Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa
File:                     0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa (raw, json)
Hash identifier:          9JEci8Y9pz4iRNCYXWet/VF+YGEoP8BmKIzf/0gauyw=
Subject key identifier:   0D:07:96:E3:AB:55:4A:49:B9:3C:27:3C:6C:C6:9F:F4:0D:96:32:10
Certificate issuer:       /CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41
Certificate serial:       010D0C9F43285849C904F13D0AC241B0E7641400
Authority key identifier: 93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     15296
IP address blocks:        198.202.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f1:3d:0a:c2:41:b0:e7:64:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=0eb3538b-ab47-45d4-9d49-4d0366e550b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:b1:b2:cd:05:ff:54:de:3d:c1:8c:c8:87:
                    01:95:90:03:df:5a:37:2c:cd:71:f1:e7:5f:bc:8c:
                    25:3e:35:7e:10:dd:74:a9:69:49:01:4e:15:82:ba:
                    2d:23:7f:39:cd:3f:bb:0d:b1:6a:9f:ff:27:93:93:
                    fe:b4:6d:a0:0a:f5:90:e6:cf:5a:71:7f:3f:db:6b:
                    d5:f3:8c:33:e5:16:c5:15:08:7a:88:24:06:ef:58:
                    ac:a0:24:38:e0:e3:f4:69:ce:5b:04:bc:14:b2:00:
                    ca:98:75:d4:dc:fe:1c:0d:c0:6b:8e:e0:2a:cb:74:
                    6e:84:cb:43:b7:e5:37:1d:2c:11:f2:e6:b2:c6:b4:
                    6e:97:7d:88:f0:80:63:0b:c3:46:42:80:2b:7e:f1:
                    b5:f9:6c:71:47:1a:02:0b:fd:fe:4e:50:66:4e:d4:
                    d7:62:32:b5:a8:96:2c:e3:19:52:ab:df:86:33:3c:
                    32:9c:34:d4:c7:cd:2b:0b:40:06:a8:06:07:fc:42:
                    cc:4f:9d:99:e2:e1:66:8c:44:d9:fe:4a:e4:7c:f3:
                    96:27:1a:cf:52:81:4c:e3:48:df:36:dd:2f:90:21:
                    f5:09:8a:33:4b:69:3f:5e:b1:fa:76:7d:3f:a3:79:
                    e8:8a:bf:8a:39:36:d0:12:6b:44:46:a5:25:24:e3:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:96:E3:AB:55:4A:49:B9:3C:27:3C:6C:C6:9F:F4:0D:96:32:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl

            X509v3 Authority Key Identifier:
                keyid:93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:85:e9:8d:18:80:78:ee:f4:24:e0:cb:f8:17:64:16:ca:
         19:f1:6c:01:39:f3:89:48:4c:2e:bc:2a:57:62:b6:bd:49:79:
         44:b4:5b:25:b5:ca:4e:0a:6c:ea:a0:28:dc:38:e7:13:58:70:
         f1:40:7f:4f:26:28:42:d3:94:b2:c3:5e:44:85:95:48:e5:78:
         75:57:5d:d4:7c:65:bd:4b:a9:b3:d0:ec:a4:06:6b:70:57:4c:
         ee:ef:49:25:c2:a5:f4:f8:3b:4b:91:d2:6f:27:e2:f9:1e:4e:
         12:f1:1a:f9:fb:61:d7:98:89:4f:c4:6e:3b:1e:10:13:91:dd:
         04:6d:47:77:2a:5f:50:5b:e1:3f:64:7c:80:03:6e:b8:c5:ca:
         c9:86:a6:65:23:13:ee:f1:f6:06:87:d5:86:bb:28:50:5e:21:
         0d:82:4f:13:51:fb:e4:46:a9:3d:a2:40:ef:98:c1:10:f7:6c:
         d9:05:ff:82:ed:a3:41:59:07:8a:4d:bd:00:3d:51:a2:79:e8:
         28:90:c9:d9:87:2c:d7:0e:9e:96:89:b2:f5:5a:e4:57:80:ad:
         5a:fb:24:60:89:9f:d5:83:af:66:87:19:32:4c:c1:f6:4b:49:
         d7:f9:c2:9b:22:55:ff:22:61:bc:6c:1f:b4:87:ea:ed:13:cc:
         1c:6e:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:35:42 2025 by rpki-client