Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa
File:                     46d58c35-f7f4-3dd1-8495-938d58077651.roa (raw, json)
Hash identifier:          Iqe8w/FV/rsKew0/zOoKbRjl7X1SzWiW2r+bjgP2Gew=
Subject key identifier:   D3:17:31:EA:6D:E3:CB:88:D1:39:1C:84:85:E8:30:68:3A:18:8A:19
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285849D85F858740907F1179048400
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     1280
IP address blocks:        149.20.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:85:87:40:90:7f:11:79:04:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a8580fa5-4418-476e-a4fe-68f0c0cd066b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:e6:bb:29:16:01:e5:91:1b:e3:d8:bc:c2:
                    fc:5d:6d:cf:97:e1:31:a2:0f:3f:10:db:5f:20:cd:
                    3e:76:e2:7a:55:37:b9:da:78:31:a3:11:b4:e9:ef:
                    80:b6:d6:e5:b2:8f:73:f4:eb:d1:4a:5d:07:45:02:
                    bb:2e:a5:f5:23:c8:7b:fb:f8:8a:1a:07:7c:a3:fa:
                    18:1b:c2:8f:e3:9c:f7:d5:41:8e:0d:38:59:94:38:
                    d6:94:84:5b:73:a6:56:6a:57:92:98:62:40:bf:cb:
                    ff:1b:be:96:72:31:f3:a8:09:77:24:43:57:4a:6a:
                    18:72:dc:65:98:14:5e:d7:d1:be:f2:5f:e4:a0:25:
                    ee:77:d8:1c:31:8f:02:0f:ac:bd:e3:0a:d9:96:32:
                    ab:09:82:c0:bf:a7:66:6b:17:f2:a5:23:00:cd:95:
                    68:70:f0:84:89:38:c1:1d:57:8f:e5:68:5a:6d:99:
                    d6:d8:ff:48:f1:dd:f5:8e:ad:f5:18:f1:11:1c:1b:
                    97:ba:68:14:85:72:42:93:04:ad:e7:53:f7:b7:7a:
                    a6:97:35:75:6d:71:40:e6:4a:6a:ca:e5:e4:18:bf:
                    0b:6d:08:f4:cd:fb:8f:ab:30:8e:ce:f3:3c:34:c9:
                    03:60:cb:87:74:2c:f2:3b:7a:dd:6a:f9:96:ed:c9:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:31:EA:6D:E3:CB:88:D1:39:1C:84:85:E8:30:68:3A:18:8A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:df:c3:ae:18:9c:77:f6:9e:c4:69:c9:f6:c0:71:20:d6:87:
         50:7f:7c:28:25:3f:dd:ef:f5:48:3e:80:3f:df:92:23:1c:c2:
         6c:7c:7f:c2:40:25:ba:01:53:73:c7:d7:69:68:15:ec:bd:f9:
         21:9a:5f:de:48:7f:00:14:cc:31:73:4e:cd:84:5f:ed:4a:2b:
         6b:e7:e8:40:4f:ca:d6:af:0a:21:0b:c3:d1:08:c8:24:3c:1b:
         1f:ba:1a:14:6a:af:34:5a:5f:53:10:e6:ca:95:e6:57:00:a6:
         5e:af:66:8b:9b:1a:63:d0:64:06:70:a1:5a:67:06:ea:15:11:
         33:84:7a:5e:a1:b1:02:1d:ec:c6:1f:ec:b1:5d:9d:a8:cc:07:
         9c:8c:1c:e3:86:bd:f3:f0:ed:d2:f3:de:33:0b:6d:31:d0:2b:
         41:ee:ea:70:d5:2f:33:24:35:3a:0c:32:26:6e:c0:7f:31:e3:
         80:0d:c6:cb:d5:1c:92:73:a6:6c:14:36:e7:4c:2b:db:db:87:
         ed:24:bb:70:b1:4f:50:2c:c7:6e:fa:93:21:ec:c6:15:fe:f2:
         f7:2b:1a:1c:9c:de:ac:95:5a:ee:f0:a1:13:5e:6a:5e:b5:b7:
         5b:01:dc:dd:3a:b9:b2:c9:93:74:ac:60:78:5b:0b:75:cd:a7:
         b9:ed:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:24 2025 by rpki-client