Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa
File:                     d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (raw, json)
Hash identifier:          RwER3dWIi7KIeEx1mOZ2/x9YPS7VqnEEOMDNsekKELg=
Subject key identifier:   24:94:21:D3:48:5C:28:95:1A:0F:9E:5B:23:E8:88:80:BA:D8:5D:58
Certificate issuer:       /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae
Certificate serial:       010D0C9F43285849F17FB0B2EFCA1BCA3C6B1C80
Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        193.149.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b0:b2:ef:ca:1b:ca:3c:6b:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c6919631-1c76-4c10-9989-423bc660c2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:e8:32:93:7f:c6:88:ca:5d:9a:82:67:32:
                    d9:64:ed:7b:e0:f7:18:fc:32:f4:c4:c7:48:01:00:
                    8e:09:52:32:f3:af:77:e3:7a:d4:c4:75:1e:c3:40:
                    d6:b7:41:2c:0f:6c:f2:52:2d:63:15:1c:65:92:fe:
                    a9:9d:56:2a:0f:29:f6:5c:e1:3a:e2:93:e3:94:52:
                    a5:dd:e1:00:c4:3a:f6:3f:15:6e:43:21:3b:0d:52:
                    05:fc:59:04:47:19:89:fb:31:23:d4:3a:73:01:40:
                    2c:ec:10:fe:ab:42:8f:b6:d0:7f:e7:e1:bc:ea:5c:
                    d8:c9:41:34:87:b0:f2:f5:f9:02:97:a1:fb:34:ab:
                    6d:61:26:c6:97:dc:d3:59:6e:b9:ba:32:69:83:2a:
                    fb:af:79:f4:af:ca:dc:f0:c2:96:1c:23:de:9a:08:
                    d7:9c:da:9e:a9:7c:40:03:62:6f:2a:88:41:19:22:
                    7b:40:67:a4:cc:ba:be:44:b8:8d:8f:e1:dd:6c:bf:
                    de:39:72:af:b3:f8:22:cd:6e:d5:9d:38:67:d9:75:
                    97:ff:10:a5:0a:7a:ea:5b:65:d3:cd:72:1d:f5:36:
                    81:f9:d4:4c:6e:30:2f:07:4d:2d:a6:05:f0:e1:21:
                    6b:5a:0d:5b:2a:0c:fc:28:63:bc:fa:d4:ef:c3:fe:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:21:D3:48:5C:28:95:1A:0F:9E:5B:23:E8:88:80:BA:D8:5D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl

            X509v3 Authority Key Identifier:
                keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:44:4e:1e:9d:3f:98:0d:f2:c2:07:c1:aa:eb:b9:ab:d2:15:
         7a:5d:65:58:f6:5c:26:62:2c:ce:68:63:83:a7:58:1f:73:23:
         f0:8a:a1:98:03:7e:31:ab:42:74:d3:ee:38:b4:74:69:98:9b:
         2e:21:0c:57:85:d7:e1:88:76:a4:e0:2b:33:d6:37:aa:57:fa:
         3e:b0:73:91:af:48:01:5f:df:68:25:0f:0e:4c:72:67:45:37:
         87:0c:8a:55:01:f1:bc:9d:4c:cd:e0:19:af:6f:ff:f8:b0:a8:
         cf:64:e6:72:74:da:2c:36:46:73:be:ea:a6:88:cc:d4:88:16:
         61:e7:c1:d6:c3:7d:18:f7:0e:22:45:c8:54:02:73:c0:92:a7:
         d4:fc:40:64:08:a5:14:54:c9:79:8b:48:7b:ec:f2:c8:c8:db:
         f8:4a:15:65:9a:3e:a8:7d:28:3e:4e:8c:92:42:11:e2:d0:78:
         42:66:8c:bb:16:aa:ef:b0:0d:cb:aa:98:c7:a1:33:00:17:43:
         6a:cd:4a:d4:8b:60:5f:a1:bd:ce:8d:34:46:4a:40:dd:32:82:
         4a:55:e7:6d:ea:5a:10:7a:bc:6a:82:50:83:e5:41:d6:40:74:
         ea:3e:0d:ce:52:4d:c6:d6:ee:32:6c:4c:b4:17:1d:c8:06:dc:
         d1:fa:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:21 2025 by rpki-client