Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
File:                     b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa (raw, json)
Hash identifier:          zWcelE49V3mKgiCF6kNddHlWScqLsjxJs/eEjAorz1c=
Subject key identifier:   8A:3D:26:07:60:80:B9:E7:C5:EB:DD:66:46:91:78:62:F7:30:9F:CB
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F43285849C904F3E5ECB3122CF3BA22C0
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     15116
IP address blocks:        198.49.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f3:e5:ec:b3:12:2c:f3:ba:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=4bbaf2ff-35fc-4626-858c-34ba4871a61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:cf:64:eb:9e:4d:bf:60:50:8d:6b:d3:73:
                    83:f2:9e:de:74:05:70:11:b0:8b:cd:08:ec:13:5c:
                    a5:a4:43:a3:e5:f5:fc:f8:44:97:f9:eb:c5:38:03:
                    96:30:97:02:c7:18:de:45:eb:95:be:d4:0b:b4:11:
                    ca:0a:4c:96:fc:bd:d9:82:a2:9d:d4:ff:94:78:21:
                    ff:75:a0:f5:d8:9f:23:6f:c4:97:0c:d6:81:ad:88:
                    8f:3e:b6:e1:31:35:c4:a2:0f:cd:12:79:79:0d:20:
                    d6:7d:d8:16:cf:70:18:57:6e:de:93:74:e5:88:08:
                    bc:f6:b9:94:39:00:35:73:5f:ed:33:f7:e0:7e:ac:
                    b2:ce:7a:d2:c0:cf:35:98:7c:b3:19:bc:11:6c:ec:
                    03:52:48:75:54:1d:bb:5b:e1:f2:5b:10:42:a3:fa:
                    f1:a9:3f:17:26:8d:a4:cb:a6:fa:e9:c8:fd:0c:6c:
                    11:1e:f6:9c:38:6c:8b:a7:51:63:de:b1:08:53:c9:
                    44:4f:57:68:cc:c7:b4:8a:7a:2e:37:e2:34:41:51:
                    70:11:12:67:c2:08:55:60:b8:e4:1f:d4:62:6b:35:
                    66:2a:fa:96:44:50:3a:3f:69:7d:80:0e:33:4c:38:
                    85:be:c8:45:5f:d0:a7:76:06:90:1c:1a:89:de:94:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:26:07:60:80:B9:E7:C5:EB:DD:66:46:91:78:62:F7:30:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:69:b1:af:df:ce:a4:ac:91:01:9b:da:a5:c0:4f:a9:3d:
         47:27:e8:56:8e:2d:ee:e8:29:0f:62:99:2e:89:df:06:f6:47:
         98:ee:28:ba:8c:c9:38:d1:32:25:df:6c:90:c7:2c:62:4c:25:
         e7:3b:d8:76:ed:00:d2:53:33:7c:25:bd:94:06:3e:91:e0:c2:
         54:8a:8e:35:a2:d2:ff:3c:5b:68:b7:84:76:d9:59:78:56:c7:
         b8:0f:a6:bb:a2:41:97:76:a2:dd:46:47:8e:df:1f:ff:06:06:
         5c:4e:5c:a9:a9:5e:c0:88:d5:ba:15:a9:0c:ca:bb:0b:09:90:
         6e:56:cf:6d:1e:6f:cf:8f:42:ad:75:1f:ed:f5:36:37:9d:59:
         c1:7b:ef:ee:4b:cb:1c:d9:22:54:b5:13:a6:b3:5b:83:eb:c7:
         87:b1:ef:be:57:16:cd:12:44:af:c3:c1:b3:96:2d:80:b5:e8:
         be:70:7f:33:a5:a4:5c:8a:9e:27:e1:4a:46:27:87:81:78:a1:
         66:f9:b0:ff:84:63:af:4a:77:2b:37:84:3d:69:33:b2:0c:29:
         9e:5b:1c:8f:cf:41:54:2d:a5:69:16:0d:29:a9:ac:9e:4d:45:
         8f:60:49:59:0b:27:2c:8b:74:6f:fb:7b:e6:eb:8b:3b:19:ec:
         39:62:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:02:54 2025 by rpki-client