Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
File:                     7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa (raw, json)
Hash identifier:          8qEUKp7aKq8LhQO0sCZACIcoAH+An73ujxLRmoyV+hM=
Subject key identifier:   7A:CC:00:8A:BA:1E:60:ED:7A:60:63:26:D1:64:F1:81:E1:28:49:14
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F43285849F87A8E1CD77C97EA2BEBCFC0
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        152.131.248.0/22 maxlen: 22
                          152.132.248.0/22 maxlen: 22
                          152.133.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8e:1c:d7:7c:97:ea:2b:eb:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=a17489c7-d798-4bb4-8343-d5d8900792e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:1b:1f:46:30:9e:87:a0:b9:c0:8b:23:fe:
                    b1:b1:22:6d:a8:51:fe:9d:1e:3e:eb:39:55:e5:66:
                    bf:81:e7:23:84:60:30:9a:d0:91:b8:af:ab:a4:2e:
                    3d:8b:ac:c2:d6:82:3a:51:84:a6:15:78:69:17:9e:
                    1b:97:09:e4:f5:47:ca:31:c5:99:99:8d:2b:43:39:
                    ea:d4:5e:7f:e4:e3:1b:54:53:92:ed:b0:01:0e:fe:
                    82:60:e5:38:dd:c6:1c:3a:07:53:fc:89:74:41:a8:
                    50:b4:15:e7:38:99:12:89:3e:d2:a2:1c:00:21:14:
                    40:4a:b2:c7:2c:8b:10:1e:12:1c:74:38:3f:1a:11:
                    fd:1c:0e:f0:a8:b3:a9:cd:4a:c9:3f:23:cd:fb:5c:
                    73:5b:b3:4e:95:3f:1c:f9:c1:3b:46:39:7b:49:d9:
                    08:e7:b9:53:00:37:85:9e:20:e7:25:04:a6:b1:d2:
                    c4:3a:fd:e8:8b:da:07:92:72:b7:ed:12:6c:cd:4b:
                    b3:89:c5:5f:6c:e6:0e:ca:fb:45:02:89:00:45:ae:
                    95:cb:4c:f9:23:6d:fe:9a:27:96:7d:12:64:82:28:
                    e0:ad:22:13:a0:19:32:1c:9e:e7:26:53:85:9c:b6:
                    1a:17:10:17:c1:29:75:06:6e:b0:9d:19:2e:80:2e:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:00:8A:BA:1E:60:ED:7A:60:63:26:D1:64:F1:81:E1:28:49:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.131.248.0/22
                  152.132.248.0/22
                  152.133.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:e1:88:02:6c:c7:a2:1e:98:71:2b:ad:7c:e0:66:6a:42:
         31:ef:44:e5:02:f4:0f:02:58:8e:2b:c1:4a:2a:17:d4:55:14:
         dd:f5:1f:36:5a:12:a0:2d:ee:0b:b6:a5:49:ed:51:a4:e7:62:
         c9:16:65:34:d6:a2:e7:71:83:27:bd:d5:99:97:e0:f4:ee:ea:
         3c:54:62:c2:1d:e7:8c:23:85:9b:fc:b3:f1:e8:f9:d4:ee:0d:
         1c:3c:da:62:fd:5c:77:0d:58:0a:66:a5:ec:0d:16:64:13:83:
         6b:12:8a:2b:c4:37:c8:80:7c:93:bb:c5:c5:72:d5:88:ec:2d:
         b8:00:18:cc:91:94:b1:80:9a:df:bf:47:69:d0:cd:71:e6:d0:
         54:f7:c5:df:04:50:c3:ee:43:b0:36:80:3c:6b:ed:bd:ed:7f:
         62:94:0c:4b:7b:f0:b4:d7:75:76:17:4a:d2:29:f8:41:18:7b:
         4c:7f:66:a8:0e:8a:fb:48:6d:ee:3b:73:4f:31:91:da:b6:7c:
         05:4a:27:55:64:87:cc:a5:ae:69:57:a6:d5:f3:3b:a6:a6:6e:
         00:98:3b:b8:ab:64:1b:fd:4e:e0:e8:88:1e:ed:f3:fb:29:ee:
         d7:2e:79:26:59:27:f0:76:29:41:38:06:82:b9:2b:be:18:f6:
         a9:9b:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:53:05 2025 by rpki-client