Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa
File:                     95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa (raw, json)
Hash identifier:          PiAlN6Xgfs07AbrTD2SzgCcbc2KtZUz8eITZOpdyEZA=
Subject key identifier:   F7:76:44:E2:DC:A8:0C:B7:9F:5D:B7:D1:6A:0F:ED:01:45:FF:99:EC
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F43285849F87A8378448849BFF6101B80
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     64496
IP address blocks:        152.130.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:83:78:44:88:49:bf:f6:10:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=4c28982c-9893-49f8-82cc-c83351aca973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:18:ef:36:d0:71:3f:11:6b:1a:ad:ed:f0:
                    66:be:98:e7:d7:ca:c0:eb:c7:cb:80:6d:0d:99:4d:
                    87:c2:ef:3b:1f:b6:42:0d:f9:ce:b3:be:3d:9f:5a:
                    0b:44:51:8e:62:aa:ec:04:f5:3a:e5:9d:68:6b:b1:
                    7f:b0:44:be:76:51:50:80:4b:82:56:d3:ba:3f:a5:
                    c0:5a:9c:6d:6b:13:e5:e9:68:93:8f:bf:a0:29:6f:
                    37:8d:cf:5b:a2:a0:8d:3e:2b:ad:d9:d7:56:44:b5:
                    df:7e:e3:5d:c7:92:4a:92:22:ef:b4:c3:e8:c9:0b:
                    75:c3:1c:9b:5c:5e:df:f9:79:f6:f9:ba:2d:e6:9d:
                    00:77:72:7f:f0:ca:6f:3c:a7:0f:58:3e:8f:a8:ed:
                    1c:39:25:db:7e:bf:c2:d8:55:9f:e4:ac:76:7d:dc:
                    d3:8e:c2:ec:d9:93:48:4d:88:57:c4:3c:32:f8:32:
                    68:8d:13:f2:d6:0d:79:ef:64:7c:9c:e0:f9:55:6f:
                    03:14:7d:88:3d:19:89:e6:e1:37:75:ab:a0:ed:47:
                    48:07:7e:9b:ec:97:c0:8c:3b:83:91:eb:ec:bb:3e:
                    56:63:74:13:91:0a:b5:d2:60:e8:0e:78:08:c0:f6:
                    5e:bb:e6:b0:f9:ab:13:77:95:23:85:d4:dd:a3:63:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:44:E2:DC:A8:0C:B7:9F:5D:B7:D1:6A:0F:ED:01:45:FF:99:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:96:0b:4f:d9:e4:6e:49:6a:2c:52:02:27:39:e9:f4:b6:
         a7:a0:d9:e9:10:b8:1a:f3:58:7d:d1:6a:69:92:3d:41:db:74:
         60:37:1f:37:86:cf:3d:66:c3:27:83:12:55:fc:53:28:a6:04:
         a9:17:74:ae:7a:c8:30:e1:36:9c:da:56:df:3b:8e:2a:c9:df:
         a5:f8:be:3c:d2:68:27:91:c1:53:02:28:09:e5:f7:95:40:4a:
         ee:09:eb:43:5f:8d:db:2d:7e:54:49:c3:ef:71:6a:6c:a4:96:
         d5:89:5b:68:ca:b1:ad:cd:0f:a9:c7:1a:6c:9f:61:da:31:21:
         34:cb:3f:0f:ad:7e:7c:9f:87:f4:84:1c:cd:db:ee:65:92:f9:
         b6:86:db:0b:77:fe:46:ca:7e:59:0e:c2:23:5b:17:1b:98:10:
         a4:fb:e4:f7:bb:75:9d:e7:56:fa:ff:01:a8:c2:d2:bf:b0:cf:
         1f:a0:ec:22:cc:81:a2:ab:70:e5:ad:eb:e0:0d:b2:b1:40:71:
         be:66:bc:45:d4:71:08:fe:92:81:1a:94:24:e6:64:cc:2d:ed:
         7e:09:64:47:5c:71:80:43:10:24:57:99:9d:67:5a:17:ab:68:
         70:cb:2f:98:7c:3d:8c:66:06:61:c6:8c:03:e2:74:d7:7f:c7:
         58:a6:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:10:55 2025 by rpki-client