Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/65dc913d-9cb8-3ae8-bf68-0fbb75ce5732.roa
File:                     65dc913d-9cb8-3ae8-bf68-0fbb75ce5732.roa (raw, json)
Hash identifier:          /Y8vreIQTSLhGU1U/yGlKdmcd0tYSffMbWLzdXNArGU=
Subject key identifier:   08:92:E7:C0:28:C8:31:3F:22:47:38:F7:FC:8D:A1:47:6F:52:C7:C6
Certificate issuer:       /CN=8448b0e7-d816-443e-9510-2163b5615252
Certificate serial:       010D0C9F4328584A00DAC19ABCAA4EEE460FBC00
Authority key identifier: 0F:A2:27:0D:53:35:01:2A:97:72:B5:0F:C3:60:09:26:68:1D:11:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/65dc913d-9cb8-3ae8-bf68-0fbb75ce5732.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     376
IP address blocks:        205.151.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/8448b0e7-d816-443e-9510-2163b5615252.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/8448b0e7-d816-443e-9510-2163b5615252.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c1:9a:bc:aa:4e:ee:46:0f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8448b0e7-d816-443e-9510-2163b5615252
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7b0dac96-2c98-4d88-a9fe-b2541fc3dd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d8:d5:12:88:c0:7b:86:8d:43:d9:ab:fa:19:
                    3b:00:93:d7:8e:7c:52:72:1e:b2:cb:bb:c8:9c:32:
                    e2:2f:ac:58:92:18:37:76:30:7a:98:23:26:80:21:
                    b5:0c:89:43:a7:ea:1b:8b:9e:d2:0e:66:87:3d:24:
                    77:41:f9:59:52:d2:26:f4:d4:dc:1f:be:fa:40:07:
                    7d:05:cd:a2:93:2b:cb:f6:40:0e:51:8d:78:93:95:
                    bb:8b:10:f8:7f:5c:2e:f1:59:68:fe:2f:c6:6f:d7:
                    e9:38:dd:10:a0:71:0f:d6:74:9e:45:66:cf:e1:91:
                    7a:e0:8f:41:d4:f6:e5:2e:f9:25:59:05:c4:77:70:
                    29:72:e3:fd:a1:91:90:be:1b:02:6e:45:28:10:f1:
                    74:2a:7a:f6:a0:dd:d5:e1:ef:1b:6c:d3:b9:04:02:
                    86:d5:3b:48:e3:18:a0:f7:27:41:fe:96:69:ef:e3:
                    78:c8:1f:24:fe:e0:99:6f:ce:3b:40:7d:a2:31:20:
                    16:bc:97:d4:01:30:82:9b:da:92:75:31:b0:3e:58:
                    12:72:d1:9b:de:98:fc:83:f7:e6:01:be:1b:01:7a:
                    aa:9f:53:80:cf:ac:1a:98:ad:58:ce:5e:f1:cc:b7:
                    72:de:9a:fb:ef:73:3e:c2:11:f2:9d:61:9e:13:33:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:E7:C0:28:C8:31:3F:22:47:38:F7:FC:8D:A1:47:6F:52:C7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/65dc913d-9cb8-3ae8-bf68-0fbb75ce5732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252/8448b0e7-d816-443e-9510-2163b5615252.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A2:27:0D:53:35:01:2A:97:72:B5:0F:C3:60:09:26:68:1D:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8448b0e7-d816-443e-9510-2163b5615252.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f1:e9:aa:72:ab:26:45:95:9d:08:a1:d2:d3:a0:98:00:77:
         68:2c:f7:05:c6:9f:0d:48:c4:52:0e:27:e5:53:d0:fd:f0:b3:
         12:6e:68:a0:e7:44:2f:e2:c2:a4:2b:c5:f9:cd:a9:8e:05:3d:
         4c:51:55:5e:d2:92:c8:e5:53:04:48:d9:78:82:2f:9a:be:42:
         85:f9:20:c7:2d:e6:4d:ce:b3:98:7c:93:4a:ee:b5:c7:1d:c7:
         e4:7a:b9:56:77:f1:7a:ae:49:6a:2b:79:25:0f:5b:bd:ea:69:
         6c:b1:f2:19:c4:43:35:0d:82:77:a3:3b:09:f9:78:c4:a0:5e:
         0e:0c:01:32:04:0d:b3:0f:4d:d7:84:06:46:36:56:d2:25:28:
         31:e0:3e:e3:29:f7:5e:24:80:d7:76:c3:94:dc:1e:cc:b0:dc:
         c4:52:39:f5:0a:09:44:a6:55:1f:5f:02:66:cc:ef:41:ae:83:
         9e:ec:14:73:46:81:a1:45:5c:3a:f0:4d:53:01:ff:a6:b9:4a:
         1f:18:bb:ca:3c:09:9b:d7:df:92:37:3e:d8:57:bf:f9:6c:ce:
         58:a0:29:15:bd:03:89:c5:d1:f6:cb:e9:e2:2d:67:69:e5:4a:
         9d:25:f0:d1:83:0f:5f:6f:e8:89:4c:ba:cb:3a:20:ce:39:39:
         b1:5c:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:46:17 2025 by rpki-client