Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
File:                     d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json)
Hash identifier:          J+ywiDUQct72wsEr9Vz/KEFnhxZFSSddTnfofpiFkcU=
Subject key identifier:   69:BF:CD:AA:88:0D:F4:D2:F4:CB:67:3E:AD:3D:14:E0:05:EC:BA:70
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A0C055705CA6F0711CC074600
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397373
IP address blocks:        192.158.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:57:05:ca:6f:07:11:cc:07:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4638b735-524c-4ed2-aca3-d5b95051d208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:0f:0e:04:e2:4a:45:fe:84:9d:f3:83:c1:
                    19:69:1d:7a:62:a0:b9:26:b5:54:d7:84:6e:68:1b:
                    26:62:4d:3f:16:7b:91:8c:7d:67:73:67:3e:18:dd:
                    85:fe:c5:48:4b:2d:05:11:28:f3:04:18:ce:55:89:
                    82:d0:a6:b0:f1:d8:6a:21:b7:df:8e:40:d0:80:41:
                    23:d0:4e:59:fd:cb:18:72:6c:7d:b8:28:a4:ac:40:
                    c8:11:f9:29:96:cd:c6:4e:49:64:dd:7f:2d:35:71:
                    d0:ef:55:1b:47:e1:7d:ab:85:e9:81:1b:0d:2c:75:
                    91:3e:d9:ba:10:e4:7b:51:23:f6:16:f6:63:be:1f:
                    bd:97:c1:56:0b:d1:c9:a7:0d:9c:e0:30:a3:39:bd:
                    48:f8:c1:3e:6d:20:d4:c1:7b:f9:ea:27:4e:ad:08:
                    62:34:21:61:5f:51:35:b0:ae:60:d9:a2:ed:38:e3:
                    c6:17:5f:39:b8:89:0b:e4:e5:2e:49:c8:0b:ae:53:
                    6b:da:1e:56:c2:ef:96:f0:89:51:dc:ac:f9:f5:75:
                    20:d3:9e:9a:be:76:b5:d3:be:36:fb:c9:13:ca:0e:
                    98:e7:59:e3:64:ee:a3:f0:a4:4a:bc:60:96:f1:13:
                    92:3d:70:94:10:99:f7:90:cd:30:4f:1b:96:31:8e:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BF:CD:AA:88:0D:F4:D2:F4:CB:67:3E:AD:3D:14:E0:05:EC:BA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:d2:6c:f3:cc:e0:53:e7:6f:9d:c7:4c:d6:09:b1:77:2c:
         d2:bb:d3:cd:80:3d:a3:d3:41:86:5a:e0:ad:34:46:5e:29:9c:
         66:66:41:59:8d:d5:1c:24:06:f0:43:58:5a:e6:8a:a1:87:ae:
         62:80:c0:99:62:03:cf:a4:bd:4b:c1:34:e2:55:9e:a6:d5:bc:
         db:d8:ca:ba:3c:f6:83:29:b9:58:45:ce:59:7e:ad:a0:93:01:
         f9:f0:f7:f4:cd:da:7f:58:d9:ae:b9:d7:19:0b:d1:ba:4b:77:
         e5:4a:2b:41:e4:17:25:43:3b:bd:ae:cf:50:2c:62:b1:53:ca:
         90:e2:17:59:2f:92:57:b2:b8:66:7c:d0:b0:c8:4b:29:ae:16:
         87:69:d1:67:e6:12:28:1a:94:4b:91:c1:fe:d1:82:61:72:19:
         8f:a7:d1:ce:8c:71:c3:6c:d8:f3:8a:a5:ce:dc:71:8f:45:94:
         52:51:aa:86:da:87:5d:b9:8e:e4:af:9e:3a:83:4d:c3:2b:b4:
         1f:dd:4c:02:b9:90:72:be:cf:8f:d0:e7:39:02:82:d1:a7:c7:
         ff:3c:1f:28:88:5f:27:fc:96:f7:d0:6f:2c:0d:7b:0a:6b:99:
         2c:6a:67:bc:5d:2d:48:31:28:cc:15:9e:b0:3e:f8:e2:69:49:
         f8:ec:66:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:13:00 2025 by rpki-client