Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa
File:                     97883ba0-e855-312c-8460-e92451ea3f9f.roa (raw, json)
Hash identifier:          Cx5jU3EALTuvwkZRXu8+BRqofOnXUUq+MgX3g5JddT8=
Subject key identifier:   D5:EE:C9:B2:8C:97:77:CE:C6:58:B3:2E:13:10:0F:88:9A:8F:A0:61
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849BC74AC8E5099E32C3AF9FAC0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     2559
IP address blocks:        198.241.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ac:8e:50:99:e3:2c:3a:f9:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=95ee5587-fa6f-47d1-8c6f-22ab10cc4f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:28:9c:39:2e:63:e1:4f:fa:6b:fa:c0:22:
                    93:33:7a:79:09:67:4e:e9:ac:34:cd:c4:07:26:12:
                    69:4a:c2:e1:eb:d3:cf:a0:92:d2:3c:ee:2e:df:6d:
                    87:5c:19:c2:d3:3d:85:95:0c:48:35:84:f5:be:25:
                    06:ca:d2:8b:49:0d:0d:1e:86:e6:55:c6:41:3f:01:
                    96:0e:37:15:66:7d:76:24:50:56:82:f9:e7:b4:d0:
                    ce:49:82:10:4b:2d:26:d1:49:10:6d:80:6c:85:41:
                    a3:ff:c8:c9:36:21:da:29:ae:4e:ed:09:fe:aa:b6:
                    e2:a5:25:2d:78:89:2a:89:06:10:7d:58:9d:29:1c:
                    03:84:7c:8a:25:73:cc:59:74:71:97:25:2b:f5:25:
                    00:fa:73:fa:3d:81:62:b1:ba:0c:08:e3:72:37:81:
                    f7:e4:b2:e3:84:dd:c0:f4:d1:4a:aa:ed:49:27:cd:
                    1a:88:d3:2e:ff:e7:de:3f:88:e7:cb:4f:be:00:b4:
                    59:f5:47:1d:d4:3e:b2:f3:87:14:43:09:30:d1:14:
                    f6:a4:db:64:07:8d:c9:ad:08:e4:29:81:58:12:b9:
                    d4:3c:43:61:31:74:fb:85:07:20:f0:be:81:0e:35:
                    c2:39:a5:4c:af:17:d3:94:b6:25:26:62:19:a1:b2:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:C9:B2:8C:97:77:CE:C6:58:B3:2E:13:10:0F:88:9A:8F:A0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:91:50:54:02:3b:f4:fb:59:94:cb:4f:51:57:49:94:04:9f:
         58:3a:f5:37:36:cd:ed:8f:f9:8c:4c:f5:8e:76:39:15:a1:9a:
         aa:3f:68:ad:ca:2e:fe:65:a3:2d:29:a4:13:2d:1a:8c:3a:9f:
         04:b7:0d:d2:7c:fa:e1:0a:5e:8a:a9:95:d5:6e:ac:59:fc:5c:
         4f:93:10:f1:b8:8f:ad:43:37:e4:b7:0f:e9:f3:8d:2a:45:9d:
         87:47:5e:85:d2:8f:fc:79:5c:f3:c0:6f:d8:a5:34:d0:5f:c1:
         36:ac:4f:50:3e:c7:d0:5f:0f:22:d7:ba:60:73:f4:b2:ee:c7:
         14:1b:9a:79:3f:ce:30:45:a9:f4:67:82:ef:f0:f8:82:31:84:
         13:9c:a7:6f:f0:02:4c:c7:a9:0e:0b:bc:60:af:42:bb:c8:b3:
         24:56:e0:bf:55:96:ed:c4:0e:fe:74:a2:a6:33:60:0d:cb:01:
         cf:1e:2d:5b:23:23:99:0a:f1:f2:f1:83:46:dc:d6:1d:f4:27:
         bf:41:df:b8:7b:78:a0:6a:a8:b6:5b:84:9a:24:e0:58:de:96:
         f7:97:b7:75:f3:15:e0:84:ab:6d:d9:08:9b:03:cf:00:17:d4:
         2b:8d:c7:09:75:fa:83:66:13:04:c0:18:bd:f1:06:92:89:82:
         48:15:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:41 2025 by rpki-client