Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          6gTl1c0vRuanz4wURVr+UiQMratDv2AeVMyD+vAdO2s=
Subject key identifier:   F2:76:EB:98:5F:7A:2C:1A:C7:C0:2B:55:C8:B0:09:70:52:3F:EA:24
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F43285849AA4F732F45F05E177FD7EAE0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:73:2f:45:f0:5e:17:7f:d7:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=681cdc6b-8b39-469d-bc0c-5a595754d1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:c0:cc:3d:1e:58:4d:32:e2:2f:3e:95:81:
                    58:34:6c:86:ad:0f:05:59:4a:79:c1:8a:c2:35:a1:
                    ac:28:ba:d4:99:7c:86:e7:34:70:13:33:df:b9:33:
                    df:ce:1d:62:49:b4:9d:b5:17:38:1d:c7:b4:1e:e3:
                    f1:a9:aa:45:40:bf:da:b2:f6:48:d9:61:b6:64:41:
                    7c:07:42:a4:f3:09:a0:24:3b:46:6e:4c:5b:e9:28:
                    f5:35:8f:ed:f1:fc:07:5b:fe:09:3c:b5:5b:8b:25:
                    b8:6b:65:e8:19:39:49:87:0d:b8:19:8b:60:76:12:
                    ff:20:4d:a6:a0:3d:42:a3:10:d5:70:f8:ff:9e:d3:
                    62:1b:d8:ef:b8:65:75:ae:e5:3a:ff:71:7a:07:b2:
                    95:8f:7d:e1:74:48:c7:1e:93:47:ec:0b:de:19:dd:
                    ab:57:8c:e7:71:3f:26:4c:84:5d:03:fa:0a:61:47:
                    5d:f2:dc:1d:ca:47:51:3c:3f:c1:3b:6e:85:42:ef:
                    33:5d:32:d2:0a:4f:cd:1c:d7:33:15:06:b5:ba:0e:
                    6e:d1:62:a7:7f:89:32:0a:a9:34:57:cf:aa:1f:80:
                    4e:35:b8:60:ce:53:cf:ed:82:be:72:56:5b:28:d4:
                    fa:d8:4a:4b:f5:0a:bc:29:92:ef:31:86:bf:01:ac:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:EB:98:5F:7A:2C:1A:C7:C0:2B:55:C8:B0:09:70:52:3F:EA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:1c:07:63:91:9e:c2:cc:bd:28:b4:f1:8e:31:b4:67:bf:
         0b:5d:ae:f3:e1:7d:ff:b2:af:53:ff:4d:3a:ee:29:7c:51:a5:
         41:ba:b6:7a:57:c9:ce:6a:74:a9:80:d7:7b:d7:af:46:9b:0d:
         b0:d8:41:e1:e6:cb:44:05:1b:d6:07:92:af:99:67:90:34:c6:
         40:2e:1c:d7:9d:a0:77:34:c8:c9:b5:b3:45:be:e1:6e:17:9c:
         bd:59:26:77:51:ae:44:8e:07:c2:24:9e:a5:f5:5b:e5:5f:02:
         1a:fa:e9:63:e0:fd:29:4e:dc:f5:12:bb:c0:a5:2f:6a:5b:f0:
         a3:0a:71:f4:df:a9:95:07:d2:31:14:6d:7c:7f:d5:87:cb:87:
         b9:5e:0e:bd:8c:7b:70:2d:60:da:58:ad:af:d6:20:55:0d:47:
         f8:88:01:76:63:46:d7:93:68:a3:ce:67:1e:9b:8a:05:1c:4e:
         b3:a1:41:e2:26:61:89:0b:87:bb:f1:d6:4c:c1:ea:ed:51:98:
         da:e7:7b:db:41:cb:12:a6:31:4e:ee:16:c7:27:de:69:a9:86:
         81:88:9c:a1:10:e0:42:bf:9e:89:96:9b:c4:31:71:de:f1:0d:
         5c:2a:52:59:bf:89:6b:bb:43:f7:a1:1e:21:e7:df:88:4f:a5:
         40:47:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:14 2025 by rpki-client