Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
File:                     4de85870-1812-37c2-b185-f215614574da.roa (raw, json)
Hash identifier:          T7f4qC6LxHdMZGBE3giUTVSH3UKpmATtGRB80PAl/Ac=
Subject key identifier:   C2:B6:F0:DE:56:18:68:31:7E:93:A4:22:15:BE:15:9E:8C:39:19:D9
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F43285849F9DFC60361E216B8617F8400
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        199.65.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c6:03:61:e2:16:b8:61:7f:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=317cf550-b09c-4427-bdd9-134662f08ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:05:3f:70:81:8e:cd:c5:1c:c4:9a:b3:23:
                    75:4d:ee:40:c5:9f:c4:30:28:7b:60:dc:32:59:24:
                    d8:8a:92:fb:d4:ff:ba:e0:d6:1b:53:eb:3f:e6:84:
                    40:9c:89:72:4c:c2:0d:41:08:54:97:f7:b8:81:43:
                    f0:cb:fc:7f:8b:09:fd:b5:f7:b6:d3:c0:e5:ff:8f:
                    7d:63:81:d1:b9:52:96:e4:11:c9:64:c2:6e:fb:b9:
                    f8:03:83:cc:bb:29:0b:cc:28:9e:04:59:91:12:f6:
                    e5:ea:06:42:83:1b:56:65:53:e2:43:cb:1c:dd:13:
                    d9:67:fb:23:91:c2:c3:d1:99:83:67:de:f2:e3:79:
                    a0:1a:b9:05:36:56:74:21:2a:cc:bb:0e:ec:dd:cf:
                    32:9b:48:35:de:a0:25:73:85:9e:01:09:95:36:d4:
                    9a:38:f4:f6:6a:54:02:73:e3:05:f0:f6:ea:92:45:
                    e3:59:58:a2:d6:85:9f:c0:75:48:d5:71:f9:a9:b9:
                    d3:e4:34:bb:59:e2:3c:4f:b8:a5:92:d2:7d:50:fe:
                    3b:78:38:93:68:26:05:3a:7d:7a:49:00:54:a6:9d:
                    26:63:eb:9e:96:82:fb:6f:c2:17:0f:c5:76:9a:0c:
                    83:42:e2:8e:d9:d1:a7:5c:7f:31:5c:cc:4e:09:0b:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:F0:DE:56:18:68:31:7E:93:A4:22:15:BE:15:9E:8C:39:19:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:85:9e:54:b5:25:ac:9d:67:4c:b9:ab:6b:ef:c3:d3:59:cf:
         0c:9f:a8:0c:d8:3f:d9:c1:44:a2:cc:c4:a8:9c:0c:9f:8d:f0:
         dc:81:37:44:6d:84:fe:d8:53:f9:c7:1a:e6:ba:d2:eb:15:66:
         b4:3c:9c:3b:44:95:40:bd:3f:a4:00:27:fe:2b:f8:76:b9:13:
         51:b7:c9:92:d9:21:57:19:f5:3c:0a:c0:28:fe:6a:81:9d:30:
         f2:a7:3e:ed:b5:66:75:9a:4f:64:e7:c7:85:84:13:93:7c:73:
         48:cc:3a:b0:ac:36:0a:ca:19:29:35:ed:29:d5:5e:53:0c:0c:
         09:67:62:e9:cd:ee:4c:fa:bd:7c:0c:b2:c8:95:2d:b9:a4:08:
         cf:c1:3f:b4:45:cb:63:1f:79:d3:ab:b9:ba:aa:59:5a:34:71:
         1e:ef:8c:9c:a6:b3:ea:cc:11:e7:44:d6:9b:bb:0c:c2:22:8e:
         e8:36:6e:62:b6:57:c7:9c:ac:08:59:1c:3a:b1:cb:8e:ff:48:
         4c:f3:62:68:ea:63:5d:d2:c3:4a:98:fd:5a:96:a1:42:92:0e:
         b5:b7:22:5d:ab:1c:a5:9b:9f:e6:50:fa:b8:de:74:03:b7:41:
         bb:82:3f:b0:ec:d0:a1:7b:77:3b:9a:6d:81:67:64:f7:6e:6d:
         44:10:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:23:32 2025 by rpki-client