Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa
File:                     2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json)
Hash identifier:          v7SfD/HTRMjQ+D1TKUFc2lBqjmuyAktJhxS1a03XojE=
Subject key identifier:   36:E8:CA:57:64:F3:B1:B2:15:8C:8C:DA:A4:69:12:C0:00:E8:BC:15
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285849E2251722EEB6789EDC43E540
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     36445
IP address blocks:        149.248.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:17:22:ee:b6:78:9e:dc:43:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=ffa49f29-7c1c-4c40-a435-04e234a162dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:16:12:06:bc:68:50:0b:40:34:da:63:fd:
                    2e:cf:e1:b0:27:f1:00:29:fe:f8:08:e4:dd:73:8d:
                    b1:be:8a:2b:b0:67:e1:a2:fe:27:41:75:31:a4:66:
                    d9:c3:bc:d2:59:f2:cb:9f:f8:db:5a:aa:bc:94:f6:
                    e3:95:57:71:34:4d:1b:cb:d0:03:fb:79:25:a5:6b:
                    db:e1:b1:8f:d8:72:e0:fd:45:c6:52:6d:12:1c:5b:
                    41:83:f9:b6:9c:4c:48:3f:30:2b:95:4d:a8:a4:68:
                    9d:a2:2d:d7:b5:de:4a:ed:35:e3:5f:7b:a3:46:a1:
                    92:12:06:8c:a8:c1:61:ce:d3:fc:1b:5d:76:aa:74:
                    69:10:38:2d:c9:99:e2:ee:4c:74:50:a6:a6:63:2d:
                    95:64:70:dc:47:d8:be:51:2b:31:40:54:1c:5d:b6:
                    92:f9:af:eb:d1:8a:15:2f:cb:c6:65:e9:c5:75:e5:
                    0f:78:d3:8b:4d:51:f0:a3:45:69:fb:d7:fa:0d:6c:
                    5e:62:67:88:be:97:21:a4:f8:df:7c:0e:95:8b:33:
                    b8:b0:ad:02:0e:e6:2a:fd:30:32:7e:5e:b8:16:6b:
                    8f:cd:31:d2:b0:2a:db:30:c3:0c:f0:af:f2:f6:29:
                    4d:fb:3a:f6:6d:70:00:e1:82:07:f5:49:2b:e6:02:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:CA:57:64:F3:B1:B2:15:8C:8C:DA:A4:69:12:C0:00:E8:BC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:28:f4:3c:ce:96:92:4a:63:e6:6b:89:2b:30:e2:8c:35:a8:
         23:27:47:63:cc:25:9f:43:d1:36:fd:52:ec:0a:9a:1a:e3:0f:
         60:e8:84:30:3c:a8:5f:f2:e7:1c:ab:ae:69:c8:3d:98:52:55:
         8d:25:cb:b2:58:3f:a1:53:3a:16:bb:5b:21:24:f6:36:a1:95:
         8c:06:c9:be:00:dc:aa:f3:c4:af:96:03:1f:f0:d7:40:a0:42:
         47:8d:89:39:a3:c9:1f:d8:bc:8a:33:1d:0d:5c:0f:5b:6e:4e:
         cd:26:68:99:1e:dc:ea:36:64:31:a7:e4:30:a8:e9:db:45:cf:
         55:af:78:63:ef:6d:f5:e0:3b:95:52:0f:3b:b3:89:18:f8:92:
         5c:77:8a:e1:58:06:d8:a7:56:de:d3:ee:2f:4a:58:3e:39:d3:
         f0:a5:c0:85:c3:eb:03:8b:8c:84:f8:2f:c0:59:ee:85:1a:1c:
         b1:f4:4e:96:25:ff:b9:61:b9:78:5f:23:6d:1f:05:04:f6:7c:
         2a:63:98:d5:5b:b9:6a:42:a3:45:51:38:cb:5d:61:04:a0:78:
         90:67:15:b6:9b:0a:97:8a:db:cf:c3:06:33:f6:01:92:70:b1:
         95:86:aa:ea:ca:03:00:3f:cd:24:7e:1b:62:17:70:c1:b4:c1:
         4f:7f:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:51:21 2025 by rpki-client