Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
File:                     a3276dfe-b080-343d-8d44-317e56e9018e.roa (raw, json)
Hash identifier:          jL2E4Z7PQCk2wacFHbQ8wehXv1UzkeoglB2fg+rdHSo=
Subject key identifier:   EB:B1:02:E1:CE:7A:01:3B:A7:27:33:22:BB:70:E2:F1:14:82:BF:F7
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F43285849CBCF8B1F3D34B1D473028E40
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        198.176.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8b:1f:3d:34:b1:d4:73:02:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=866ee2f8-1a99-43de-9665-6b41ce8bcb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:d1:07:8b:d6:92:eb:81:e3:59:0b:27:99:
                    49:59:85:b9:4e:bb:69:15:6b:fd:74:b9:e1:46:b9:
                    4b:8f:fc:1f:b4:d4:bb:80:f1:00:40:d5:95:d3:e5:
                    c1:06:97:8f:41:0b:a6:30:cd:61:29:2b:f2:29:b1:
                    65:7f:e4:8a:6d:4d:9b:b6:e6:e7:c3:08:f2:d9:24:
                    32:cc:f7:e0:bc:7c:f0:08:61:e7:b6:05:8c:7b:e4:
                    9c:e0:77:c9:63:25:76:bd:73:ab:3d:b6:e2:f0:1e:
                    3e:a8:f3:84:9b:be:2f:1c:6d:2c:a4:ad:9d:0f:ab:
                    2a:12:ae:7a:68:ff:48:cc:10:21:67:c4:59:12:fe:
                    db:ac:eb:51:bb:55:ba:6e:eb:bf:5a:51:4e:6e:72:
                    2b:16:2d:97:75:c3:65:6b:4b:81:ff:f8:5b:2f:64:
                    bb:94:ae:7d:7f:23:ae:d3:de:96:1d:8d:ca:5d:fb:
                    07:3d:e3:54:24:c2:b3:6a:ab:74:6a:76:19:74:09:
                    bd:79:0c:98:35:64:d0:9f:3b:64:b3:6c:19:e0:6c:
                    17:8a:2c:1c:e6:4a:d8:b7:fe:60:08:39:41:9e:d6:
                    7d:ab:2e:92:e6:88:b4:aa:e8:29:7e:ba:f2:da:06:
                    f5:ee:4c:35:6a:c1:47:6c:e7:0b:db:dc:3c:b9:59:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:02:E1:CE:7A:01:3B:A7:27:33:22:BB:70:E2:F1:14:82:BF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:44:0c:bf:d1:f2:08:d4:3f:c8:8a:e1:a1:a0:20:49:6f:a3:
         2e:7c:07:b0:87:92:5b:4e:e0:31:fd:b9:6a:01:70:23:60:73:
         04:e6:22:28:0d:6e:1d:9b:36:1c:17:2f:0f:91:90:b6:c9:cb:
         85:05:91:36:68:23:25:7c:af:06:01:29:8b:bd:94:ea:bb:68:
         85:c5:18:a9:92:83:8f:a9:35:9f:54:1b:af:77:b6:56:92:78:
         d1:53:dd:14:4f:39:72:92:60:62:0e:28:c3:5e:d1:52:f1:a6:
         b2:62:7a:ee:49:ec:7d:93:1f:53:64:53:0d:9c:eb:8b:af:94:
         d6:e6:91:76:c5:0f:7b:6e:54:fa:b5:dc:09:89:ba:4a:34:19:
         99:9d:b5:b3:64:7a:99:fa:b0:4e:e8:9a:c5:c8:71:34:02:28:
         ca:b8:22:22:41:87:07:32:09:28:36:22:1b:67:69:c7:f0:75:
         35:26:32:ac:6a:76:e3:45:92:53:79:64:9c:21:73:30:d9:b2:
         59:dc:8f:3f:68:82:22:d5:50:3c:c4:d9:99:5c:e2:55:05:6e:
         af:98:9b:fd:3c:37:11:43:48:3a:6e:77:11:86:2d:1f:39:27:
         e7:60:03:26:d2:ce:a8:92:bf:45:77:a8:08:62:fe:b7:45:23:
         63:cc:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:23:17 2025 by rpki-client