Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa
File:                     24799af8-2422-32ad-a2ff-c748c7beb85d.roa (raw, json)
Hash identifier:          DQ3HzqCBAVRGB4N+j5a5VAVuSbfTO5un2zC+nsWvHBM=
Subject key identifier:   D3:9E:F3:0E:7A:9E:E3:96:BE:1C:C6:70:9F:3C:7B:4E:37:85:8C:56
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584A140072E2CDC9B1F0018CCB00
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa
Signing time:             Wed 04 Jun 2025 09:37:50 +0000
ROA not before:           Wed 04 Jun 2025 09:37:50 +0000
ROA not after:            Tue 02 Sep 2025 09:37:50 +0000
asID:                     393545
IP address blocks:        65.49.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:00:72:e2:cd:c9:b1:f0:01:8c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Jun  4 09:37:50 2025 GMT
            Not After : Sep  2 09:37:50 2025 GMT
        Subject: CN=db94aac1-0a16-4498-81e4-ee5f87ab9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:65:4b:54:24:0a:f9:36:31:5e:f7:e7:15:
                    da:6d:34:fc:04:ae:a3:2b:9c:3c:b9:9f:58:34:8a:
                    c6:fb:08:ee:83:57:ac:4c:6b:84:38:fb:72:ce:2f:
                    54:fe:b7:e0:7c:49:4c:b8:76:74:93:d0:b2:64:14:
                    8b:19:da:f3:7c:fc:0f:78:73:92:49:63:76:83:d6:
                    80:c2:ec:38:3e:44:32:77:c8:42:90:94:7d:34:a9:
                    f6:e9:e8:6e:f3:35:9c:ec:75:ba:34:13:7f:ce:83:
                    e8:a2:fa:98:3b:6b:19:6d:0f:e3:7f:cd:52:d0:a6:
                    b6:99:ea:96:f4:5f:0a:f8:23:4b:f8:a5:4c:ac:37:
                    31:d2:bd:63:2d:f5:87:13:85:96:b4:2e:aa:33:b1:
                    88:e6:bb:35:10:48:27:20:74:4c:1e:0b:a8:39:cb:
                    c9:e6:dd:ad:a2:e6:c1:95:57:f8:4b:00:ac:90:92:
                    09:88:a2:9c:92:07:1b:fa:70:5a:b6:a9:33:7a:f6:
                    64:dd:1b:da:5a:8d:9c:73:f2:a2:e6:87:0d:1b:4e:
                    f9:b2:a9:ba:43:27:3a:7e:e2:60:cf:d3:89:8f:3e:
                    3c:24:44:fb:65:af:ba:55:b1:58:f8:13:a3:d0:43:
                    50:b4:59:04:aa:c8:e5:79:90:62:4d:17:c0:c7:b8:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:F3:0E:7A:9E:E3:96:BE:1C:C6:70:9F:3C:7B:4E:37:85:8C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/24799af8-2422-32ad-a2ff-c748c7beb85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:90:21:49:bf:9d:ab:c8:4b:f5:60:d5:4c:27:42:4c:d3:57:
         16:1a:25:a7:15:0f:a7:0d:78:16:3b:f7:0a:15:38:3b:c6:04:
         0d:20:42:00:73:48:2a:bf:ae:a4:c2:80:24:9d:b2:dd:f2:78:
         32:d7:2c:65:e3:a9:ff:c4:0a:c5:cb:3c:c2:e7:3e:ca:61:1f:
         4a:90:c4:cd:40:d9:89:31:6a:2d:07:4f:ce:99:af:77:d6:6c:
         28:73:a8:f0:78:8d:dc:14:2e:2e:dc:dc:62:53:26:59:8e:25:
         f1:ff:17:e4:fe:ed:c7:40:b4:3c:63:e6:6e:cf:7d:46:72:2c:
         74:60:36:b7:6b:ec:b7:b8:e9:3f:0a:8d:c0:b8:a6:ff:57:81:
         58:1d:c2:8e:47:d0:e2:85:c0:d5:fe:de:c2:66:f0:74:5b:cc:
         de:1b:2c:ba:3d:6a:67:f3:d3:22:74:c9:0c:d4:79:e0:fe:fe:
         86:32:b9:c9:f8:9b:9c:89:eb:fb:18:a1:36:b8:a1:54:e9:be:
         d6:5a:78:12:11:18:06:5a:4b:07:f1:31:69:09:d7:19:3b:81:
         3e:4e:e3:d8:0a:ca:02:1c:53:93:c5:86:3d:70:c6:68:80:9a:
         32:ff:39:bd:ea:f0:b7:71:1a:1d:9e:aa:cf:97:ab:aa:8e:a7:
         e5:a4:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:19 2025 by rpki-client