Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e5b239bc-dd8e-356c-bd9e-1595b6d54a0d.roa
File:                     e5b239bc-dd8e-356c-bd9e-1595b6d54a0d.roa (raw, json)
Hash identifier:          wXDC+qg+7BPw8hgeO3nz0F7J4fKFxw95KWowLjn1g84=
Subject key identifier:   3E:35:C6:56:A9:0D:9F:D7:0D:F8:70:5D:25:C1:8D:DA:99:C4:26:AB
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285849D165024B45F66DEF87642D40
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e5b239bc-dd8e-356c-bd9e-1595b6d54a0d.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        205.201.44.0/24 maxlen: 24
                          205.201.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:02:4b:45:f6:6d:ef:87:64:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=a9348ebb-ad51-493f-a7a6-b5d0157e2a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:50:6d:cd:71:52:0d:d9:5e:85:2d:16:86:
                    f5:e5:be:34:e1:fa:da:ab:57:c3:46:0b:f1:36:35:
                    b2:1e:fa:6e:ae:7f:c1:0e:23:d4:3c:89:39:50:34:
                    f8:a4:67:33:5c:c0:bc:3b:d9:51:97:11:36:5d:bd:
                    1a:bd:f6:6f:1e:36:75:76:fc:95:54:09:9b:30:af:
                    c7:c4:f5:f1:39:bf:03:45:19:73:88:5c:52:18:d6:
                    96:57:b3:90:80:3c:8c:1a:7d:4f:c5:c0:68:fb:cf:
                    43:a9:c9:59:58:79:12:a4:cc:c3:ca:60:60:fa:3a:
                    41:fe:11:4e:47:60:3d:ac:30:e7:7d:e2:fa:27:9a:
                    bd:fb:31:e6:03:8b:d2:26:be:d5:44:13:63:87:ec:
                    23:c1:30:da:f6:f7:a8:1a:78:db:a1:05:81:78:ff:
                    65:2c:80:7f:e2:6f:c9:22:b4:78:43:73:07:16:e7:
                    87:3d:7a:66:b8:3c:52:05:ba:63:52:20:fd:c9:fc:
                    84:20:b0:62:3b:2d:16:97:ef:68:70:60:37:f0:25:
                    79:4d:d6:4b:19:4f:c8:fc:8f:f1:f8:a2:4a:d5:28:
                    1b:d1:6c:c0:02:41:a4:a9:de:7a:63:28:cd:e3:46:
                    5a:a5:8c:96:56:d2:ec:ab:e2:ac:ff:11:2b:1c:bc:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:C6:56:A9:0D:9F:D7:0D:F8:70:5D:25:C1:8D:DA:99:C4:26:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/e5b239bc-dd8e-356c-bd9e-1595b6d54a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.44.0/24
                  205.201.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:21:d9:54:e1:72:94:dd:e9:54:69:5b:28:57:b9:a6:f1:ae:
         ca:fd:f3:aa:78:48:58:5f:e6:da:49:d0:cd:b2:7a:32:d0:97:
         ba:f0:3c:1e:c4:ff:44:09:e8:f0:d6:b9:57:b9:ae:30:43:ac:
         70:3c:7b:52:5b:56:e6:13:0a:16:58:62:4a:98:80:74:de:19:
         75:8a:87:b0:ac:26:b9:b5:93:a6:12:ff:c0:98:3f:a6:87:e1:
         8e:86:a2:5b:7f:5c:43:40:ed:88:2c:38:e3:18:bc:6a:3d:08:
         7d:fc:a9:e5:55:5a:90:af:67:43:57:02:10:cc:fa:dd:e4:95:
         56:b5:1f:93:11:40:49:98:bf:99:5d:23:65:bf:cd:94:c8:bb:
         83:74:4f:b7:6f:56:7c:5b:af:13:fb:49:9e:f8:81:20:3b:90:
         7f:9b:1a:7a:89:b8:be:6a:c5:f7:39:e4:4f:5f:c1:62:ac:72:
         50:88:66:81:96:7c:53:fb:90:c3:de:3b:a4:f3:de:fd:77:c2:
         95:9d:0c:12:41:66:7d:c1:f5:d1:fd:ca:eb:b6:01:8a:dd:82:
         b9:c4:8d:f3:cc:c2:ed:26:c0:8e:0f:1d:dc:1d:de:ee:9a:21:
         d2:5d:d4:87:e2:20:15:23:ab:a2:a2:7e:af:7a:e7:5a:87:d2:
         3e:4a:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:53 2025 by rpki-client