Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa
File:                     b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa (raw, json)
Hash identifier:          9ppiEWxlwickwCOFgi2B4BLpT4i3XTN3GVdKjk+HRB4=
Subject key identifier:   42:2A:C5:55:D8:25:1E:55:74:75:A9:BC:A1:B7:9B:87:EE:8D:AD:EA
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849B14A0A1279B3204106106300
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     2559
IP address blocks:        198.241.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0a:12:79:b3:20:41:06:10:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=d86fe0c4-781e-4058-92bd-d2059b5e0669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:35:21:98:96:0d:dc:c9:81:c2:81:03:70:
                    63:71:78:d5:84:c4:fc:23:b9:d2:8c:43:84:2c:7f:
                    6a:bf:49:02:f0:21:4f:d8:5c:60:6a:a7:12:c9:9b:
                    3c:0e:40:20:17:9a:89:65:b6:de:e6:d0:23:66:bd:
                    82:b4:cc:5b:3f:c0:17:63:db:81:b0:a3:ca:47:45:
                    4b:47:c0:32:33:18:1e:5d:9c:83:4c:1d:c1:fe:be:
                    ce:3f:e3:18:14:c1:0e:29:94:ee:c7:8c:56:45:c9:
                    a9:97:d2:0c:2c:52:ed:70:83:e7:ce:bd:11:8e:64:
                    0a:ae:bd:f1:f6:1a:b1:2a:aa:19:94:1a:a9:eb:09:
                    3b:7f:db:b3:12:1f:23:3f:a4:3a:9d:4b:71:62:ca:
                    0b:da:0f:b8:0f:59:e9:7a:3c:66:e1:b9:79:f4:03:
                    5e:71:c5:b6:b6:d7:59:ac:9f:f4:c8:1e:e3:b7:fa:
                    8a:fa:0d:a7:c1:70:58:7c:f7:4b:ee:a8:ca:19:6c:
                    04:48:fa:4d:0d:a4:a7:e2:b1:85:e0:b2:c6:0b:79:
                    e1:6f:27:9a:78:5b:d0:ad:c1:f4:16:15:08:db:bd:
                    c5:0b:dd:10:ab:76:14:38:e9:2c:4c:96:f5:9f:f9:
                    d8:bf:a9:48:64:9d:65:9c:64:4e:8f:a1:ca:91:f0:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:C5:55:D8:25:1E:55:74:75:A9:BC:A1:B7:9B:87:EE:8D:AD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:63:9d:a2:3a:9d:3c:fd:3b:24:18:a9:be:3b:8c:b4:73:ce:
         eb:ee:96:45:40:df:94:6e:6d:2c:6e:9c:32:be:97:d6:64:cb:
         97:cd:a0:3d:20:cd:e8:fa:79:1d:79:3b:bb:aa:81:11:1c:d9:
         fe:ae:ff:bb:14:da:1d:b5:f1:6c:2f:c6:fd:22:2c:ef:98:76:
         2f:8f:1d:91:6f:e3:24:b8:d3:de:1e:a1:3d:9d:4b:46:27:f1:
         c3:85:ff:02:27:d3:6b:7c:84:00:11:7d:b5:88:22:81:ab:5a:
         90:c6:ce:1d:09:e9:a7:00:9f:9b:90:71:2e:59:25:6c:bb:4c:
         a3:2c:f2:8e:b4:22:8e:a7:d8:07:3f:7f:29:73:37:cf:78:76:
         f5:7d:50:5b:99:d9:bc:8a:7f:72:cd:40:8e:e9:48:4f:08:7b:
         2a:87:59:d4:b7:aa:60:1c:d5:cd:71:2e:a2:eb:24:de:5e:0d:
         e8:69:d0:e2:ef:84:93:43:02:6a:d8:85:0f:d3:61:5c:0e:8c:
         fc:82:69:e8:31:99:95:bb:b5:a1:53:d8:52:3b:6e:38:32:74:
         ab:1a:a6:9c:df:a6:f2:8f:53:8e:ac:53:e2:ff:56:9e:6c:e4:
         77:da:24:16:dc:86:56:4b:af:02:3e:46:ee:b2:f7:f8:83:8a:
         67:fd:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:18 2025 by rpki-client