Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
File:                     2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa (raw, json)
Hash identifier:          ExqScPh/l5Q/R1Vzfqxs6KMyf8hGDON5gMHUIzZh76E=
Subject key identifier:   59:3B:7B:37:BB:C9:61:C1:1B:88:C4:53:A4:7F:75:7A:02:25:C5:9B
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849BC74ACF54C3D238E38434BE0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     2559
IP address blocks:        198.241.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ac:f5:4c:3d:23:8e:38:43:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=b626c68a-243f-4a80-b939-80ac4c9061b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:4e:78:2c:f3:ef:13:a2:60:f2:7d:c7:cd:
                    8b:b9:eb:65:67:b7:a7:3b:f6:a9:56:e6:c3:5f:a2:
                    78:18:88:ac:e7:b1:5f:f7:eb:8c:1c:59:53:37:12:
                    63:42:c0:ea:ba:19:a8:37:43:d3:13:50:2b:6c:ac:
                    0c:d8:96:d3:cf:2e:c9:b8:b1:19:ba:93:40:e1:f6:
                    c7:b3:37:df:1a:70:0c:83:f5:30:25:2a:e9:24:54:
                    45:5d:96:bb:5a:ec:02:93:b3:68:d1:07:d5:22:ac:
                    b5:d7:b6:35:aa:67:26:f3:cc:ad:39:80:93:0e:de:
                    04:50:d1:ba:4d:10:2c:db:80:e2:e5:08:7b:c0:20:
                    f6:95:ac:ba:97:f4:86:7a:f4:e1:77:8b:f5:08:53:
                    f2:20:0c:ee:fc:06:38:c4:97:d9:54:cd:03:67:bb:
                    08:91:52:51:ef:7f:f4:89:b6:18:3d:f6:5b:8f:14:
                    5b:67:83:cb:de:bd:b5:92:cd:f2:15:e3:da:30:5a:
                    b1:10:e8:01:ea:30:50:9a:93:88:49:bb:86:e2:70:
                    e5:40:b8:ff:b4:e2:48:51:5b:63:57:5b:36:c0:c6:
                    8f:cb:b7:c0:62:0d:13:af:fb:a0:7d:15:b6:d8:43:
                    ba:d1:36:fa:44:45:79:d2:50:84:09:67:05:49:83:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3B:7B:37:BB:C9:61:C1:1B:88:C4:53:A4:7F:75:7A:02:25:C5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:f2:08:d4:45:24:77:a1:9f:d3:a5:d9:ab:93:e9:f2:82:
         77:c6:cf:65:c6:45:1c:ad:02:57:2c:58:8a:6d:b1:61:ce:b7:
         f8:e8:7a:94:aa:73:84:1f:5c:e7:48:aa:68:8f:e0:fd:45:8e:
         a3:19:63:31:f2:72:d9:fb:c4:bf:5e:2b:64:18:c5:75:2d:2f:
         8d:80:2e:c1:2c:dc:8d:dc:a6:c8:fb:1b:fd:34:60:aa:3c:15:
         76:24:66:0c:6f:17:17:da:14:09:04:c9:0f:27:02:23:70:f8:
         f5:2c:aa:de:a6:03:b1:13:52:3f:6f:61:a8:79:3d:65:79:7b:
         dc:32:c2:50:5b:3f:f2:cd:1c:d9:42:cb:0a:4c:47:77:a9:a0:
         43:a2:c0:6d:68:c8:82:82:e4:4e:cc:ce:45:e5:8f:04:75:2d:
         ed:c7:34:5f:c3:ca:a3:08:f1:bf:36:ec:30:e8:96:50:08:75:
         17:6a:e4:ce:13:bd:a9:0e:b6:7c:41:db:d5:10:2d:65:45:fd:
         67:52:1c:f1:25:fa:04:2a:ab:30:9d:be:b3:c3:24:f4:a6:8e:
         36:ca:0a:0e:1b:52:9c:9c:9c:c3:56:54:69:b4:b0:96:96:82:
         19:5d:2b:ee:4f:5a:8b:ab:98:51:d0:4a:e5:5c:84:e1:7c:80:
         cd:f3:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:55 2025 by rpki-client