Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
File:                     01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa (raw, json)
Hash identifier:          Ui2X9oLC3g6yNPcrjvYtOt631m3waYQcDYuYEhN/0Ss=
Subject key identifier:   0C:64:3C:5D:0F:5F:39:7F:09:C8:BE:42:21:B3:89:02:8F:7C:E0:5D
Certificate issuer:       /CN=6540401b-bc62-439f-9a85-287ef16081ad
Certificate serial:       010D0C9F432858498CFF11B80061BB270E01ADC0
Authority key identifier: A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     46656
IP address blocks:        204.145.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:11:b8:00:61:bb:27:0e:01:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6540401b-bc62-439f-9a85-287ef16081ad
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=b601bc15-e62a-4743-ae29-094fcc2d1736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:74:25:66:7b:27:f6:1b:92:17:43:d1:10:
                    cb:6a:a0:25:c5:2a:06:6f:9c:ad:8e:e8:5c:0e:06:
                    a8:cb:6d:78:53:20:ce:ef:8f:b5:71:68:0d:8b:f2:
                    d0:cb:c9:82:1d:43:2e:11:b5:6d:7a:c4:63:59:28:
                    a7:62:b0:87:d6:f9:b3:75:85:97:56:0e:f0:68:70:
                    4a:7e:ef:55:eb:21:f3:bb:6e:db:f1:f1:5d:88:f7:
                    a9:67:9a:64:1b:f8:d4:5d:dc:19:82:86:83:30:a9:
                    3e:2d:cd:47:c2:c5:af:32:f7:87:e6:0a:d6:87:73:
                    ae:12:52:d1:3c:e7:4a:10:91:b1:9f:aa:d6:f9:05:
                    39:3e:d1:b6:7a:71:83:5a:db:6f:7d:50:9a:54:cd:
                    65:3a:6c:ce:6e:2f:4f:1b:28:f0:db:af:60:93:42:
                    ab:26:28:fe:52:54:c5:86:e7:0f:a6:9c:11:93:40:
                    28:aa:6e:a4:e7:d6:e8:7a:ef:da:83:90:49:cb:42:
                    2e:12:d0:0a:7a:87:1d:31:62:2f:18:3c:51:78:3c:
                    71:2a:e9:94:8c:9e:f3:71:d6:82:41:6a:b6:ea:47:
                    02:19:80:8a:18:d7:ad:4e:eb:0c:e4:d5:ad:11:6b:
                    89:29:c6:72:67:de:2b:34:94:61:e3:4d:f3:d0:61:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:64:3C:5D:0F:5F:39:7F:09:C8:BE:42:21:B3:89:02:8F:7C:E0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/01db8c84-cf0d-3a90-8732-b3fb421e02e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad/6540401b-bc62-439f-9a85-287ef16081ad.crl

            X509v3 Authority Key Identifier:
                keyid:A2:7C:FE:71:E6:65:08:81:9E:CA:16:C7:7B:98:38:5A:8A:0F:F1:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6540401b-bc62-439f-9a85-287ef16081ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:a6:b9:68:df:af:1b:8c:4d:ef:71:9f:48:55:32:55:b9:
         73:05:09:f6:84:c0:b5:05:e0:55:c4:87:6c:ec:f6:64:33:4d:
         b3:b5:1e:79:8d:39:65:84:8c:ec:d4:4e:63:29:90:0c:ac:09:
         c0:01:30:65:fd:f2:a9:44:03:03:08:28:f3:7f:8f:b5:9a:00:
         0a:04:7b:7a:2a:67:a4:bb:98:77:f8:18:b5:34:60:39:49:4d:
         50:d7:f0:f0:70:67:d6:f4:c8:13:5e:7f:5f:f4:5f:a4:e7:d6:
         f7:d7:b4:35:9e:d3:78:9f:20:57:81:24:0d:ed:69:31:de:fa:
         82:11:f8:82:b5:57:58:2d:28:fb:f5:05:17:6b:cf:e5:64:e5:
         9a:a1:ff:c2:db:73:7f:31:48:61:3c:ce:f6:41:82:8b:40:7b:
         25:ce:fb:23:59:f5:d6:b0:04:78:51:5b:a9:f7:55:1f:8a:3a:
         cb:a6:26:7f:a5:7b:65:7f:ec:ef:a4:06:ea:02:64:9b:67:e6:
         72:24:74:c8:d0:d2:42:65:f0:40:fc:e1:b6:38:d7:ed:08:1e:
         42:99:90:a7:1c:ea:76:78:3e:34:ab:dd:50:86:c9:03:1a:ef:
         9d:39:99:c4:03:b7:b4:d8:ca:25:f1:a0:4c:92:87:7a:c3:4b:
         ac:e4:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:45 2025 by rpki-client