Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa
File:                     13d6443d-a92a-3906-ab26-6557ebc6664b.roa (raw, json)
Hash identifier:          y43d7PEXdGFP3lKQdGc8oZWihBkA+fEHfbJf8px6zOs=
Subject key identifier:   DB:F4:30:95:46:B0:B9:9A:B3:E1:AE:61:5B:ED:9A:9B:C2:24:5B:C8
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F43285849F2E54B46D2408755B393AFF0
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     33182
IP address blocks:        198.136.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4b:46:d2:40:87:55:b3:93:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=1525770c-f8c5-43f9-8709-fed86073a535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:d4:e5:fa:42:31:89:dc:43:f4:e9:f8:7b:
                    c4:e1:8c:28:96:ea:9e:65:ed:9d:cd:ad:35:ae:7f:
                    06:3b:77:22:97:d3:90:b5:92:0b:43:98:02:18:c5:
                    70:6e:b1:bd:2a:cf:15:3b:b1:95:40:53:96:ef:55:
                    d2:a9:4e:b8:c5:8f:7b:1c:bb:0b:51:a3:53:86:f6:
                    7c:c9:54:0f:f0:a3:1e:f6:74:29:c6:82:2a:22:67:
                    39:5c:d5:70:33:78:c6:3c:ab:20:00:d4:59:72:8c:
                    ac:2e:f8:48:6e:73:39:17:84:31:14:5b:5b:49:7b:
                    ea:77:66:37:fc:71:fd:7e:6f:b1:b7:2a:17:73:54:
                    5e:01:a9:ce:93:ff:32:e7:3a:27:18:df:e7:7a:b2:
                    66:d7:b8:1c:0f:b0:7f:12:34:5e:1a:57:58:43:52:
                    40:be:cf:fb:bf:9b:62:25:ee:a3:67:69:11:0a:2f:
                    ab:5c:16:23:dc:05:7f:3d:db:7c:ef:c6:2b:42:d2:
                    2c:98:43:a4:3a:87:8e:c5:cd:90:a4:c4:75:6f:db:
                    c9:4e:54:44:ef:43:b7:ef:d3:5f:fa:8a:02:8b:5f:
                    ae:c2:64:52:7c:04:bf:15:37:1a:c7:d1:14:a8:57:
                    7a:9a:5f:12:1c:f0:b9:b7:4d:1c:0b:af:4a:e2:88:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:30:95:46:B0:B9:9A:B3:E1:AE:61:5B:ED:9A:9B:C2:24:5B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13d6443d-a92a-3906-ab26-6557ebc6664b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:77:67:54:c1:27:d4:d8:1f:df:64:94:ae:c1:e1:2b:68:1d:
         cd:a6:df:64:76:5b:b3:23:0c:50:69:b2:f3:14:fa:1b:b1:fc:
         85:8d:f1:f6:9e:8c:4e:d3:3d:2a:28:0a:71:df:79:88:16:13:
         39:bc:77:30:d5:0c:6b:5e:3a:6a:25:17:5f:02:f4:37:9b:f6:
         a5:9b:dd:c6:86:fb:2e:66:aa:5e:d6:0f:7a:06:38:43:d1:68:
         5d:48:d3:45:2a:97:c0:6c:8e:ad:e3:a6:9f:08:49:c4:65:79:
         78:87:c7:27:ae:15:41:71:6e:35:5a:bd:8f:05:07:6f:aa:63:
         9c:35:20:18:a4:ac:ee:cf:6b:69:13:29:72:1d:2a:4f:13:be:
         84:3d:97:7b:60:db:b1:78:4e:28:02:d0:ed:04:d1:d3:0f:a2:
         f5:ef:5f:ea:4f:4b:34:be:a0:07:d3:41:08:99:fa:23:1b:38:
         5e:f8:54:d0:0f:d0:9f:75:fe:33:de:c2:2d:ed:3a:1a:b7:50:
         d3:51:ed:17:16:cd:a8:80:7c:7e:ef:70:8d:2f:80:58:a4:c5:
         31:b2:dd:d4:1c:88:11:de:f0:44:ef:9c:6e:f6:47:92:28:79:
         7f:43:75:12:1a:6e:ca:77:fe:88:d2:49:c5:69:9b:60:ca:82:
         69:ae:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:15:05 2025 by rpki-client