Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
File:                     03efb475-2734-343c-823b-4efaee05cc2c.roa (raw, json)
Hash identifier:          6r9jsmBwS4IA72ZmKgsB6My0BqbREao7qxLOYV+pOcQ=
Subject key identifier:   2E:92:E5:DC:99:33:BB:E9:5F:6A:A8:30:7D:A1:F1:50:72:D8:77:39
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F43285849F17FBDFF5BB23D4527925E40
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     11978
IP address blocks:        199.255.252.0/24 maxlen: 24
                          199.255.254.0/24 maxlen: 24
                          199.255.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bd:ff:5b:b2:3d:45:27:92:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=3941482c-a718-4beb-867d-04f01898be55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:a3:d6:c9:d6:68:fc:d8:30:ff:c0:b8:bd:
                    29:42:5b:09:8b:e4:57:a8:a6:db:8e:ea:65:08:ce:
                    ea:bd:43:e2:aa:5e:c9:a0:cd:be:d7:6d:5c:2d:70:
                    ad:d6:2b:b1:e5:d5:20:06:c2:2a:94:06:a4:04:cb:
                    b4:f0:ba:54:68:38:51:38:2b:76:f1:d5:ec:fd:02:
                    23:7c:38:58:3f:6d:e9:2c:c1:f5:16:8e:9d:f4:0d:
                    fb:aa:8a:ff:6b:76:ca:c2:bc:d2:27:36:61:94:78:
                    19:29:fb:6a:19:4a:cb:2c:eb:7c:19:10:52:90:de:
                    ac:5f:50:50:94:9f:54:8b:46:1e:cc:4a:f4:6f:de:
                    73:6a:cd:91:1b:65:92:fb:6c:9c:66:ec:16:90:47:
                    60:29:e6:9e:99:ed:e1:33:8d:ce:f6:aa:c6:be:fa:
                    47:12:ef:b4:67:65:11:1c:20:8e:6f:9b:6f:6a:54:
                    12:cc:3e:f6:23:2c:ca:50:3f:3a:09:ba:dc:61:6a:
                    69:66:31:6d:dc:ec:a2:37:32:97:ca:a7:a7:1d:66:
                    b7:c6:84:f5:13:53:7b:50:41:38:ba:dc:d5:1c:f8:
                    40:f3:17:21:05:40:d4:9c:f0:7a:e1:41:d4:66:8a:
                    32:33:0d:bb:a9:f7:80:2a:e7:40:43:3c:59:f9:9b:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:E5:DC:99:33:BB:E9:5F:6A:A8:30:7D:A1:F1:50:72:D8:77:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.252.0/24
                  199.255.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:ce:45:9c:ba:da:e2:63:6d:eb:81:9d:24:98:ef:cf:2e:
         39:b2:f8:10:b1:d3:0c:dc:4e:fe:ce:7b:2d:6b:19:6c:d2:63:
         fc:1f:9a:18:cd:f8:fb:8e:2d:75:90:b4:9c:73:a6:9b:d7:8a:
         d3:7d:6c:73:e8:dd:7f:65:46:aa:38:8c:7e:11:ac:9b:ed:80:
         9c:3d:01:4c:ca:23:0e:b4:d3:cb:35:cb:44:9a:b2:6c:16:df:
         06:00:d2:34:21:24:cb:c4:18:ea:b4:dd:99:6b:c6:d1:03:d6:
         b5:8d:33:28:6d:46:82:fc:ae:ff:35:52:84:a4:da:de:8b:54:
         36:3f:22:f1:bb:92:43:4a:64:68:74:73:fa:2a:3e:3f:d6:d5:
         5e:37:a8:eb:e7:ff:a7:7f:69:c0:5f:8c:35:b4:09:4f:73:64:
         cb:a7:a1:1b:a6:6a:27:c1:ab:56:23:a1:ca:a5:18:dc:97:47:
         a7:39:07:f6:6c:bb:87:77:f0:a7:8d:0f:c9:69:48:66:7d:67:
         9b:79:65:ef:f3:af:1c:40:f8:d5:db:4d:ef:da:21:23:9b:11:
         09:ab:f9:ec:e3:3d:0a:84:8a:de:e2:fd:6e:ea:7d:c9:13:30:
         d4:57:70:86:b2:4f:75:b7:a4:67:6c:60:a4:25:52:9c:53:f6:
         49:35:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:30:52 2025 by rpki-client