Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          dbyWYEKWRkjnh0luucGRZv8KYgwsEYEb4JDlVaf6pAU=
Subject key identifier:   4B:63:B7:7F:7A:9A:BB:7D:BA:8A:BE:CB:A1:BE:17:01:B6:E6:E1:C0
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584A89A621E17E7AE7FE08628940
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:21:e1:7e:7a:e7:fe:08:62:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=4c38e4f3-d565-4a2f-a174-27a781b7760e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:28:ca:86:cb:62:88:96:56:3a:f0:d2:0f:
                    7a:98:a8:2b:02:21:25:4e:3b:ac:48:b2:23:06:30:
                    a6:aa:aa:d6:b7:ca:8c:d7:94:99:2b:8d:17:ee:0c:
                    6b:e5:c0:07:6f:37:35:d3:f2:51:90:5a:39:43:43:
                    11:54:ba:80:f2:b8:8d:04:e7:68:00:9e:d3:f8:df:
                    40:86:17:91:ca:8f:f2:e4:9a:46:3c:eb:6a:56:86:
                    e3:88:42:21:a1:56:24:a2:4a:95:8e:5a:21:c4:37:
                    b5:30:a0:d8:e5:1b:76:f8:93:de:5d:6c:7c:a1:bb:
                    c4:9b:3b:0f:4b:0a:72:84:55:4c:4f:91:f4:57:c5:
                    36:96:8f:c3:b6:43:33:8f:ab:6e:b9:98:10:4b:90:
                    c7:2e:2a:32:82:bb:53:cb:ae:10:1a:12:23:8f:83:
                    df:2a:83:f4:91:38:b5:06:c3:ef:e1:d6:52:1f:50:
                    34:ca:81:2b:e8:82:ce:23:39:4d:98:74:c9:b1:3a:
                    ed:22:89:a3:a3:ce:12:d3:74:75:6d:f2:6a:01:4f:
                    cd:2c:60:89:d0:eb:c8:73:1c:07:65:55:69:d1:0a:
                    70:0d:45:d9:72:35:77:92:a3:8a:39:f0:3f:01:3d:
                    f7:db:33:11:b8:57:ac:7b:38:d9:e3:d3:f0:d1:53:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:B7:7F:7A:9A:BB:7D:BA:8A:BE:CB:A1:BE:17:01:B6:E6:E1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:1f:26:d1:57:38:d2:93:fb:58:6b:4a:46:57:c1:69:fe:
         0f:dc:10:fb:c5:97:41:4d:55:b1:2f:26:56:64:eb:a2:e9:4b:
         b5:98:c0:40:f6:ad:92:e1:49:95:79:6d:a0:ad:e4:16:df:f2:
         20:41:b4:a0:41:cb:b2:4b:fb:8d:5f:59:19:98:7d:e2:9f:af:
         fb:82:1f:97:34:57:7c:ce:5e:be:9c:d9:06:e4:31:c3:0a:48:
         b9:5e:89:0a:de:ce:a4:fc:93:7f:f5:d9:dc:a6:68:67:cf:f8:
         29:ac:25:1c:20:f4:07:d5:1d:95:25:cc:60:af:ce:7c:c2:d1:
         de:65:01:c3:45:07:b1:a9:29:e4:e4:64:19:d3:73:11:c3:17:
         55:49:b1:70:02:3a:54:38:db:5e:5f:4e:41:9d:f0:3e:7e:d4:
         f6:37:7b:75:6f:43:5d:c9:5a:50:26:19:29:35:32:02:86:fc:
         e3:9f:b0:84:3c:61:7b:9f:dc:e4:3d:78:08:af:6f:13:43:b6:
         7b:23:5d:14:45:6d:d3:f2:eb:3a:8b:f9:96:ac:44:9d:7b:a4:
         93:c1:28:ac:60:57:0f:e5:24:c8:d4:20:6e:df:7f:c8:4c:55:
         d7:d6:18:4c:7d:fc:bf:1f:27:ba:f7:a3:d3:cc:af:71:59:3f:
         0b:a3:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:36 2025 by rpki-client