Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/2d611701-a64e-3a3f-ad2d-e7cc5ecb6537.roa
File:                     2d611701-a64e-3a3f-ad2d-e7cc5ecb6537.roa (raw, json)
Hash identifier:          t2LIUqbfRswvBC8pjq1L3y3DAK3UhaQ8lJ1HiNHItss=
Subject key identifier:   AF:BA:27:1C:C0:07:96:63:0E:51:2E:94:CB:FA:3D:75:E0:76:BE:02
Certificate issuer:       /CN=bb0e633c-ff4d-4e95-9846-c6e69ea1314e
Certificate serial:       010D0C9F4328584A51D07208E53D4C0B91978880
Authority key identifier: 74:DC:AD:4E:03:B0:E6:40:16:7A:AE:82:7A:FB:99:A4:7F:C8:CD:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/2d611701-a64e-3a3f-ad2d-e7cc5ecb6537.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     395991
IP address blocks:        198.162.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:72:08:e5:3d:4c:0b:91:97:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0e633c-ff4d-4e95-9846-c6e69ea1314e
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=38333c8f-922b-4b00-b792-7dc5cdf420d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:da:d6:b6:4b:2b:d1:24:d1:6a:8c:f7:d7:
                    05:82:a9:c6:ba:a5:2c:66:cb:e7:11:f0:a3:51:f7:
                    27:fa:39:09:b3:80:ac:c3:84:58:38:1d:34:fc:30:
                    64:96:ff:48:75:6a:2f:b6:3d:8e:81:9c:ae:88:12:
                    78:3c:1d:49:38:ec:8c:1b:30:73:b7:87:0e:ef:b3:
                    cf:9f:89:93:ef:43:6b:e0:da:7c:ac:6a:0e:cf:b5:
                    dd:af:f2:ec:2e:46:f6:11:04:e9:00:60:ce:36:19:
                    b7:d0:e9:48:bb:c7:fc:23:11:9f:ed:2f:f3:22:c7:
                    da:62:c8:3d:f1:ef:05:bf:8e:a6:94:d1:a0:03:ac:
                    5d:53:16:bc:d3:c8:b4:ae:a8:97:0b:91:a9:74:8a:
                    83:45:c4:05:29:fe:e1:3c:07:09:5d:fe:48:8b:d8:
                    c6:3f:82:32:66:e9:b7:e0:89:18:83:20:c5:37:44:
                    7d:8d:d7:ad:4c:19:1d:6f:3a:cf:c4:79:62:e1:ec:
                    51:52:dc:67:d7:5a:d9:9c:0b:f8:70:ea:52:49:a8:
                    86:b3:95:60:26:5e:62:06:81:fd:64:af:a4:a6:d2:
                    b4:cc:d3:27:e5:24:0c:6a:0b:5d:80:57:e6:98:66:
                    32:f5:f2:2c:1f:85:ff:0e:02:a8:86:0c:cd:0d:27:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BA:27:1C:C0:07:96:63:0E:51:2E:94:CB:FA:3D:75:E0:76:BE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/2d611701-a64e-3a3f-ad2d-e7cc5ecb6537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.crl

            X509v3 Authority Key Identifier:
                keyid:74:DC:AD:4E:03:B0:E6:40:16:7A:AE:82:7A:FB:99:A4:7F:C8:CD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb0e633c-ff4d-4e95-9846-c6e69ea1314e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:e1:15:fa:2c:39:4e:cc:b9:e1:95:ae:11:73:95:6e:e4:
         4d:54:26:5a:cc:6f:e9:f9:62:42:e1:4a:b9:24:e3:96:42:92:
         8d:96:b6:5b:7c:aa:7b:88:38:5c:b2:f2:9d:1d:e0:54:3a:12:
         f3:ed:0c:7e:2d:3c:26:6b:10:38:e9:73:3b:24:10:73:c2:7f:
         c2:49:5b:3a:85:3b:46:5f:33:ed:ae:9d:31:27:a5:31:cc:df:
         60:04:bc:c8:b9:b8:53:3f:d6:89:76:4c:b2:76:9f:6f:77:cf:
         81:26:46:5a:c5:d9:95:c4:b1:f4:3f:fa:13:24:fc:af:15:e4:
         c7:df:e4:ea:24:18:23:e8:e0:fe:22:b9:12:30:48:0c:cb:6e:
         d8:26:5e:53:f7:59:35:cc:43:b6:ca:54:52:14:46:98:5e:d2:
         02:8a:89:a9:ac:e8:d2:d9:3c:d5:70:89:a6:9f:40:e1:d5:4c:
         ea:08:24:7b:3d:2f:0f:0f:b0:c5:df:73:b7:97:df:37:cd:ff:
         41:8e:64:9c:4f:6c:91:cb:0f:e9:9a:5d:43:c6:a5:c7:92:15:
         a2:b7:17:22:67:f0:cd:21:1f:04:5c:bd:0a:e8:3e:de:99:d5:
         d1:3a:44:68:be:a9:00:e8:bb:53:a8:f7:8a:1b:13:f6:62:12:
         1f:da:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:07:08 2025 by rpki-client