Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/2dd30cb7-9fce-3791-85d1-affdc5dedb18.roa
File:                     2dd30cb7-9fce-3791-85d1-affdc5dedb18.roa (raw, json)
Hash identifier:          1HUnq+FJz4CnCf6U99ZQkRHMCPUYg09Wm/tJCfdKIOU=
Subject key identifier:   32:57:BA:0A:8A:16:AB:EA:08:92:02:43:CF:BA:0C:F7:5C:EE:A3:7C
Certificate issuer:       /CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
Certificate serial:       010D0C9F43285849ABB4A525393BED2B29B0EA80
Authority key identifier: 31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/2dd30cb7-9fce-3791-85d1-affdc5dedb18.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     393559
IP address blocks:        64.226.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a5:25:39:3b:ed:2b:29:b0:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=7c2b25e7-6069-4952-bfe9-6ff34a4077cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:4f:18:9b:f7:c9:e5:a2:82:3c:84:b9:d3:
                    cf:7b:8a:f5:e0:11:85:fa:2f:30:46:a5:36:db:38:
                    e6:11:79:21:d0:01:f3:be:4d:4d:16:ff:84:ec:9d:
                    7e:2e:0e:35:55:bf:b2:69:bd:02:cc:3a:cf:11:d4:
                    6e:14:d9:4f:9d:f4:3f:92:50:76:83:57:9c:9d:3c:
                    e0:63:09:72:fb:38:b9:f0:03:e9:dd:fe:bb:6d:c2:
                    d8:c4:3f:dd:89:a1:8a:8a:8d:59:c6:fb:f2:e9:90:
                    f5:db:5a:63:52:72:3e:d4:58:b3:e1:58:5f:f2:7a:
                    74:be:49:d6:ca:d3:26:8c:d0:0d:c8:b4:3a:8e:e8:
                    a9:30:e2:23:d7:50:3b:91:99:de:fd:93:b0:bd:4e:
                    e2:58:75:52:ab:48:ad:ee:d5:5f:91:1d:9a:bd:29:
                    0d:34:79:60:5d:b7:fc:7e:5e:de:56:e6:b1:60:13:
                    fa:6c:e7:c7:fe:8f:17:fb:63:1b:c9:e7:55:52:ac:
                    85:1d:fb:83:81:67:ad:62:95:65:62:2b:66:80:44:
                    07:07:22:ca:3e:4d:7e:5d:ae:e9:33:bb:72:e9:7b:
                    df:d0:d1:7e:6d:25:b5:a1:04:08:aa:d2:e6:f5:60:
                    9b:75:77:b5:98:6b:dd:30:35:a9:76:21:7a:c0:33:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:BA:0A:8A:16:AB:EA:08:92:02:43:CF:BA:0C:F7:5C:EE:A3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/2dd30cb7-9fce-3791-85d1-affdc5dedb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl

            X509v3 Authority Key Identifier:
                keyid:31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:35:ed:96:b3:1e:78:65:ff:79:d4:dc:a1:95:f8:b4:a1:
         83:1a:b1:d1:ff:eb:44:06:1a:70:e4:56:c0:31:64:f2:54:52:
         ae:50:7c:10:fd:47:f4:7e:67:29:23:9a:08:e3:aa:45:b0:21:
         12:ee:e1:47:54:33:37:a2:7f:dc:ce:e6:90:36:c3:47:47:36:
         fa:70:81:c2:77:55:81:ba:f0:f2:93:cb:41:97:ae:94:a9:77:
         dc:27:52:20:1d:fd:c3:82:05:9d:2b:b2:5a:d6:64:8e:70:81:
         05:d5:16:75:c3:65:13:85:cd:49:d0:66:f3:d8:84:bf:6b:66:
         c2:d7:64:3a:ab:9b:87:f6:f8:72:52:7f:f4:ae:bd:bf:6b:7a:
         f8:af:93:ab:26:4d:fb:2d:92:5e:ef:b2:38:f2:19:09:2d:ef:
         41:ee:fe:0c:cb:7a:59:d3:70:1e:c8:54:94:78:5b:cc:3f:b6:
         57:4a:ec:f8:f1:86:bf:c4:a8:e7:b0:38:85:27:c4:9b:b4:85:
         db:e1:68:18:82:eb:54:89:44:46:af:ab:63:8a:c7:b2:e0:c8:
         b4:12:a8:ec:c6:9c:6d:57:0a:ad:74:dd:b6:7f:a1:06:47:21:
         b9:c3:72:d9:0f:c8:99:44:c1:ed:55:23:af:18:18:1f:8e:ca:
         1f:43:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:57:30 2025 by rpki-client