Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
File:                     dd10681c-9d05-3b70-aafb-f5510f585252.roa (raw, json)
Hash identifier:          2p0UJe0WBHCHHlrmPcXNpSwfGCjm6ranVXtNO1d7wl0=
Subject key identifier:   94:3B:53:8D:C1:61:64:54:9A:10:D2:E7:0D:D7:EE:3F:C5:BB:94:5E
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285849F87AA0292D71B594FF103600
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     54535
IP address blocks:        146.197.44.0/23 maxlen: 23
                          146.197.50.0/23 maxlen: 23
                          146.197.52.0/23 maxlen: 23
                          146.197.176.0/22 maxlen: 22
                          146.197.184.0/23 maxlen: 23
                          146.197.188.0/23 maxlen: 23
                          146.197.198.0/24 maxlen: 24
                          146.197.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:a0:29:2d:71:b5:94:ff:10:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=64a94b53-3907-401e-967e-b3ec85ffb8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:a3:bc:ec:08:a6:3b:34:ae:d3:aa:23:0c:
                    87:5d:ab:49:e6:e7:aa:64:44:58:ff:81:c6:fb:5e:
                    20:2f:85:e0:20:82:c8:e8:7e:d6:a4:df:4c:20:7d:
                    56:67:81:ac:c6:5c:27:91:cd:dc:0f:68:3e:3a:dc:
                    98:2e:8a:19:ad:fb:8b:2e:36:02:e5:09:b8:a9:3c:
                    db:38:57:0f:4a:b1:91:83:20:69:35:60:ab:12:d1:
                    21:6c:8f:d2:85:5f:67:37:89:f6:a0:bd:0b:79:0f:
                    aa:54:5d:9b:20:42:30:04:8b:11:ee:8a:67:f7:37:
                    b0:04:f5:37:3f:ea:34:29:b1:40:3d:cd:e4:28:c7:
                    29:ec:bf:dc:87:55:76:a2:04:66:09:47:c4:e5:05:
                    37:0f:0f:65:2a:0f:60:a3:6e:e1:0f:3a:54:3c:29:
                    85:3e:57:fc:0a:fc:3f:4b:cf:09:80:89:0a:81:ee:
                    db:c9:37:c0:a1:b6:6c:89:d5:a7:74:d1:69:31:b0:
                    f7:e9:67:aa:a0:44:d6:7e:7a:1c:07:b3:5a:7c:1d:
                    d3:7e:c1:a1:2d:60:b2:c3:75:89:28:a7:14:a5:7c:
                    03:74:3c:71:7c:8c:b1:bd:ac:6b:94:06:29:f1:74:
                    c9:a6:72:56:e5:7b:57:92:c2:23:cf:bf:f0:f3:f4:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3B:53:8D:C1:61:64:54:9A:10:D2:E7:0D:D7:EE:3F:C5:BB:94:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.44.0/23
                  146.197.50.0-146.197.53.255
                  146.197.176.0/22
                  146.197.184.0/23
                  146.197.188.0/23
                  146.197.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:e7:dc:c9:09:99:dd:32:93:95:14:f8:31:c5:9f:c9:0a:
         7c:ff:f5:31:2b:34:60:0a:00:d7:16:9c:5c:92:46:86:54:df:
         2d:96:79:dd:c9:dd:ea:3d:f9:b4:34:80:0b:48:a2:d1:21:c8:
         d4:41:c0:a2:21:90:68:cf:9b:8a:43:79:62:55:66:45:eb:74:
         e3:f0:c0:09:a9:54:79:33:75:73:dd:39:44:fc:c2:d9:5e:27:
         d9:1b:2a:03:28:4b:57:79:30:a9:b5:95:8e:8e:22:5c:9b:64:
         54:32:4f:ae:64:82:80:e7:71:45:c8:7e:64:1d:c1:77:8c:32:
         f4:c2:57:53:f4:80:97:04:7f:dd:83:36:d8:38:75:80:f3:e7:
         96:03:67:34:17:5f:3c:81:a6:24:f7:37:ed:9d:de:01:a1:48:
         dc:75:0a:bf:8a:be:14:1c:af:ec:8e:42:46:df:7a:8f:4e:e7:
         00:a5:07:6e:20:ca:01:18:26:af:60:49:1a:e7:aa:27:9f:9f:
         1c:62:97:ee:dc:dd:d6:04:9a:09:f8:7f:69:6e:fa:96:10:ce:
         6a:d6:64:15:49:3f:6e:63:e6:2e:33:44:f2:f4:31:f2:04:ca:
         53:a6:c2:56:e6:d4:94:82:bc:d9:5c:bc:02:87:8f:91:ae:c9:
         d0:c2:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:30 2025 by rpki-client