Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
File:                     1905bf21-ee68-3188-bef3-4a4a821e314f.roa (raw, json)
Hash identifier:          yJCMt2hDWaWMIz+8pq/akh1UlQ1S9F6oZA2xqCDr5P0=
Subject key identifier:   BD:F2:B2:D6:63:36:55:3C:A5:F9:7B:9C:DD:4D:F5:E6:78:AD:80:08
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584976A99300B5D8D88ABBAF14D0
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     7896
IP address blocks:        137.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:93:00:b5:d8:d8:8a:bb:af:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=47387ed1-74fc-483c-ba5c-673d8fefc78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:36:be:fa:c5:4b:bd:8a:7d:1a:75:c9:51:
                    37:a8:58:82:bf:c5:ea:46:5d:4b:37:b8:07:14:78:
                    65:5d:42:ce:17:9f:c7:63:e7:ad:4d:61:9d:9f:29:
                    a1:7d:2b:3d:fa:58:9c:02:4d:71:bc:72:57:32:59:
                    6a:56:a2:df:a2:8e:ef:da:da:f9:ec:33:7d:60:ab:
                    09:60:e3:d2:63:b0:30:b2:75:57:45:f9:e6:62:91:
                    59:72:1e:c7:aa:44:94:e5:b5:47:e5:b6:bc:f0:5c:
                    91:6c:67:b1:f0:22:55:ca:1e:8f:a4:ad:c3:47:89:
                    44:f6:38:4a:f6:e2:bf:67:4d:b2:66:1d:ab:be:0f:
                    60:b3:8f:10:26:7b:74:29:7d:cc:28:51:dd:46:54:
                    d1:f4:d5:57:3d:46:11:e4:9f:84:dc:d3:2a:0c:d2:
                    e2:c3:3e:1f:dc:6b:ea:cf:72:51:c8:71:de:2d:14:
                    d0:43:6f:b6:ec:08:b6:68:74:ed:5e:34:e5:c4:34:
                    89:97:e8:a2:0a:a0:03:fd:aa:a8:62:f6:49:6a:80:
                    a1:83:25:63:d1:fa:2b:79:ff:0e:67:8c:35:bb:5d:
                    8f:36:f3:b8:4d:63:d4:aa:99:67:5c:dd:0b:60:93:
                    c2:72:93:3c:19:8d:48:79:d0:58:1c:53:1d:76:a7:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:B2:D6:63:36:55:3C:A5:F9:7B:9C:DD:4D:F5:E6:78:AD:80:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:72:ec:2a:79:cd:fe:e9:55:86:17:2c:ba:a9:44:82:2a:
         ae:c6:58:83:57:83:45:d7:ed:a0:15:94:aa:87:01:b3:d7:62:
         2e:38:f4:67:0a:e4:de:71:db:cb:28:7b:59:5b:77:16:b3:21:
         66:08:36:ba:99:ff:c3:09:b2:1e:a5:fd:f0:56:b4:c8:47:2f:
         e4:38:a8:f8:e3:54:b0:3b:1c:ae:44:62:c2:6d:c5:db:8f:31:
         13:19:c7:36:10:1c:e5:4a:33:c7:ed:bf:4f:04:d4:f4:9f:b0:
         24:c5:7e:c7:5c:b0:dc:17:05:e9:4a:2f:aa:16:fe:78:43:f1:
         0b:1c:a1:34:b5:c8:41:ba:2c:72:a8:f4:dd:82:ca:c5:cf:a7:
         14:b3:a4:04:5f:e4:f1:b0:6a:ff:68:95:2b:2d:61:78:79:7b:
         45:01:5a:f1:5a:49:55:c7:f7:77:e8:ca:c0:e5:ae:68:2d:35:
         7c:11:74:d0:06:fa:21:5d:91:36:bc:60:2a:8b:37:c0:81:12:
         c3:81:a2:59:9b:8e:4d:56:4d:18:ec:ac:11:73:4b:0b:21:ce:
         28:8c:20:0c:d5:75:ce:80:f7:ca:13:df:3c:77:17:c8:fb:d5:
         3b:db:6c:0b:49:5a:12:34:e0:d4:ef:9e:47:75:1f:eb:aa:c6:
         7b:fa:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:51 2025 by rpki-client