Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
File:                     3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa (raw, json)
Hash identifier:          uQFmbd0HRSC7e7IRmgjZ4zAQGh0PJ7m1+J76kXRn3PM=
Subject key identifier:   9D:74:AD:8D:CA:18:BE:9A:FB:92:29:12:14:D7:2C:F6:43:59:A2:C4
Certificate issuer:       /CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Certificate serial:       010D0C9F4328584A23C009CDDE80CF4DDA6B5900
Authority key identifier: 50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        148.80.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:09:cd:de:80:cf:4d:da:6b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e534d5e-d592-4f77-b437-24906bd6cceb
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=d7d1474b-4988-4502-bc70-e9b5a6e45531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:46:94:53:27:e7:91:b3:15:b2:e2:35:7d:
                    81:98:31:fc:a9:fa:37:0f:58:8d:6b:a1:6a:51:db:
                    e4:77:fd:84:aa:ba:3e:1c:c8:e2:bf:da:3d:46:53:
                    96:4d:f8:07:aa:93:23:e9:2b:4d:1c:fa:f0:d8:92:
                    8d:ef:3f:fc:04:a8:88:ea:71:4c:87:5a:51:d8:fc:
                    1b:2a:fa:67:ad:4b:8a:cd:19:58:40:ba:d6:12:89:
                    45:15:29:d8:d9:d8:df:9f:2f:18:f3:75:05:49:37:
                    ab:81:e4:45:73:de:30:fa:2c:54:95:68:f9:0d:86:
                    bc:ce:96:30:db:27:69:2a:05:00:b2:73:7b:f0:87:
                    94:88:4a:f5:ee:b1:ae:8c:61:30:03:e7:f6:9a:f9:
                    ef:eb:03:60:26:b0:5a:2d:20:0c:c5:31:e2:a8:7c:
                    f5:4b:f5:a7:ba:1d:fe:d7:c3:bc:4d:02:38:27:00:
                    ca:78:26:77:4f:0a:85:f5:ec:00:b7:ac:a5:eb:90:
                    97:00:ac:d6:45:39:be:2e:c6:e6:6e:50:ed:05:83:
                    a1:22:c0:23:0d:19:30:0a:1b:f0:85:db:74:cd:dd:
                    28:49:f4:47:47:30:3f:e9:d7:37:49:f7:a7:e2:e8:
                    af:2b:f4:59:d4:70:6e:2f:8e:90:f0:dd:f2:74:2a:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:74:AD:8D:CA:18:BE:9A:FB:92:29:12:14:D7:2C:F6:43:59:A2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl

            X509v3 Authority Key Identifier:
                keyid:50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.80.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:30:9e:df:1c:4c:83:a7:66:a3:17:1b:80:81:78:d3:e7:c7:
         e6:d8:b5:3e:c8:29:7e:ba:f9:59:07:9d:b3:c5:48:65:e2:99:
         5b:71:2b:44:14:b5:5c:77:99:99:f9:dc:b9:01:d0:06:b1:28:
         40:2e:04:ca:71:62:9e:85:17:c1:7a:65:93:c5:7e:84:07:db:
         81:a9:31:95:40:64:c2:5e:b6:f0:1b:f2:64:d7:af:ed:b0:da:
         7e:66:ea:59:24:ad:07:f9:43:68:51:5d:dd:9d:7e:db:28:32:
         26:9b:78:5f:cf:f1:c8:42:ad:ac:39:81:e0:7b:ae:63:f5:b7:
         9c:96:b8:7f:64:71:ef:df:0b:8d:3d:e4:82:8d:04:b5:23:17:
         08:14:7d:e5:4f:5d:4e:16:f4:10:c9:59:4a:de:4e:d5:bb:f6:
         3f:a2:28:55:fc:7a:8d:f4:3a:8b:b5:35:e6:67:ad:af:ee:4f:
         12:90:29:1b:91:65:28:50:42:8c:f9:38:18:7f:73:aa:c7:20:
         f6:70:97:4c:ce:60:f2:8b:46:22:10:7c:45:0c:b0:15:d8:e9:
         e7:77:9c:0d:60:7e:ed:a4:b6:65:17:7f:e5:b1:f5:da:20:49:
         95:67:d0:9c:5e:89:45:39:29:9e:57:91:52:5c:e5:57:6b:15:
         9e:e7:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:12:31 2025 by rpki-client