Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0593e0e-2aeb-3210-8ff9-f0f465908cae.roa
File:                     f0593e0e-2aeb-3210-8ff9-f0f465908cae.roa (raw, json)
Hash identifier:          c2Fjlz63cbEQw0iu0wgr6oQKBuPC8xXcKlzsBeV/yHM=
Subject key identifier:   AB:5A:B6:77:7F:47:D1:2E:19:1E:15:D5:DC:B7:C4:8F:D5:8B:AC:51
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A4C3B0D9506A330D528141D40
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0593e0e-2aeb-3210-8ff9-f0f465908cae.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     9009
IP address blocks:        198.145.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0d:95:06:a3:30:d5:28:14:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=b971ea45-47c4-4286-9930-d9931bb5dffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:91:37:52:c2:9f:29:1c:dc:99:d0:16:59:
                    8e:8f:87:6a:94:41:7f:56:8d:d6:ca:d1:59:1a:db:
                    ef:2e:47:e2:be:06:80:cd:a4:4e:77:6b:6d:0f:ca:
                    0a:72:79:cc:dc:56:b5:32:c1:14:71:d1:8b:ad:ae:
                    04:9e:3c:5a:ff:a0:d9:c1:8e:10:72:23:b4:7b:39:
                    5b:e2:95:bc:24:aa:90:c7:fd:c9:e3:66:65:bb:03:
                    2a:0f:82:31:27:c3:a7:34:0d:58:9e:9d:8c:0b:3e:
                    c4:93:d0:1d:50:ae:d6:1d:6b:d5:08:ed:64:f4:59:
                    89:22:00:8d:1c:46:ce:bd:47:5d:68:47:cb:15:43:
                    b1:2b:90:2e:6e:43:7b:8c:7e:8d:cb:46:3b:a4:56:
                    8b:9f:e2:f5:26:93:3c:1a:6f:ea:19:7c:3c:1e:11:
                    09:49:2d:dc:6d:03:87:af:bb:27:bf:c5:8c:30:de:
                    9f:c1:95:11:6f:3b:3a:b2:e3:65:9e:0b:62:bd:df:
                    2a:19:6c:8d:6f:4e:04:c2:bf:e3:1c:80:67:64:ab:
                    93:a2:01:08:f2:62:6e:e5:b2:2e:32:dc:f7:91:4e:
                    21:c4:b4:ec:1e:71:6e:4a:fc:5f:42:23:2c:6d:f1:
                    c5:77:2c:68:b1:e8:58:bf:d2:4c:7c:b6:e5:01:c7:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5A:B6:77:7F:47:D1:2E:19:1E:15:D5:DC:B7:C4:8F:D5:8B:AC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f0593e0e-2aeb-3210-8ff9-f0f465908cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:2e:da:b2:11:c5:82:84:c6:37:df:61:f6:67:25:d7:e8:
         24:3f:13:3a:91:06:ab:41:bf:80:87:40:f1:ce:32:94:de:c4:
         04:5c:02:e2:3c:a8:a5:07:9d:72:8f:e9:26:1e:f9:48:ef:a0:
         89:1e:e9:e5:47:ca:6c:7d:43:98:f2:33:12:da:71:0b:12:cd:
         dc:11:95:06:f1:af:06:1b:b9:83:64:04:ee:a7:6a:6a:36:e3:
         88:81:8b:cc:15:8b:bb:07:44:a7:f5:0c:97:43:d9:c6:2f:2e:
         6c:47:56:2f:a0:c8:33:15:5a:cf:6d:c1:51:ae:42:22:1d:49:
         0c:58:f2:ed:d9:71:c2:3c:ce:c6:44:eb:a6:d7:69:ea:65:14:
         75:b1:68:96:08:7a:b6:68:f0:7d:10:71:c8:55:55:85:07:0a:
         80:d4:40:0e:b3:89:b3:db:39:00:ed:d7:eb:94:e6:27:a9:74:
         64:e3:fb:1f:58:d9:0a:b8:e8:88:db:78:d1:db:ea:9d:ff:47:
         5e:c7:2b:12:29:21:16:3e:ec:47:2f:dd:2e:52:26:c3:f4:43:
         20:0b:8f:fc:17:5b:40:f5:9d:07:f8:ce:81:58:72:2e:d5:32:
         56:d9:41:8c:d3:29:40:c8:70:68:38:56:cf:4b:c5:cf:90:87:
         13:df:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:10:42 2025 by rpki-client