:85:90:0d:83:95:0c:4d:00:
                    98:8a:27:59:85:08:45:c0:9d:70:7c:3f:fb:60:ce:
                    7e:a3:35:ce:aa:0c:b1:54:6a:95:47:cb:86:a0:6c:
                    a9:84:99:ff:6a:ab:e7:79:13:f9:81:3e:0a:06:5f:
                    3d:3d:8c:15:52:74:35:de:e7:54:d3:4c:67:f7:da:
                    4e:13:98:9c:40:58:12:72:e8:85:d3:2d:9e:97:82:
                    66:3f:a8:27:4a:8a:bd:46:5e:d4:0a:c9:35:81:13:
                    d7:27:50:d5:ff:7e:f5:19:08:79:33:38:1b:d3:34:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:5E:C1:0E:5D:FF:BA:DE:31:41:38:56:73:99:5C:9D:6F:B8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/33383e35-cfc9-334b-848e-ad7ba56090f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.crl

            X509v3 Authority Key Identifier:
                keyid:4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:a3:f9:0a:df:1f:ff:da:00:a9:a9:ad:31:6e:6d:03:76:77:
         2c:35:c6:be:a4:f8:14:01:0f:bd:95:a5:22:7c:84:93:2f:3b:
         38:f0:3d:02:85:38:96:3c:2b:22:83:01:88:02:12:44:22:c8:
         35:ee:8d:48:60:7c:ba:42:c8:1a:6c:77:a5:46:da:08:2c:15:
         5e:af:67:3a:96:92:c6:6c:99:ed:44:50:a0:3d:61:f5:34:c2:
         50:42:76:3f:91:de:19:21:c2:2f:29:6f:ea:6d:ea:e0:06:02:
         63:2a:41:73:63:d1:80:39:eb:bc:a7:1f:d7:96:0d:3d:89:dc:
         cb:7e:ae:d0:a9:cd:af:b9:15:a9:f1:ba:17:d4:59:54:d2:59:
         7d:7b:a8:ca:91:31:8c:73:d7:b0:e0:72:10:c1:7b:06:82:51:
         81:b2:86:79:b4:2a:96:e9:fb:42:e1:a0:b7:60:c3:70:6a:2b:
         2b:9e:f4:b9:a6:64:d8:b0:ec:38:c9:74:02:55:0c:af:b6:00:
         45:35:c9:cb:47:81:54:b8:c2:5f:eb:a7:6c:18:9f:af:af:91:
         ab:37:3a:87:77:5b:11:1d:b4:06:e1:f4:f2:bc:a2:5f:82:b4:
         df:6c:29:4c:99:a7:05:e4:4e:e3:50:b5:22:9a:31:bd:65:42:
         79:a9:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:20:16 2025 by rpki-client