Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/cc9d4d4a-bbea-3e6b-8227-e3d1a1a3d912.roa
File:                     cc9d4d4a-bbea-3e6b-8227-e3d1a1a3d912.roa (raw, json)
Hash identifier:          4IgbBFXs7MJchV8z8fHPkaby+JDIekDs+Hfi7FudMTA=
Subject key identifier:   EA:CC:A1:66:EF:A6:A5:AB:0A:CD:24:13:33:E5:A4:1D:85:74:E3:19
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285849780F1073731ADCFCFA349590
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/cc9d4d4a-bbea-3e6b-8227-e3d1a1a3d912.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        155.226.144.0/20 maxlen: 24
                          155.226.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:10:73:73:1a:dc:fc:fa:34:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=1357c9f9-b897-49c5-8222-ed4ae740c351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:3d:b4:25:72:76:0f:c4:fa:1e:b5:e5:0b:
                    d3:91:1a:f2:c4:a3:0a:a8:35:54:38:fe:5b:fa:a6:
                    d0:6c:98:ed:28:43:01:d4:2c:ef:9b:4e:b8:8e:7a:
                    8b:29:0d:fb:a2:6c:89:e0:b1:9c:d4:9b:d6:f5:5c:
                    fa:c6:be:a7:b3:c7:26:3f:46:cc:c4:f5:03:64:c1:
                    e2:33:61:b2:f5:63:18:60:63:13:ac:0d:f0:b5:95:
                    f5:93:10:55:36:6f:4f:73:b4:9b:aa:98:16:1e:10:
                    44:d8:25:3b:b8:36:45:df:e8:7b:d7:e4:19:a0:d9:
                    ef:02:d9:0e:44:07:60:2c:3f:d0:0d:b0:a9:97:3d:
                    aa:21:0a:78:7c:2c:6e:cf:8a:6d:64:d0:83:e2:b7:
                    fb:8c:85:2c:84:58:5c:99:dd:5e:23:02:f4:89:0f:
                    6f:2a:a9:ea:62:78:a3:14:75:cb:57:08:d3:38:9b:
                    99:be:b8:38:88:d7:e2:48:dd:3e:47:33:52:4f:50:
                    a4:8d:02:07:3d:fa:c3:b6:9f:5b:13:66:2c:0f:e9:
                    d9:ef:1a:a1:68:dc:fb:e5:4f:e8:f5:be:f8:a8:4a:
                    96:aa:3c:db:d4:d6:6a:37:ba:45:f4:8e:00:d0:b1:
                    b7:2b:3f:a1:61:4c:76:0a:9c:07:46:a7:3d:41:20:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:A1:66:EF:A6:A5:AB:0A:CD:24:13:33:E5:A4:1D:85:74:E3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/cc9d4d4a-bbea-3e6b-8227-e3d1a1a3d912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.144.0-155.226.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:73:69:40:fe:1f:4a:83:af:03:14:5c:9a:1a:f0:21:f1:1e:
         4b:31:a8:1c:bf:a1:d0:20:73:ae:fe:71:a5:64:14:29:36:ba:
         c1:69:ac:a4:c8:c2:8e:7a:a9:2b:f8:16:3f:12:96:f6:3f:f1:
         62:4d:e7:07:64:29:d8:c8:8b:20:33:c9:a2:6e:27:c5:06:df:
         71:80:e5:03:fd:84:96:b4:c1:b1:cf:10:86:5c:54:cb:70:ea:
         de:2e:0f:90:91:5a:23:34:11:d3:19:83:4d:65:ba:18:6c:81:
         13:bb:bb:0d:fd:da:93:1e:cb:fa:fa:5a:53:ff:f5:6c:8c:ba:
         8a:2d:cc:36:f7:ca:bb:c4:a3:a4:91:da:f7:c0:43:56:1a:72:
         ff:31:46:b2:2e:ba:04:d1:db:5a:1f:cd:72:6c:cd:61:0b:b7:
         31:eb:dd:d3:4f:8a:d5:ec:88:d9:ed:04:ab:ec:94:f8:b1:a6:
         66:99:6d:d2:ab:88:5f:ee:28:35:9a:b8:38:2b:65:9b:18:96:
         13:2e:7c:ed:13:78:4c:15:a9:48:7c:5c:6d:96:25:3a:e3:ac:
         c5:db:8d:20:fa:5f:db:0f:55:da:91:e2:5c:72:0f:c5:9c:79:
         99:8d:f7:40:6a:d3:84:84:fc:08:04:51:a7:91:df:5d:fb:fc:
         5f:2b:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:29 2025 by rpki-client