Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa
File:                     294acec0-39de-3a01-a55d-87f7629591d1.roa (raw, json)
Hash identifier:          BgPiMeYAPeEN9itQszBdO0KgWW2VsAFAiI0sAS1+6IE=
Subject key identifier:   D4:1C:9E:C3:1E:83:DF:23:4A:9A:DC:08:4E:A7:68:D3:78:89:CE:3E
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285849E22524CA647039EC027B7600
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     36445
IP address blocks:        149.248.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:24:ca:64:70:39:ec:02:7b:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=39672d03-d0b4-415d-bd25-86bae3de416d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:b9:f8:07:ac:45:99:57:23:42:59:2d:7b:
                    e0:a1:23:58:b6:3d:bd:48:a3:23:cc:47:3e:ae:3f:
                    1d:96:1d:88:a1:46:f8:93:94:02:30:58:6b:17:7f:
                    45:05:d0:fa:ca:51:a3:df:ae:12:b5:53:53:62:51:
                    8f:60:ba:9d:f9:2e:28:21:9c:d4:92:e4:5d:4c:5d:
                    3a:56:03:53:0d:29:72:85:de:bd:73:0f:7e:72:8e:
                    39:08:a4:c2:43:24:35:93:79:8a:ed:99:a2:b9:58:
                    cc:51:d5:60:2a:e1:13:76:c3:b3:26:bb:f8:ca:b0:
                    ef:96:94:46:a2:59:37:94:63:1d:b6:70:6d:3d:3f:
                    cb:78:9a:ea:38:43:88:1b:ab:d8:34:a0:8c:dc:d0:
                    f5:4d:bb:ea:ec:c8:d4:b3:d8:ee:0c:3d:31:33:85:
                    ce:ea:cf:db:9b:72:f7:52:36:fc:c5:be:da:ab:28:
                    a7:06:a5:50:e9:54:fc:53:08:cc:8b:8c:85:b0:26:
                    bb:e3:9e:d7:2f:89:dc:fc:5b:78:3d:67:e4:30:72:
                    2d:97:42:2b:e9:df:7a:b2:5e:56:3d:36:3c:01:9e:
                    dc:68:51:b5:d8:7a:b2:5b:7d:b2:50:6a:6c:da:0f:
                    3e:2e:4c:c3:56:fa:16:eb:ac:e2:9f:71:d2:ba:8c:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:9E:C3:1E:83:DF:23:4A:9A:DC:08:4E:A7:68:D3:78:89:CE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:41:1d:7a:c4:9b:3e:d5:3d:8c:6b:8c:6a:94:df:b8:21:ec:
         0f:61:2e:cc:95:eb:69:78:ba:21:d8:b5:74:78:5c:95:93:15:
         31:e9:f3:87:eb:1a:1b:a9:85:95:ec:80:d8:e7:75:3f:02:a4:
         8c:81:04:85:d3:1f:43:87:ac:6a:d8:e5:ff:5e:d4:ab:43:65:
         dd:78:44:09:32:ab:a6:d7:65:4d:ee:80:59:03:ec:2d:95:8e:
         cc:64:a1:d1:24:27:66:32:53:39:e6:36:14:98:3a:46:88:0b:
         67:72:14:0c:4b:e8:bc:72:6d:f3:a4:2b:bf:e9:15:cf:4b:07:
         33:97:2a:f3:52:da:68:f4:6f:4d:c9:99:7f:00:7b:19:32:67:
         42:c8:64:60:b1:e1:9c:21:c2:d2:04:53:c1:78:b5:ad:c9:7d:
         95:82:b7:8a:3c:a3:4b:ab:fb:eb:88:b4:38:b0:95:40:ab:0c:
         9e:fb:8e:3d:f9:47:d7:85:a7:c4:f1:8b:07:6d:7e:1f:5f:f3:
         21:61:1c:ef:2f:05:81:78:cc:3d:b5:31:a4:ee:4e:38:d6:42:
         84:71:20:c3:16:e1:af:1a:11:08:f5:d7:bf:80:f7:c0:0c:f3:
         50:a3:ca:ef:dd:ec:46:88:8a:e5:d7:48:60:d1:95:dd:ab:7b:
         6d:32:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:41 2025 by rpki-client