Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa
File:                     c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa (raw, json)
Hash identifier:          lDyNmDcFNpz/AUs+ke+fMsNBBDZ2LvoWhN4SA7X1vAw=
Subject key identifier:   31:B4:6F:29:09:3E:DF:1F:37:53:92:CF:BF:F2:91:DD:16:59:08:35
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A38D89BE400BC2891284FBC00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa
Signing time:             Tue 17 Jun 2025 14:22:28 +0000
ROA not before:           Tue 17 Jun 2025 14:22:28 +0000
ROA not after:            Mon 15 Sep 2025 14:22:28 +0000
asID:                     22516
IP address blocks:        198.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:d8:9b:e4:00:bc:28:91:28:4f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun 17 14:22:28 2025 GMT
            Not After : Sep 15 14:22:28 2025 GMT
        Subject: CN=e0cc1ddf-9d5b-4307-9090-2346efabecf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:d9:0a:ce:eb:96:57:ac:eb:96:30:46:a5:
                    5a:1f:6d:f6:63:2c:95:a0:39:0a:fc:9d:b4:f7:af:
                    a7:64:a5:a3:4a:07:97:04:b2:1d:00:2b:67:0d:70:
                    e5:a1:a9:3b:58:d9:8c:a6:31:ac:e0:b6:3e:72:f8:
                    9c:7e:5a:16:e5:cf:c2:13:98:63:2b:2b:63:31:f8:
                    fe:f0:d2:0c:1c:12:99:1a:fd:7c:61:a9:d0:b5:f5:
                    64:6f:21:d3:45:01:c0:51:dd:82:a7:4b:31:44:73:
                    68:b9:2d:ef:08:de:8e:f3:7c:b7:3e:8b:79:87:ba:
                    d2:68:50:17:61:ae:95:0d:3e:88:1e:fb:1b:fa:44:
                    71:fa:b0:e6:b5:d6:10:8b:3b:03:01:07:e5:e7:35:
                    43:48:72:c0:03:37:06:6d:83:8e:28:43:71:c5:d7:
                    82:7b:e3:01:4e:1b:fc:67:57:25:ba:11:ae:6b:e3:
                    d1:cc:a2:f7:72:e5:ea:fc:95:eb:fa:81:54:f2:32:
                    7c:ab:e4:32:6c:55:c5:3c:d3:71:d1:b7:2c:75:c0:
                    2a:e3:73:db:c8:c7:5c:d0:09:e5:b6:12:96:50:06:
                    6f:41:c7:e6:a0:40:fa:32:08:7b:f9:bd:3c:23:6a:
                    97:ac:9c:5f:42:0f:ba:c8:04:33:63:09:6d:ea:38:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:6F:29:09:3E:DF:1F:37:53:92:CF:BF:F2:91:DD:16:59:08:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/c1519ebe-84ed-3c8d-bd81-ffa4f154c25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:71:63:23:40:c3:03:11:30:1c:62:91:39:5a:04:c3:ef:c4:
         65:d7:58:f1:4f:c7:14:6c:9c:b5:03:00:57:d4:f1:25:2d:1f:
         7c:5c:73:59:7d:a7:8c:95:5c:5c:c5:35:75:57:6f:11:69:52:
         52:6f:a9:b9:eb:4a:72:58:f3:e8:8e:8a:20:7e:47:5e:e8:ac:
         10:a9:e6:99:1f:08:49:8d:db:8d:ee:4b:8a:d0:52:f6:83:98:
         e0:45:41:54:29:fc:9b:45:59:17:c9:65:14:19:a0:ca:e8:20:
         3b:e9:a8:be:8c:ed:27:62:03:07:a5:15:ce:7f:27:d5:15:5d:
         c3:17:66:5c:03:1a:bf:ea:87:a5:40:ee:ed:78:ca:c5:bf:ad:
         88:4b:45:71:a7:f8:09:85:04:14:cf:c8:b0:53:03:83:0f:d6:
         61:b6:42:a9:fd:e0:65:04:5a:2b:31:65:02:2e:17:0a:8b:ae:
         97:3c:bc:77:a3:77:af:c2:49:22:3e:39:e3:2c:5e:fe:39:77:
         70:f8:02:8a:6b:77:b8:82:fa:04:85:83:d0:a6:cb:24:f5:16:
         d3:ed:72:d5:1a:02:cd:a0:cd:3d:48:ab:85:46:bb:b5:6e:d7:
         6d:fb:fa:3c:a6:16:10:73:d9:f2:7b:f8:b0:79:7b:a1:16:f3:
         e7:d5:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:33:44 2025 by rpki-client