Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa
File:                     1dc127da-370d-3c62-a526-2572cf53a784.roa (raw, json)
Hash identifier:          se/W8ohM1LHOByRuHXenNbgTz3PoJwnhqi2ia+CX7LQ=
Subject key identifier:   6C:9D:E6:8E:2E:36:A0:51:7F:03:B3:2F:4E:0A:C6:FB:17:8B:D9:90
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F43285849BC74AA97CACD7750BEB48B00
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     395807
IP address blocks:        199.60.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:aa:97:ca:cd:77:50:be:b4:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=c25db84c-ff91-41b4-b129-016c8a2e1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:6e:ce:0e:d8:7f:b6:06:a6:31:88:38:23:
                    01:7a:8d:75:06:39:cd:cb:42:5f:6d:a2:3f:42:fd:
                    79:6c:20:88:c1:d9:ad:ab:fb:ab:b7:7b:71:4e:33:
                    7f:2a:9a:84:c0:ce:8b:cf:c3:46:bc:91:d2:0f:bf:
                    e8:62:43:5f:57:03:8d:88:a9:69:01:fb:33:04:4d:
                    dc:93:c9:fe:b7:8b:04:92:b6:a5:7b:77:6c:39:ab:
                    79:ec:02:62:b4:03:41:d7:5d:ee:1a:14:6b:18:a7:
                    ea:3b:a4:e9:da:3c:b1:d7:31:75:a4:5b:a4:8f:3b:
                    3c:2a:fd:46:c3:98:9f:06:ac:04:41:92:1b:7b:73:
                    e2:0f:d8:8c:3d:47:41:5f:55:17:fa:52:cb:f5:4c:
                    e6:db:58:7b:20:ad:88:bd:43:83:a6:46:f2:fb:f6:
                    c7:63:fc:ea:1b:62:39:01:5f:a6:d0:0f:c3:d9:ca:
                    84:00:14:a3:1a:c7:18:db:d4:46:39:cb:96:3c:09:
                    3b:1b:8e:6c:7b:22:5f:0f:ed:6e:a0:16:0c:a2:1a:
                    c4:f2:54:e2:b9:03:ac:d4:72:e6:56:62:ab:ef:10:
                    4e:a8:ae:80:a1:d1:b1:38:1a:7c:7f:4e:0e:ae:62:
                    49:a5:1a:f5:8f:12:00:93:bf:d1:d2:fa:1d:da:01:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9D:E6:8E:2E:36:A0:51:7F:03:B3:2F:4E:0A:C6:FB:17:8B:D9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:48:0b:b2:73:e6:68:88:be:46:e5:94:05:97:67:11:e3:
         94:2c:d0:5c:29:de:17:22:ed:f4:d5:03:d4:db:a2:dd:b9:46:
         5d:07:ce:81:7f:92:be:42:47:a6:50:6c:df:45:14:0b:7e:7d:
         54:35:5e:44:44:52:38:0d:3e:5a:82:34:c0:f5:4f:26:a8:08:
         b9:9b:c8:c8:e6:2f:2f:7a:58:ee:8e:24:c3:0b:81:7c:c4:22:
         e5:c9:48:17:e3:83:74:ca:62:f7:90:66:50:12:55:56:26:f6:
         55:46:e0:ea:85:65:4b:26:0c:33:e1:f1:06:f5:ce:c7:70:1d:
         d1:05:06:d2:c6:9f:f0:fd:e3:6a:79:85:95:bc:68:71:8d:1c:
         e7:32:e4:30:35:aa:b1:68:89:69:a4:ff:a5:5c:eb:fa:56:d2:
         c4:26:95:5f:b2:77:05:44:3d:32:5a:29:4d:34:c2:2e:7f:59:
         d0:b2:20:a4:c4:c5:e3:07:73:03:06:bc:9e:78:1b:09:7c:2f:
         31:e9:89:4e:3d:0e:b4:a5:b0:f1:ed:da:47:81:d2:0a:4d:cd:
         fb:80:81:e1:d9:69:ee:cd:e0:df:ae:8b:f9:06:3d:47:88:ee:
         a2:ef:19:6d:66:75:d7:b4:fa:f5:5b:c1:32:1d:c4:33:58:73:
         a1:12:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:18:10 2025 by rpki-client