Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa
File:                     cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa (raw, json)
Hash identifier:          HEiRNYlo761WjInJlnaTUqfGj8acK1gLG2Bj9T0A2fc=
Subject key identifier:   55:42:95:37:14:3D:23:2B:B4:4E:64:2C:5F:AE:59:80:13:2B:BD:7F
Certificate issuer:       /CN=a275555b-70b6-4540-972c-12b8d180ff56
Certificate serial:       010D0C9F4328584A03A54DD9D088597996A69900
Authority key identifier: A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     21854
IP address blocks:        65.48.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4d:d9:d0:88:59:79:96:a6:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a275555b-70b6-4540-972c-12b8d180ff56
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=1fe92998-a8e2-4505-b688-fc7f8b4b031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:75:1e:0c:43:f8:9d:cd:2a:7e:a6:56:e9:
                    af:b1:e8:95:1f:6f:54:59:27:4c:d0:e2:bd:79:7c:
                    ec:c2:05:f8:12:c0:15:4a:32:6c:2f:3b:3a:74:bc:
                    f2:47:21:28:e7:88:f2:a1:63:a9:7f:b9:c9:9c:99:
                    8f:6a:12:66:fd:89:d9:2e:07:6b:21:6d:4c:9b:d2:
                    88:f8:30:cb:97:63:02:8d:97:3e:22:21:35:a5:d0:
                    84:7b:37:08:93:19:86:6e:03:cd:c7:2e:18:82:30:
                    ed:e5:42:14:6e:7a:eb:d7:7d:44:41:3f:bd:68:37:
                    97:af:32:2d:d5:4d:de:84:2b:cc:8a:e9:c3:b0:99:
                    d4:67:a6:63:33:df:a8:5b:de:bb:f4:75:9c:0a:5c:
                    47:66:49:33:17:85:01:f8:f2:23:0c:a4:60:4a:d8:
                    09:91:36:c2:71:da:9b:79:fc:df:ac:3d:c4:98:1f:
                    e7:ee:e8:1e:97:30:1b:a6:47:44:42:bf:bd:89:fa:
                    e2:d6:e7:6e:69:49:c3:c8:58:aa:1b:7b:c3:52:06:
                    6c:61:5e:2a:80:a6:89:d0:5a:48:ee:e6:2b:47:53:
                    b7:4d:ea:28:2a:da:2c:15:3d:00:12:c5:e8:be:09:
                    77:f1:c7:84:1f:69:ac:07:33:c9:88:4e:60:e9:cb:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:95:37:14:3D:23:2B:B4:4E:64:2C:5F:AE:59:80:13:2B:BD:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl

            X509v3 Authority Key Identifier:
                keyid:A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.48.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:b2:f0:18:9c:7f:41:f4:85:4b:1f:19:65:71:9c:49:b9:
         6a:2f:9d:11:d7:3e:fb:a7:35:b5:db:06:3d:79:6a:11:e0:7a:
         22:6c:66:ed:7b:be:eb:9f:a6:37:db:50:35:3a:6a:8e:ac:1b:
         72:6c:43:8f:0d:6d:77:48:bf:d7:39:7f:2b:cf:9c:85:8e:33:
         b4:6c:fc:93:47:27:62:98:30:2c:87:fc:5f:68:d9:58:f3:0e:
         a9:b1:34:8c:0a:6e:79:a4:cb:fd:21:24:41:46:39:5a:76:07:
         e4:34:c8:3d:f1:96:67:77:99:18:23:d0:3b:b1:d6:d9:72:54:
         5d:e4:0d:d6:e5:e4:f6:46:19:f2:0a:fd:62:ac:80:04:64:7a:
         50:58:6c:d3:2a:cf:8f:cb:08:ae:af:4d:dc:95:c7:a6:f1:4f:
         05:7b:66:6d:26:ba:36:5c:99:78:d5:ce:ad:41:2b:1b:1b:aa:
         c4:38:93:7b:f8:c9:ab:ec:04:4e:79:0d:9f:e7:8b:e1:da:d6:
         8e:3b:90:73:9c:8b:d9:d0:90:cd:77:0c:6d:3b:76:f9:c6:ef:
         e5:da:c1:fd:14:78:fa:16:b6:ad:90:09:49:e4:9b:fa:93:7d:
         f5:38:b0:b3:6c:70:9a:7c:f4:0a:55:48:fb:df:05:c1:15:09:
         6d:cc:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:41 2025 by rpki-client