Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/54d63a16-82cf-382c-bc49-5e9ba0a539fe.roa
File:                     54d63a16-82cf-382c-bc49-5e9ba0a539fe.roa (raw, json)
Hash identifier:          gtC1bDrjptPHvmUjDb8ZkK1wT9ASAxHScxkk2hwPl5Q=
Subject key identifier:   8B:08:3B:F4:0C:3B:C4:71:3C:C6:FF:21:DC:6F:CA:AD:43:EF:1B:2D
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F43285849A5A0AB25D32F96B313918480
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/54d63a16-82cf-382c-bc49-5e9ba0a539fe.roa
Signing time:             Fri 25 Apr 2025 20:45:56 +0000
ROA not before:           Fri 25 Apr 2025 20:45:56 +0000
ROA not after:            Thu 24 Jul 2025 20:45:56 +0000
asID:                     8070
IP address blocks:        152.228.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a5:a0:ab:25:d3:2f:96:b3:13:91:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Apr 25 20:45:56 2025 GMT
            Not After : Jul 24 20:45:56 2025 GMT
        Subject: CN=1ee90faa-2e6b-442b-9ce4-657047418fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:e3:00:0a:cb:17:48:09:8e:37:08:e3:e0:
                    9f:d8:e5:f3:bc:9f:1e:ca:22:c4:ea:88:ad:f5:43:
                    24:0d:26:02:ff:04:3b:a5:2a:fa:d8:62:01:95:63:
                    7d:21:cc:4e:a0:4e:92:21:24:27:e4:0b:dd:bf:d0:
                    0d:dc:58:ae:b0:02:fd:1d:60:fa:f3:4a:19:f9:2a:
                    d3:99:6d:c9:bc:54:f5:2d:f6:32:76:c5:3a:a0:7f:
                    65:79:d8:e6:c2:30:08:35:93:0f:ef:bb:56:d3:c9:
                    14:c4:25:70:c5:f8:a2:30:4c:3d:13:76:94:81:75:
                    b1:f9:23:e8:e6:5b:ea:66:cd:0a:5e:95:05:41:c3:
                    0d:3c:71:ec:15:d7:6a:65:a9:35:b6:c3:45:7b:ed:
                    9e:0e:70:a8:aa:9d:62:e0:7f:aa:e0:12:43:d1:9c:
                    fd:30:8f:fd:6f:f0:28:b2:4c:9d:91:6b:b1:53:39:
                    2f:e3:91:24:9d:2c:b3:2d:09:32:e1:d9:f7:7e:96:
                    5e:ac:b0:d3:5d:fd:bf:3e:f3:28:cd:30:39:31:b0:
                    54:fd:2d:ff:5f:cc:9a:e2:3f:ea:30:6f:ed:3e:34:
                    20:2e:6f:14:66:7c:c7:d8:e8:81:9b:81:b6:8e:29:
                    92:ea:1a:fa:0a:a2:b4:76:8a:e4:cd:97:61:16:ef:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:08:3B:F4:0C:3B:C4:71:3C:C6:FF:21:DC:6F:CA:AD:43:EF:1B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/54d63a16-82cf-382c-bc49-5e9ba0a539fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.228.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:b5:97:5e:86:2c:fe:38:c0:d7:22:a5:f3:ee:85:d3:60:
         c2:32:43:65:aa:3c:6f:2e:74:61:0a:2a:e4:71:94:8d:99:a7:
         30:4f:37:8a:53:22:1a:0f:1c:50:92:83:e0:30:59:9a:17:84:
         61:e1:a0:e3:33:0b:77:3f:29:45:cb:1c:6a:e6:45:c5:7a:81:
         05:66:fe:9b:45:8f:86:82:bb:8d:d9:45:4e:81:33:a4:e8:8f:
         66:33:f4:24:c5:24:c5:0e:c2:56:bb:3d:88:54:9c:3d:b0:d2:
         6c:43:42:ce:50:de:c5:bd:93:a9:bc:be:25:9b:74:a2:93:a4:
         24:c4:a0:e1:11:95:9f:31:b1:e0:da:3b:34:09:cb:e0:51:81:
         11:4d:87:d2:7f:d5:6e:71:8f:4b:36:12:26:30:25:3b:0e:4f:
         be:37:44:94:da:3a:57:99:16:fc:4d:ea:35:24:e5:0f:94:db:
         ad:58:1c:25:c4:fd:ae:97:6a:9b:f1:8c:86:44:35:64:43:84:
         6a:60:28:2e:f8:79:a7:03:8e:d1:8e:29:dd:d4:46:d4:9d:f6:
         be:cd:8d:f0:56:5d:fa:89:51:45:89:ba:57:a4:6d:3f:13:08:
         95:5f:dc:8a:b8:47:69:40:f9:5b:66:d1:0c:27:bf:14:76:17:
         b3:54:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:33:42 2025 by rpki-client