Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa
File:                     21e16498-e39c-38cd-a8f8-470bb4f66f80.roa (raw, json)
Hash identifier:          xglgS6/i88i3WYl3WAcHK2hb64YFXzf6aFll75Gh/vg=
Subject key identifier:   9D:5C:A5:39:0F:75:8B:FA:AB:0B:63:01:56:6E:FD:C3:C0:2E:AA:9D
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F43285849D85F9A310AF520464D7E9B80
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     398416
IP address blocks:        149.234.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9a:31:0a:f5:20:46:4d:7e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b658345f-279e-4b3b-9c8b-0f66a33b8f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:23:22:4d:3a:ad:d5:74:8b:60:80:6f:02:97:
                    08:b7:77:d6:65:5a:7d:ba:07:2d:64:f4:2d:d1:a1:
                    a2:be:41:a5:9b:6b:55:c5:7c:4b:d4:a3:50:f8:e6:
                    7c:2b:7d:ce:fe:5a:86:a5:7a:2f:6e:70:0d:47:b4:
                    58:ef:60:6a:82:73:46:a1:68:ff:94:05:97:f7:54:
                    5a:0f:69:b8:8d:2e:57:e1:f5:30:2c:bd:30:8e:bb:
                    50:65:60:97:44:e3:fd:a4:aa:57:f9:f1:b7:e2:c4:
                    a3:c7:a7:48:c1:5c:f6:d2:71:81:57:03:ea:22:a1:
                    e1:4e:64:61:d0:c9:c0:99:a7:7f:c7:b9:dc:de:2f:
                    2c:71:34:7f:7c:88:71:a3:0c:40:bd:82:52:14:08:
                    aa:c2:ad:98:fe:6d:b7:01:a3:cf:aa:a7:19:6e:4f:
                    b6:81:08:bd:3c:bb:0f:a5:ca:e2:60:db:33:2f:29:
                    d5:62:f3:a5:b1:60:0e:88:fd:9c:32:a6:27:72:e0:
                    97:78:02:72:c1:52:d1:7e:f0:40:5d:1c:af:89:bd:
                    05:c0:da:f1:be:88:2f:36:1b:31:a2:03:73:af:07:
                    47:f5:8a:7d:da:f7:71:0d:02:37:a7:0e:d4:7c:3c:
                    0a:6f:7e:4f:5d:a9:4f:28:30:eb:5a:fb:ce:c2:6e:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:A5:39:0F:75:8B:FA:AB:0B:63:01:56:6E:FD:C3:C0:2E:AA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:88:4b:8f:67:ec:44:86:32:73:cc:08:cf:d6:d1:39:da:2d:
         99:e1:7f:d8:93:2d:95:7d:35:dd:51:95:5f:b1:9f:b0:69:4c:
         0d:d2:3c:d0:dc:dd:29:a0:aa:ce:b4:82:4e:e8:8d:80:13:8c:
         da:54:19:c2:80:f6:48:ab:86:4d:9b:18:1f:35:36:7c:5a:a3:
         a1:6c:53:f3:6f:95:ed:66:85:fc:e3:94:ff:c9:55:06:55:a9:
         0d:1b:ed:e3:eb:86:ae:75:05:4a:d7:9f:98:67:9e:a5:19:d1:
         02:a5:9f:cc:85:9a:28:71:ec:f8:a8:92:77:78:4b:d3:2f:55:
         af:e4:c9:04:ef:df:f1:68:86:e3:2f:cc:84:93:66:d7:23:8e:
         e5:6f:b2:91:ae:e1:c9:eb:ff:eb:60:74:1f:f1:23:e3:0b:d4:
         6b:96:61:b3:f5:05:ff:22:67:88:88:52:19:13:26:79:82:b8:
         48:80:31:f6:fc:87:84:6a:9d:1e:df:e9:05:9d:ad:eb:95:33:
         8e:f5:79:42:3d:a2:4e:9d:53:fd:46:c8:48:0d:de:53:6c:ae:
         11:2f:29:a4:e9:57:54:b4:9e:f6:42:f4:93:dc:2d:af:7d:7f:
         19:e6:67:c2:9a:7e:51:ea:49:94:76:3a:93:f2:0b:c9:85:f2:
         7f:b0:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:05:55 2025 by rpki-client