Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa
File:                     91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa (raw, json)
Hash identifier:          QA803Q5Ri7/V4cPoeJcyJUf5u7ntaTZiCPvJ3toD+iI=
Subject key identifier:   B2:5C:07:5A:F4:F1:CA:B6:AA:81:71:6D:3D:50:C5:2D:E2:43:59:F8
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584A4F05C3953EB2216F6CE55E40
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.154.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c3:95:3e:b2:21:6f:6c:e5:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=a29d7777-37c1-4fc0-b612-bd2e89a835ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:32:15:7a:84:da:a7:10:73:88:8a:04:09:
                    de:36:a7:87:82:d9:34:df:fd:83:62:28:16:02:ba:
                    83:4e:3e:68:e9:f5:53:e5:66:31:5c:4e:c9:ae:6a:
                    41:23:ea:3c:97:f1:24:32:5f:1e:2c:1a:0d:4f:5a:
                    f9:d7:29:09:c5:6e:7c:7a:2b:8c:af:f7:03:43:d5:
                    71:67:c6:d9:52:db:31:19:be:a3:00:c5:28:e6:d9:
                    cb:52:b8:61:7f:d9:3f:ec:f1:bc:5f:f9:01:97:fc:
                    89:e5:91:fc:16:c5:dd:fd:54:d2:23:34:ca:f2:56:
                    de:af:a1:02:a5:26:db:f5:fa:f7:40:b8:a7:a6:78:
                    fa:42:04:dd:1d:2c:0d:2a:4a:1a:51:35:f3:07:f4:
                    f9:34:d4:7d:1d:d6:15:24:46:cf:07:ee:fb:19:75:
                    16:00:08:a1:90:36:d2:d5:7e:90:34:a7:34:88:3c:
                    e2:d2:ec:1f:f2:5c:d5:0e:2c:d4:df:75:e9:69:a1:
                    a3:6f:ab:53:7c:08:5f:d3:1e:9a:45:51:ce:79:14:
                    68:8e:32:6f:fc:6f:33:9f:b9:0b:e3:91:c4:00:a5:
                    a6:d4:86:38:7d:ac:81:23:17:5c:84:41:11:88:c4:
                    24:7a:53:b7:33:c8:f2:0d:29:5e:fa:5a:d1:78:56:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:07:5A:F4:F1:CA:B6:AA:81:71:6D:3D:50:C5:2D:E2:43:59:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/91e9ef7a-3b63-3d0a-8019-f6ed4707d631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:56:e7:eb:10:fc:99:f4:0c:8c:92:37:f1:3b:81:dc:6b:
         ff:96:26:f4:b3:96:2c:9a:da:2a:6b:7a:10:f4:68:74:57:08:
         f1:4d:83:9d:c4:3e:03:46:6b:ba:6c:f2:a0:01:fe:87:a7:a2:
         ed:fa:65:1a:8e:d2:c3:aa:b3:ff:4b:db:75:dd:9b:2b:61:e6:
         14:46:e8:36:f3:06:77:8d:30:59:e4:f1:3a:61:2d:49:90:12:
         24:b9:bc:00:32:e3:e1:3a:76:8b:9b:d5:c7:97:57:8e:b8:98:
         c7:6b:70:59:77:06:c3:f3:8d:41:6e:a7:75:7a:2d:59:0b:4e:
         29:30:ec:2f:ff:1a:58:dd:81:1d:2d:a0:2a:b1:b1:d7:39:e4:
         52:e3:1d:bf:1c:be:c2:8c:a7:92:c4:2d:f2:81:17:0e:23:95:
         c9:57:d1:7e:d3:04:ca:5a:10:7a:86:02:c4:10:7e:43:66:a1:
         12:33:0f:30:dc:cc:b8:3d:bd:5f:7a:74:ee:50:7c:dc:e4:55:
         e7:b6:60:04:32:d4:d3:18:8b:1c:d8:fd:ab:c0:8e:5f:d2:a9:
         32:00:ad:4d:01:56:8b:93:83:d5:ea:cc:ed:ac:2c:50:14:68:
         2c:e4:72:0d:f8:f4:de:2a:32:8f:05:23:18:d0:7b:b9:9d:9c:
         8a:a1:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:46:25 2025 by rpki-client