Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa
File:                     e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa (raw, json)
Hash identifier:          985r5XTScCPTvQxcafGRNszxvuZU+VT9yGJw9Sm9cZc=
Subject key identifier:   BE:DD:D8:AB:21:7D:AD:F6:2E:B1:2F:FD:07:A5:38:AC:0E:35:D5:03
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858496764FEFFD06E9A4166D05B20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa
Signing time:             Thu 03 Apr 2025 13:45:35 +0000
ROA not before:           Thu 03 Apr 2025 13:45:35 +0000
ROA not after:            Wed 02 Jul 2025 13:45:35 +0000
asID:                     19905
IP address blocks:        150.195.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:64:fe:ff:d0:6e:9a:41:66:d0:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  3 13:45:35 2025 GMT
            Not After : Jul  2 13:45:35 2025 GMT
        Subject: CN=76f76b1b-f426-48ea-a019-8b68506471e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:91:da:85:82:31:fa:57:85:87:8c:39:ee:
                    9a:99:46:58:08:23:fc:e2:a8:9b:b5:a3:3b:4f:b0:
                    e6:ea:5e:ef:3e:3d:89:6e:42:72:b7:d2:bf:e8:c8:
                    4c:5a:9e:82:0d:cf:fa:22:85:fe:72:5e:3a:ea:2d:
                    8d:df:5f:90:79:13:19:13:e4:b3:66:7e:79:20:10:
                    81:ca:9c:86:b2:ae:60:c0:35:27:d1:1d:24:52:2f:
                    24:7d:cf:2e:78:63:42:d2:ad:9f:e2:6d:52:c5:e9:
                    04:aa:40:8f:c8:32:49:1a:49:d9:22:36:f8:64:33:
                    f7:cd:ef:6c:da:17:fd:fe:4a:55:db:10:11:a6:9d:
                    92:f0:2f:ea:0b:76:b0:60:a4:9f:55:b3:d4:0b:13:
                    40:b2:9f:3f:4c:49:94:81:a0:ba:32:52:2a:3e:e8:
                    c9:f1:55:7a:93:dd:1a:d5:1b:ea:03:9d:21:0c:0b:
                    44:7a:d4:0e:02:69:bd:50:72:3c:44:46:81:5c:6f:
                    cb:67:93:65:3e:5e:f0:d0:bf:a4:52:0d:95:f6:17:
                    59:20:b1:05:63:23:69:32:c0:54:e2:17:c3:9c:ea:
                    6a:43:b8:db:71:91:97:1a:7d:07:0b:d9:2a:92:53:
                    57:f8:bb:bd:8e:93:ed:48:d0:c5:fe:67:37:41:b5:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DD:D8:AB:21:7D:AD:F6:2E:B1:2F:FD:07:A5:38:AC:0E:35:D5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e4439eac-1efa-397b-9ae2-4f5a6445bdc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:fb:88:19:99:d9:80:14:4e:70:1e:94:40:49:95:89:67:
         11:c7:c8:2c:2b:b7:fd:4f:0f:b4:a3:33:1d:ca:fb:bb:b0:37:
         53:5d:69:3c:89:3f:75:fb:f6:16:31:fe:9f:91:53:b4:b4:00:
         00:3e:a5:58:0b:d5:06:7d:ff:6a:cf:41:27:42:0b:e8:fd:73:
         db:7d:0a:4c:40:e2:22:ce:e2:23:18:8f:62:d4:18:2b:27:e1:
         06:3c:23:4c:2e:3f:07:8e:36:20:88:ee:e8:b8:08:39:25:ba:
         c5:4c:10:a3:68:6b:c4:f6:d0:e9:02:19:95:29:97:a0:0a:db:
         dc:66:bc:ed:07:d7:c9:7a:3e:76:43:3d:fe:ce:32:24:3a:79:
         43:11:bd:67:50:d4:81:16:29:79:d4:16:f5:31:f7:5c:da:22:
         e2:72:64:89:12:67:d5:0c:9a:28:63:6e:e7:1b:15:d8:42:e9:
         6c:c5:b9:f4:ad:dd:00:f0:c5:6b:e5:b8:1b:d9:a2:ac:5e:dc:
         ef:48:c6:3f:cb:cd:90:d3:3c:b9:a7:ca:e1:7a:a7:1b:16:c8:
         37:d4:f3:21:3c:d8:54:dc:06:05:4e:d7:4c:f4:c7:c9:0a:e8:
         8c:0b:72:b1:c9:bc:60:62:6e:7e:eb:2a:a8:d4:81:aa:79:e4:
         22:97:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:15:19 2025 by rpki-client