Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
File:                     6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa (raw, json)
Hash identifier:          1SLR4ygo28yMRmMksj8FyfYDNUOvkjiogfaWvuwNELg=
Subject key identifier:   CE:77:31:4D:21:0A:BC:7D:A1:35:67:92:2E:7E:00:65:70:B7:81:F3
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584A4F05C3A7A926845206CD6740
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c3:a7:a9:26:84:52:06:cd:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=2a4f2c43-9d5b-47b2-97c5-96fe5c18888f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:df:9a:0c:31:f9:7c:fb:d9:0a:ed:1e:5e:
                    20:5b:5d:e5:6a:c7:16:4d:61:e5:0e:0a:6b:1c:f3:
                    21:e0:95:2b:25:0b:a7:c6:fa:fe:51:a9:d3:5f:e9:
                    59:e6:9d:8c:0f:ce:db:2f:bd:5d:62:59:29:b6:9f:
                    95:b6:8f:a1:1b:e6:7a:25:ef:c0:1c:bb:01:fd:b1:
                    bc:d0:b3:c6:44:28:36:ea:3d:64:bf:ee:98:6a:51:
                    da:08:6f:7f:ed:0e:9c:3c:90:97:8f:14:d3:c2:1a:
                    87:a2:b5:59:60:9a:fc:11:01:1e:e9:18:70:d3:78:
                    b2:d8:86:32:02:f2:72:4b:77:e4:8a:6b:b8:53:8f:
                    18:06:62:6a:71:1e:19:1b:b0:9d:1e:fa:f3:55:22:
                    25:7a:0b:ca:bc:26:b9:01:af:70:b6:78:47:9f:34:
                    b5:1b:ca:d9:77:9a:1a:26:75:30:ad:14:50:76:b3:
                    82:0a:48:a9:f6:70:8a:1f:e9:a3:f7:2e:06:da:94:
                    fc:ed:38:3c:c6:65:93:33:e0:b9:a3:8b:41:cd:e0:
                    2d:12:e9:c8:a5:69:3d:9b:4b:2e:f9:a3:7e:19:56:
                    60:58:87:04:38:e9:d4:df:f6:e6:c5:32:17:b5:94:
                    60:7a:25:bc:7b:fd:7c:f5:47:b4:a2:0a:8c:9d:90:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:77:31:4D:21:0A:BC:7D:A1:35:67:92:2E:7E:00:65:70:B7:81:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:51:04:a2:5f:6b:b9:7c:b9:15:2b:d8:31:b2:e7:48:ea:e0:
         52:c9:a9:f8:ed:3d:97:0a:c8:90:3f:b8:6a:42:76:65:eb:4d:
         90:55:57:13:02:ff:a8:2a:6b:15:74:58:97:6a:6b:dd:9b:e1:
         32:2b:8b:69:34:10:40:ce:16:8c:16:5f:e6:10:5c:4a:cc:76:
         8f:03:d8:ae:a4:be:11:bf:ed:8f:ad:6b:f9:8b:68:89:60:a6:
         64:85:15:04:56:e6:fd:ec:b8:6f:81:17:e0:85:e5:f1:f9:6c:
         4b:f5:3c:f3:93:93:e7:f9:6b:c9:a9:a3:a8:37:71:a0:15:76:
         c8:2e:24:66:31:ff:16:e8:c7:6f:10:ca:8f:41:94:bd:8d:8d:
         27:d8:b6:75:05:93:24:1a:e8:c8:d0:03:f6:e0:67:0e:8f:5d:
         6f:4e:cf:e7:a1:79:58:a6:64:c0:05:80:1d:73:83:2f:a5:16:
         13:8c:30:d0:de:7f:3e:63:a7:60:44:05:41:00:05:71:eb:93:
         89:86:77:93:76:02:88:2c:45:2c:b4:6f:dd:11:dd:78:71:8d:
         26:09:a9:78:71:fe:ec:2c:5d:93:2f:e7:59:8a:9e:7d:65:21:
         09:0f:ef:67:98:4f:52:64:0d:2e:1a:0d:61:d0:9f:bf:d4:f3:
         32:e7:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:19 2025 by rpki-client