Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa
File:                     ed318ff3-2835-3288-a505-9e112c93201b.roa (raw, json)
Hash identifier:          oT7qqH7ReKQ4OeeTDrBol9qhvtv6BEvRyRIGIZi8aQw=
Subject key identifier:   F5:E9:36:2E:33:6E:32:53:13:65:43:FE:25:5C:99:44:95:F2:43:17
Certificate issuer:       /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2
Certificate serial:       010D0C9F4328584A51D071F785ED07AE4B292480
Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     396425
IP address blocks:        128.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:71:f7:85:ed:07:ae:4b:29:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=818c14c1-5a31-45de-9127-121837fba47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:19:e5:9e:36:da:47:e5:2e:43:68:17:00:
                    af:ea:32:fb:bb:58:d0:b5:17:8a:40:65:39:2e:76:
                    0b:2a:66:4d:cb:c7:ac:c1:14:5d:9f:c2:19:17:6b:
                    28:24:00:46:a7:7a:ca:64:f3:0f:a1:13:32:11:dd:
                    f3:af:16:a3:ec:42:ce:1e:72:9b:95:32:e7:d5:fb:
                    4e:d5:56:a9:e7:08:36:72:a4:da:f5:ed:25:0a:c9:
                    2f:f2:95:ce:5b:5c:ba:e4:45:b0:5b:f0:68:0e:0b:
                    d4:0d:77:9c:f3:de:91:53:71:bd:0f:0f:ee:0a:8c:
                    32:b1:87:c4:fa:3c:41:e3:14:5c:27:c9:5c:dc:85:
                    52:c4:39:1b:56:08:08:c5:c4:29:a5:71:74:30:9e:
                    6e:22:c7:28:00:d0:5c:6e:c6:30:d3:d9:01:cf:48:
                    58:8e:14:29:2c:82:57:77:20:fd:4c:46:6e:04:c5:
                    85:a4:1f:05:19:7e:71:07:b9:74:55:8b:6d:02:33:
                    4e:f0:a3:ba:b4:cc:59:00:af:20:46:4d:88:08:d2:
                    1c:64:88:bd:1b:ea:94:c4:4b:88:f5:ca:21:9f:91:
                    31:cf:37:48:2e:05:c6:e0:74:12:61:a0:bb:1e:ca:
                    6e:93:0a:19:f2:12:b9:94:66:7e:0e:9f:23:67:cf:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:36:2E:33:6E:32:53:13:65:43:FE:25:5C:99:44:95:F2:43:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/ed318ff3-2835-3288-a505-9e112c93201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl

            X509v3 Authority Key Identifier:
                keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:db:3a:a6:5d:d3:ef:87:2d:22:44:4c:95:1e:5b:5d:79:d4:
         bb:d4:63:2c:61:35:48:c0:49:e0:67:8a:d5:5c:42:1b:51:56:
         03:71:14:c7:82:0d:0a:24:1e:cb:1c:f3:f7:02:43:6d:cf:36:
         37:35:00:a4:7e:05:4f:25:b9:d5:1d:bb:d4:10:89:2c:11:0b:
         d7:2d:5f:b2:7b:f2:60:83:73:a8:f1:ef:65:86:96:04:d6:f3:
         2b:58:0e:b0:34:19:15:97:5c:01:9c:80:3a:b3:91:2b:69:c3:
         e9:45:28:8d:25:f2:c4:3b:0e:bf:e4:98:2e:c2:de:09:57:8e:
         62:66:e9:fe:17:bc:1b:62:60:a1:c7:6f:3c:6b:7e:c4:9d:f5:
         37:e0:d8:2b:ef:9c:59:6d:76:6c:0c:e8:d9:ee:1e:dc:b0:36:
         4a:8f:87:34:15:89:c9:62:e8:b1:ef:92:c8:13:41:ac:69:d1:
         e2:46:7e:c1:64:79:c7:e6:b4:74:11:5a:cb:92:ef:55:69:23:
         ca:61:9a:1d:80:37:e2:f5:1f:ac:36:49:e7:95:6b:8d:f0:ef:
         5a:4c:4b:0d:3f:5a:ab:54:f2:74:b1:d7:e3:20:f9:bc:9c:50:
         9c:4d:35:02:6e:eb:7f:2e:a3:f3:3a:f2:d3:e3:9b:9f:bc:00:
         42:2e:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:20:52 2025 by rpki-client