Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa
File:                     b2ed4966-d792-34c7-806d-aaa85e042841.roa (raw, json)
Hash identifier:          MUHYToeX50p+zBDnBILkJYTA501vZhOMocyGdKUlCbE=
Subject key identifier:   46:7F:EE:8D:0B:E5:3B:7C:EF:98:4D:4D:F1:E1:C3:EB:90:C9:26:03
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285849E654F8E881F7D94A7022A680
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     62468
IP address blocks:        198.44.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f8:e8:81:f7:d9:4a:70:22:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=9081b185-7922-4a5b-a2ee-671c31197cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:47:3c:02:7e:11:e3:71:bd:4d:29:fa:71:
                    93:b2:e5:6e:28:57:d9:c3:85:19:81:b6:8f:bf:93:
                    48:0b:60:cb:dc:4a:02:44:81:a9:e7:29:1d:16:67:
                    d0:d5:8f:26:e5:05:de:df:19:1c:ce:e7:c5:17:38:
                    68:1f:f7:3d:bb:59:0e:6d:3b:9e:6f:dc:47:ed:a0:
                    41:9c:83:ad:95:7e:39:1f:fd:88:09:68:3d:08:72:
                    d4:43:9f:b3:f2:7b:8e:f1:13:6f:a4:07:18:6c:31:
                    9b:3c:91:83:16:b5:c5:e8:7c:02:18:79:0f:98:13:
                    8c:15:e5:14:7c:0b:21:1b:ad:48:08:7e:96:93:70:
                    e2:c2:e2:0b:75:ec:10:20:8c:66:e6:a5:e1:92:13:
                    f5:f8:cd:27:a5:66:85:09:c2:f4:55:d9:45:9b:14:
                    7e:99:3e:c1:82:49:9e:7e:28:3d:b4:2d:95:4e:63:
                    45:55:42:3c:74:50:f4:c2:21:72:4d:14:17:78:ce:
                    3b:a9:ee:5f:10:ab:d2:8d:a2:76:9e:d3:a3:98:18:
                    19:e0:1d:c5:bb:68:b6:e6:40:67:c4:a1:0c:5d:c5:
                    6c:be:df:30:3c:1f:d0:99:52:3a:5f:37:bb:dc:db:
                    dd:0d:59:ee:75:e9:47:64:5a:d6:52:6c:92:81:78:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7F:EE:8D:0B:E5:3B:7C:EF:98:4D:4D:F1:E1:C3:EB:90:C9:26:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:c7:44:db:fc:0d:ec:b3:7f:e0:6f:98:6c:ac:54:f5:89:
         07:14:10:7b:99:0c:da:ad:d1:cc:6a:8a:df:b5:67:71:cb:92:
         17:c7:d7:47:80:e3:b7:f7:94:ac:b2:3c:89:89:5f:59:4b:a8:
         44:9c:98:5f:a9:19:43:e9:d1:6b:e4:83:1c:56:92:71:54:25:
         b8:ac:d4:23:f4:21:58:11:00:0c:2b:1c:1c:c1:e0:9a:bc:12:
         57:53:64:c1:32:41:3e:d9:05:f3:cb:58:83:e0:58:09:62:56:
         ba:0e:ec:27:5c:3b:01:55:32:88:aa:04:61:69:aa:40:4a:c1:
         20:d3:f0:2c:a4:ca:26:da:64:15:50:40:6d:7a:a6:94:c8:87:
         21:20:4f:9c:82:84:b5:64:31:32:ba:62:73:fa:5b:12:c4:bc:
         c8:e3:d4:2e:34:82:88:17:dc:19:60:20:89:b5:1f:86:8a:f2:
         8c:d6:7f:cf:c9:93:95:76:ec:d1:8c:13:0f:e6:22:fa:5e:22:
         ce:fa:17:9c:07:67:78:f6:e7:95:c6:ed:33:c6:5a:86:c2:f5:
         a2:85:b0:36:58:99:dd:bf:ec:dd:4d:aa:e7:b9:9b:41:b8:11:
         a5:12:1c:85:b3:bd:98:8b:d6:20:b7:a0:10:40:c8:53:4b:e6:
         f3:26:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:23:52 2025 by rpki-client