Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa
File:                     04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa (raw, json)
Hash identifier:          GjMip7dxzJzW9I9bSQuDUYAiPQUXKD0DkYa2FgK+wes=
Subject key identifier:   F1:D4:CD:F2:92:A1:81:35:DF:E5:34:CF:D5:EB:51:39:80:A4:EC:13
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F43285849EE9A8C08952E20B55CECFD54
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa
Signing time:             Thu 22 May 2025 00:07:36 +0000
ROA not before:           Thu 22 May 2025 00:07:36 +0000
ROA not after:            Wed 20 Aug 2025 00:07:36 +0000
asID:                     2914
IP address blocks:        155.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:9a:8c:08:95:2e:20:b5:5c:ec:fd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: May 22 00:07:36 2025 GMT
            Not After : Aug 20 00:07:36 2025 GMT
        Subject: CN=904ec618-d709-4ce8-8909-330b057a2535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:80:ff:42:e7:ce:2b:77:ed:ef:1d:22:2c:
                    ca:fa:78:97:9a:ad:f0:ce:83:d7:24:ff:e6:5e:55:
                    17:44:b9:2a:35:66:c2:07:9e:7f:a3:c9:9f:b1:b6:
                    da:63:5c:f1:6b:bc:e0:8d:78:54:1a:ab:f3:d5:fb:
                    d8:58:08:03:17:33:6f:4f:b3:ec:73:76:0b:3c:c6:
                    66:a5:dc:b8:0f:62:72:00:69:d2:9d:11:bc:0d:ff:
                    32:e0:19:e5:d6:a8:19:e3:d6:7b:92:f8:8b:bb:2d:
                    16:04:f7:6c:96:27:fe:9d:89:af:32:37:28:df:91:
                    5e:cc:ca:2c:e1:20:fb:45:c0:76:2e:d3:db:d2:90:
                    7d:a8:75:a4:96:98:f8:d6:ff:bd:ae:fa:45:f8:cf:
                    20:ea:a9:01:6a:6f:67:ca:a7:7e:ec:d9:8c:50:2d:
                    f3:60:45:0e:b9:a9:f6:1b:36:0e:81:6f:93:52:8f:
                    72:8a:a0:ce:4c:36:2d:59:ab:aa:ae:ed:33:f1:90:
                    8e:1d:50:9b:57:32:94:ac:f1:39:dd:c8:c1:99:f9:
                    4f:29:5c:03:7c:73:40:13:25:f4:12:3d:e9:0a:d3:
                    69:47:ac:07:e9:73:12:d5:eb:88:db:94:fd:06:f1:
                    9c:53:47:f9:d8:e2:39:97:e9:a2:00:d4:ae:fc:1f:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:CD:F2:92:A1:81:35:DF:E5:34:CF:D5:EB:51:39:80:A4:EC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/04f3adbb-7fc5-31ef-9d37-0a8a78e689b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:70:2f:46:be:1f:91:81:15:dc:50:91:a1:b1:32:61:20:
         b9:f4:9a:6e:f3:b1:b8:20:02:b6:ae:3a:27:9d:e9:ce:ed:14:
         07:6c:f3:ea:e6:8c:01:90:04:92:51:fa:59:64:53:b0:0f:7b:
         c0:7c:d8:29:3b:33:32:a2:94:6f:aa:df:97:23:f1:fd:ef:95:
         68:04:53:ed:2c:26:8a:f1:e7:55:59:00:4f:cd:c3:e4:5d:ae:
         c9:57:a4:3d:16:88:87:21:b7:a1:1d:21:4b:52:e0:a7:c1:4e:
         9d:06:6e:19:bd:30:31:1d:3a:4c:6d:29:61:10:9e:3a:66:32:
         e5:73:26:1d:5d:3b:25:43:c8:13:cf:d9:be:7f:4b:fe:54:4c:
         ab:bf:9b:ce:39:17:aa:ae:75:39:0a:a7:d6:9c:e2:e4:7f:38:
         f5:ec:7c:d5:2d:1d:8a:67:de:25:fb:5e:3a:25:64:63:d2:0a:
         90:17:60:37:e2:91:c4:22:a2:7a:49:fd:55:bc:70:a7:5f:a4:
         ab:91:ac:a8:4b:df:17:e7:e2:c3:32:a2:14:36:64:18:17:b0:
         91:7a:da:c7:64:33:54:69:08:18:09:17:df:96:11:af:8b:63:
         b0:f8:d0:45:1d:f4:7b:0c:64:f1:88:40:0e:9a:c3:0d:16:b5:
         19:56:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:08 2025 by rpki-client