Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa
File:                     dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa (raw, json)
Hash identifier:          fLJlFKaHVwmtSNw7q4ecjP7q4DXXhHvmHD2yqct0pOY=
Subject key identifier:   E1:A1:20:B7:06:B8:8A:D8:BD:20:79:9D:8D:D2:09:61:E2:9D:CD:65
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285849C36F7B612046BF8616C80540
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa
Signing time:             Tue 06 May 2025 13:01:01 +0000
ROA not before:           Tue 06 May 2025 13:01:01 +0000
ROA not after:            Mon 04 Aug 2025 13:01:01 +0000
asID:                     11032
IP address blocks:        198.168.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:6f:7b:61:20:46:bf:86:16:c8:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: May  6 13:01:01 2025 GMT
            Not After : Aug  4 13:01:01 2025 GMT
        Subject: CN=82cba436-5ab1-4495-9740-7e291a311588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:a4:a5:15:33:7d:29:e3:33:a7:7f:f9:ba:
                    55:b9:7a:cf:5d:94:52:dd:16:ba:ac:a5:04:1a:10:
                    e7:a3:63:1f:3a:f0:f5:5a:4b:fe:9b:9d:cb:2e:d6:
                    7b:74:57:58:fd:af:cf:e6:21:fb:32:9c:43:d4:83:
                    78:af:3a:e7:bf:dc:e5:d0:24:0b:5d:c4:7c:81:de:
                    4c:5d:38:d1:a6:09:e7:b2:65:78:7f:95:3f:80:38:
                    8d:f9:71:19:7b:64:fa:65:47:67:9e:18:f3:96:fb:
                    a5:11:64:fc:ea:66:fd:99:09:70:e7:e0:a7:5f:04:
                    c3:c8:71:af:38:29:f7:ee:05:19:70:25:d0:4c:79:
                    8c:b1:7c:fc:62:68:59:3e:0c:48:9d:02:06:53:8a:
                    67:3d:22:be:69:f8:5c:a3:b5:55:dc:11:a2:d6:98:
                    d9:39:7e:71:1b:b5:5a:01:69:c8:39:21:f2:c5:34:
                    b7:48:72:3a:68:31:c9:e2:e1:3c:00:15:f7:a8:6e:
                    00:ac:ad:d0:5f:33:6c:d4:10:d1:d8:75:1b:24:15:
                    f2:ea:29:da:08:11:56:f1:0d:98:44:44:6e:c4:0d:
                    e6:a3:7c:20:f9:b4:81:55:47:a7:34:fe:34:d1:9a:
                    31:6e:81:48:66:21:c0:13:17:c1:9a:22:12:91:1d:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:20:B7:06:B8:8A:D8:BD:20:79:9D:8D:D2:09:61:E2:9D:CD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:05:2a:97:4b:56:7c:b4:63:1f:d5:16:22:dc:14:b3:c3:26:
         0c:33:73:9e:e6:46:8c:b2:78:cb:c6:ec:4b:af:9e:f7:1e:dc:
         5f:2a:88:37:f1:35:93:66:53:6a:e8:13:61:7f:e0:53:77:ca:
         23:6c:4a:a3:36:10:35:85:d6:7d:1e:8d:6a:c6:64:fa:c4:d7:
         81:ae:a8:cd:c1:db:3d:2e:76:7a:37:f2:9a:5e:fc:76:50:01:
         a6:54:71:90:43:02:f9:eb:54:0c:1f:02:fd:fe:0d:c4:38:e4:
         de:3b:ad:ad:7d:68:ef:32:9b:fe:d2:ee:62:b8:63:34:fa:ef:
         36:cf:24:12:2c:e1:87:67:45:f9:e1:f9:4e:d2:65:e3:ba:a2:
         94:c0:44:ff:de:4e:6b:5b:37:85:4e:05:92:bf:5e:7b:62:da:
         3d:b4:de:25:2e:3a:9c:4e:44:b0:62:92:05:f8:25:38:60:c6:
         fe:1c:2f:12:14:dc:ea:10:7f:16:6f:6d:13:3e:46:f3:04:a1:
         e6:c0:61:f2:6f:04:af:81:22:3e:c2:e8:92:75:fe:30:51:3f:
         73:ec:6f:c7:7b:24:ea:5e:30:79:21:88:d9:e6:25:e2:13:f4:
         93:75:ea:40:d5:61:42:c7:3d:49:5a:03:82:db:39:be:78:3c:
         5a:66:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:08:35 2025 by rpki-client