Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa
File:                     303e9955-d68e-32c2-a271-3e5a2b3464ba.roa (raw, json)
Hash identifier:          BqVoM4ooUjWLj0yshDM/X7cS2ktbTKMVA+DzXXsukNM=
Subject key identifier:   06:BC:B5:41:E8:16:BA:AC:CA:C5:7B:2E:D0:04:B7:6E:9B:92:0B:D9
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F43285849C36F791838487323577DAC80
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa
Signing time:             Tue 06 May 2025 13:01:01 +0000
ROA not before:           Tue 06 May 2025 13:01:01 +0000
ROA not after:            Mon 04 Aug 2025 13:01:01 +0000
asID:                     36734
IP address blocks:        148.64.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:6f:79:18:38:48:73:23:57:7d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: May  6 13:01:01 2025 GMT
            Not After : Aug  4 13:01:01 2025 GMT
        Subject: CN=a92b68b6-ac93-45bd-8aeb-c7c793962be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:f2:22:7a:e1:37:7d:31:c2:09:37:c3:7d:
                    38:5f:11:74:4c:51:f7:7f:d9:7a:99:0b:4d:c9:e5:
                    27:ba:28:77:37:25:f5:8b:f0:09:ae:6a:53:a9:9b:
                    b9:2c:43:13:18:9e:5b:12:71:89:eb:10:29:e2:f9:
                    6d:56:e4:e1:28:8d:4a:77:52:b5:b3:0e:17:ab:f9:
                    79:77:42:de:00:70:a3:ae:35:8a:46:8b:60:ad:85:
                    d6:a8:de:ed:35:10:ba:21:36:52:86:48:e6:20:a5:
                    76:4b:c4:86:3d:7b:59:0c:6f:fc:fd:b0:06:0b:f3:
                    aa:54:8a:53:6a:21:50:c6:46:2b:d2:d1:0d:86:3f:
                    2a:f1:4a:f7:06:92:4f:5f:3a:50:93:9a:81:3b:4f:
                    05:af:64:82:e3:33:01:51:ed:cb:8e:8e:44:14:00:
                    6a:4f:32:0c:e3:fe:ce:e5:26:01:eb:32:ec:49:00:
                    b8:0e:4e:0a:16:93:bb:a2:f9:ad:ee:4e:f3:62:80:
                    0c:4d:04:e5:90:68:ba:f0:15:52:5b:1a:fb:3e:d1:
                    b2:21:4a:76:68:91:45:d2:ec:92:c3:87:35:90:68:
                    bb:56:43:44:21:c9:ba:18:1c:47:1d:c8:64:65:ff:
                    be:2e:12:78:17:0e:04:eb:9e:28:dd:e2:8e:b6:00:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BC:B5:41:E8:16:BA:AC:CA:C5:7B:2E:D0:04:B7:6E:9B:92:0B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:97:9a:ac:fd:cd:29:88:da:63:5b:71:af:d5:0f:6e:7b:cc:
         f5:4e:6a:c6:44:c8:32:83:03:fe:4a:f4:16:fd:ed:98:4a:36:
         4d:62:32:6b:47:b2:c5:b5:2e:bf:9a:92:5d:ca:23:66:77:3b:
         9b:a1:a9:8c:66:12:71:56:dd:ff:39:e7:ce:f9:37:0e:e3:72:
         30:b8:9f:45:7c:fe:56:da:41:bd:4e:0b:57:d7:67:9a:b8:66:
         5d:5c:d4:65:0e:2b:24:05:99:f1:bf:70:da:5e:0a:c7:fa:01:
         09:57:c8:6d:e2:b3:7e:ca:d4:d8:61:02:46:51:83:2e:a2:11:
         31:e1:65:e1:79:a3:2a:6b:62:7a:f7:38:08:35:d5:7e:9a:a0:
         7a:00:4b:1e:c6:7f:14:24:eb:c8:e6:77:80:f0:be:ff:6a:5d:
         06:10:02:81:7b:41:f1:24:aa:4e:6e:99:b8:bf:77:9a:54:37:
         f6:c0:45:bc:65:86:72:3d:5f:bc:e1:4d:0d:32:f2:ec:bc:e5:
         ea:5e:92:12:6a:2f:e4:02:d8:d0:96:17:6c:a9:40:eb:41:34:
         6e:a4:57:20:8a:61:35:d2:17:5e:c8:3b:a0:91:f7:96:67:01:
         f3:43:0e:ad:05:4f:66:9b:a3:6d:a5:09:74:f4:07:ec:10:5f:
         93:50:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:10 2025 by rpki-client