Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa
File:                     4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa (raw, json)
Hash identifier:          Uyr283NaUhaySbFoufrYdaopFt7Uomj2xyVOjpXinbQ=
Subject key identifier:   39:2B:FE:58:D1:92:2E:76:76:CA:AD:63:64:2B:78:B6:58:30:F5:95
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F43285849CE9A5B1DC6624E64A0BE7900
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     19471
IP address blocks:        198.245.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5b:1d:c6:62:4e:64:a0:be:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=45a545f1-4179-43ba-a1a4-6db21c109466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:53:97:2e:48:31:78:5e:0c:04:04:a7:b9:
                    77:3d:53:90:18:e6:34:fa:91:21:60:6d:2a:12:f7:
                    e4:0b:8b:b6:69:10:f0:97:94:01:1b:c5:ba:30:8f:
                    80:46:bd:65:09:57:e4:f0:4d:66:d4:1e:56:10:4c:
                    6a:3d:ac:27:c4:3c:d6:9a:3f:30:36:a2:ee:e6:9b:
                    f1:7c:04:ff:9c:a9:d0:c9:d5:b3:43:d3:11:99:dd:
                    17:78:74:39:d1:48:68:6e:66:81:e8:31:8f:6e:27:
                    b1:ba:bd:a7:4c:1b:5d:79:a4:f2:17:0f:cc:85:3c:
                    bb:f5:0c:e5:72:f3:d4:2d:2c:2f:15:a3:d1:fa:5c:
                    93:01:7b:71:44:93:c4:a6:81:97:e7:d0:23:22:0e:
                    6b:09:0f:4b:a8:df:30:17:ab:e0:35:7e:88:91:87:
                    2a:46:77:28:fc:68:0b:b9:76:fd:f4:e0:88:5e:3d:
                    f5:6a:bb:05:31:2a:cb:81:0a:03:f3:5a:3e:7e:c8:
                    ce:8c:f1:2f:10:31:13:64:fe:c0:17:72:65:52:78:
                    70:7c:4c:0b:f8:12:31:56:ca:de:11:b8:ac:5e:18:
                    8f:ee:d0:ed:f6:6f:e1:fa:51:2f:f7:bb:48:11:b2:
                    1e:30:42:77:77:4b:35:71:b8:08:d0:b0:0f:2b:03:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:FE:58:D1:92:2E:76:76:CA:AD:63:64:2B:78:B6:58:30:F5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4d487042-1d6d-3aa2-8a25-6d796130b8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:92:c7:59:28:a2:12:3c:24:ad:1d:9b:03:ab:ac:12:fd:
         91:44:26:db:8d:b3:a0:81:a8:ad:c8:bf:68:95:bc:cf:8a:98:
         13:96:d1:bc:0e:c8:e0:c7:b5:f3:c8:23:b5:65:e8:e0:ce:56:
         4f:ec:c3:7f:ce:7b:e1:7f:aa:a2:0d:71:09:da:1b:e6:e0:8a:
         f8:a2:7d:98:01:f2:43:34:27:01:75:28:e0:e0:7a:ac:8f:cc:
         4f:90:96:86:27:6c:0c:40:3a:30:54:78:6a:fe:ab:76:65:13:
         6c:fe:9e:bb:22:dd:10:a7:b5:82:47:c6:23:fb:a0:d5:d4:c9:
         b8:3a:51:ce:24:9e:0a:86:9c:b3:34:02:d7:47:4a:55:d3:9a:
         24:a4:47:77:cb:7f:d4:2c:13:f2:c4:34:09:b4:6f:f0:52:52:
         f9:b9:40:02:65:74:46:20:4e:71:b0:ea:b3:31:f2:0a:04:93:
         d9:4a:e0:d0:6b:43:a6:d2:52:a8:92:3d:9f:a7:a4:37:f2:f4:
         42:03:66:c2:e4:46:51:32:b7:f7:a5:97:0e:dd:2a:15:a0:80:
         0b:fb:8a:e1:5e:a1:7d:ef:bf:fd:6f:10:8f:57:f5:81:dd:f5:
         d5:cf:00:18:6c:59:c4:3a:ae:77:bb:dd:53:a3:07:10:79:66:
         7f:bd:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:24:58 2025 by rpki-client