Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa
File:                     50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa (raw, json)
Hash identifier:          Y5GZTactbA1ajvb3wxaebP6oIBkYBaI3C3Br2WB+++I=
Subject key identifier:   DC:DD:90:FC:D9:A0:F0:B3:27:BD:27:C3:94:B5:FB:B2:EF:BD:A1:E5
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584A4F05C3C469C18C02F451B680
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        198.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c3:c4:69:c1:8c:02:f4:51:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=953e246b-b267-4f29-88a6-e24922e2411a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ef:81:84:01:82:07:e0:a5:6e:9e:11:05:79:
                    1c:86:e0:b4:e5:83:4c:47:58:b6:0f:fb:1c:45:fc:
                    99:0d:86:93:60:dd:9d:21:fd:1e:86:db:6c:70:fc:
                    6a:94:18:f3:ac:f6:4c:3c:e1:74:fc:5a:cb:0b:11:
                    8c:71:34:21:63:5e:be:29:b5:47:da:37:c5:2a:14:
                    3b:b9:63:3d:cf:fb:3b:d7:5f:2c:27:ab:a8:1c:41:
                    73:cb:2e:9c:d0:d8:60:f8:32:d6:26:54:f7:69:71:
                    a3:81:c9:b3:40:54:70:3c:e3:30:1d:a8:22:f6:52:
                    61:39:cb:42:29:33:c7:03:fc:ff:56:7d:52:c5:9b:
                    0c:40:02:ee:45:e1:1b:5e:22:bd:3a:70:da:36:a6:
                    0a:04:d2:b0:b2:14:4b:04:fd:02:94:88:0f:81:6d:
                    8e:1c:c1:37:9e:bd:48:ac:18:71:f2:b8:e9:70:f1:
                    13:7c:5d:3d:ee:85:42:06:5a:e8:83:13:97:72:ee:
                    3b:d6:02:4c:ae:e5:49:08:b6:84:03:0c:b3:ca:b3:
                    5c:b0:e4:9e:c1:b3:cb:f3:80:b8:cc:e9:16:41:77:
                    3f:a9:8a:a9:56:6e:77:59:5d:41:a7:a4:1a:cd:d6:
                    90:d0:2b:8c:b9:f1:6a:e2:e1:c1:76:bc:8f:fd:fb:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:90:FC:D9:A0:F0:B3:27:BD:27:C3:94:B5:FB:B2:EF:BD:A1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:c2:39:4e:45:2c:90:18:f2:cb:99:cf:af:e3:b3:21:5a:
         79:22:13:51:ae:1a:c2:4b:07:19:f3:4a:2b:9d:e2:80:7e:3f:
         cf:23:cc:b3:c6:1c:22:b9:42:b9:ef:3c:8f:62:65:6f:ac:6e:
         90:57:3a:a2:d4:31:da:fd:fa:de:e1:7d:d9:13:81:68:03:1c:
         0b:87:96:0d:ed:69:a9:5e:88:18:54:92:64:cd:3b:39:a1:09:
         79:7a:38:f4:ee:b6:ec:0d:b6:fe:de:2d:db:4f:9e:9d:5c:76:
         96:1b:96:25:19:be:46:c1:e2:1b:f6:df:cb:2f:6f:32:91:47:
         a5:53:3d:ef:9b:2d:98:7d:a5:a7:5d:5d:ed:89:0f:e5:78:2e:
         d6:17:1b:5a:ca:9e:0e:c5:7a:9c:6e:f0:4d:37:a7:01:e3:8d:
         fd:4c:d9:8b:21:4c:fa:b4:5f:cd:80:4e:cf:bf:17:22:72:8b:
         46:c3:66:30:f4:87:06:4d:32:c2:5e:07:7c:42:22:ae:71:b8:
         a2:57:1f:1c:92:33:a7:ad:07:75:89:af:38:d5:8e:dc:6b:2a:
         bd:e0:f9:c1:53:cb:c4:e5:b9:17:00:1a:cf:17:0a:9d:50:00:
         7f:20:26:4d:7d:07:04:d9:ad:a9:cf:ff:5c:7f:e2:ae:91:b7:
         24:86:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:43:11 2025 by rpki-client