Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cbe54a54-9b0e-31b5-9bfc-a95c2f7eec09.roa
File:                     cbe54a54-9b0e-31b5-9bfc-a95c2f7eec09.roa (raw, json)
Hash identifier:          tXHrCdZDzZRzFWSZJtSqLN3CR8zi5pc1PWKrYuYABX8=
Subject key identifier:   72:A7:75:2B:7B:17:0F:E2:63:56:2A:5D:AA:BD:A7:98:80:4F:29:3E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A3FAADB931427840B04D34700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cbe54a54-9b0e-31b5-9bfc-a95c2f7eec09.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     55286
IP address blocks:        198.89.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:db:93:14:27:84:0b:04:d3:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=5a696f72-8a42-4365-a777-1bb4ef966f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:7e:62:73:89:5c:66:c8:99:e2:81:80:d9:
                    bd:8a:99:2d:7c:c6:74:3a:24:41:31:9b:8f:0a:69:
                    bd:7f:e8:60:2e:8f:61:de:3f:82:aa:38:07:45:20:
                    0c:c1:6e:d6:a2:a8:ad:fe:88:e8:cc:3e:35:df:c7:
                    6c:1d:60:cf:e8:49:a3:71:df:7d:01:12:e0:55:f7:
                    12:48:a0:04:d9:5f:cb:f0:58:ea:b0:70:ca:c2:5f:
                    62:da:79:56:fc:29:95:1c:be:47:1b:44:11:a3:c2:
                    dc:a9:03:a1:10:f9:47:11:a7:ab:69:73:db:82:25:
                    e0:8e:c0:f2:80:53:d3:1b:cc:36:d8:94:8a:cf:13:
                    d6:f8:a2:da:b0:00:1d:1c:dc:b1:01:21:a7:36:10:
                    0d:a5:03:10:14:52:c2:c4:46:f2:6f:cf:ba:76:bd:
                    5e:bb:5d:7d:d7:98:73:c9:99:3c:8f:a1:7f:df:14:
                    f6:cf:8a:8e:c7:6b:09:25:f0:60:50:a7:48:f1:07:
                    f8:5f:54:6e:58:4a:ef:3d:ed:11:1f:e9:98:89:c1:
                    7e:b3:d2:6a:8e:8a:a4:f1:f1:b2:76:94:d2:c5:e3:
                    f9:04:ca:a2:21:b9:68:8d:38:34:89:2b:5b:0c:09:
                    d0:eb:33:15:ab:d0:e7:55:b9:2e:07:80:dc:3a:9f:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:75:2B:7B:17:0F:E2:63:56:2A:5D:AA:BD:A7:98:80:4F:29:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cbe54a54-9b0e-31b5-9bfc-a95c2f7eec09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:4d:b7:c5:fd:a8:a0:52:6c:6f:9f:b6:1d:a3:f3:07:3b:
         55:93:1d:35:e4:6f:54:9d:b4:f2:8f:86:b6:3c:5a:ba:29:43:
         1c:1b:d1:d0:de:ae:c6:d4:44:eb:8c:01:51:c5:bb:7b:82:f5:
         f9:84:91:17:45:3f:ad:1b:62:ce:af:31:8d:be:e9:a1:a6:06:
         32:46:c4:a9:63:55:17:b2:fe:c3:1d:e1:94:69:28:11:3c:ca:
         bf:d3:95:c4:7b:8c:7f:cc:8b:60:5c:39:4f:3b:ad:88:f5:d9:
         78:77:63:78:b6:c4:ee:6c:c0:94:d1:6a:4e:29:ee:2d:ef:16:
         8d:e2:51:55:d5:70:2e:5c:4f:57:af:c9:a8:29:43:c6:86:2e:
         22:42:79:ee:ab:6c:04:9a:02:49:e4:ae:70:46:f7:2b:61:cb:
         4f:83:52:a5:ad:d5:da:3f:a3:75:c6:08:29:9d:a8:b4:7e:83:
         67:84:7e:d4:8b:c3:2e:f2:dc:ec:df:ab:9e:8c:2c:a0:51:71:
         4c:3e:bc:8c:df:ce:9e:ba:f2:c6:d1:c0:da:b6:a6:25:38:18:
         b0:ca:f6:fe:52:f5:41:ab:4f:b0:03:9f:ea:1a:f5:be:17:29:
         ad:b6:33:47:bf:4f:9c:21:7b:68:8f:c6:fc:51:1f:d1:f6:11:
         fd:76:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:14:36 2025 by rpki-client