Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa
File:                     c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa (raw, json)
Hash identifier:          fGzxrLVOMCe3450ON2ePINkQkU5g076t2+SWgZuXi+g=
Subject key identifier:   43:2D:C3:96:90:04:52:D4:72:B3:B0:EE:1C:B7:25:AF:3A:3A:27:E6
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584A0C05633B867DFDCCEA47EFE0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        144.49.128.0/18 maxlen: 18
                          144.49.192.0/21 maxlen: 21
                          144.49.200.0/22 maxlen: 22
                          144.49.208.0/20 maxlen: 20
                          144.49.232.0/22 maxlen: 22
                          144.49.240.0/21 maxlen: 21
                          144.49.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:63:3b:86:7d:fd:cc:ea:47:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0cdb7ec5-4775-46bb-aa40-70530674c309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:50:6d:d5:2a:df:3c:81:5e:7c:e1:75:4e:
                    5b:28:36:fe:48:15:21:80:bf:de:90:1f:4b:54:da:
                    cb:50:2b:ee:e7:5a:f3:27:fb:50:26:da:7d:89:eb:
                    84:57:a5:fa:f3:d2:71:90:c6:b0:9b:52:4e:5c:80:
                    52:06:64:88:29:09:88:e1:49:03:3b:b4:7a:0a:9a:
                    c4:ba:00:38:96:67:95:da:a1:db:af:33:13:ae:b8:
                    bb:7e:6d:f5:d6:e6:6b:e6:3b:f1:e5:35:4e:bd:93:
                    a9:fc:30:2d:f6:8c:0a:ba:f3:e1:fb:c3:67:8b:a8:
                    bd:87:6f:be:94:d0:5d:db:c2:2f:6d:ff:3e:f0:c0:
                    97:24:9c:69:2b:3d:87:8e:cf:1e:ee:6b:54:4f:6f:
                    13:00:a5:1c:18:f4:87:ec:f6:95:a5:1c:5b:42:a5:
                    84:50:0e:0e:7f:43:55:b6:f4:6d:b9:51:38:9e:75:
                    f8:69:b9:6c:da:87:b8:c5:46:dd:59:3e:2c:1e:70:
                    64:0e:18:a5:ef:96:c3:b3:4e:63:09:98:08:d3:29:
                    9c:12:76:68:a4:15:9c:b5:97:6c:ff:4c:6d:28:bc:
                    19:74:50:ea:88:65:2d:5f:6b:10:ef:df:95:ee:3d:
                    8e:82:75:17:84:d9:14:55:ed:86:34:1b:d5:97:9e:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2D:C3:96:90:04:52:D4:72:B3:B0:EE:1C:B7:25:AF:3A:3A:27:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c9c5f8a3-c14a-3240-b3df-4b7e6f284ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.128.0-144.49.203.255
                  144.49.208.0/20
                  144.49.232.0/22
                  144.49.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:6d:f3:af:22:fe:7c:e9:c6:1f:e4:6b:c1:a4:d5:a4:b9:
         4f:f8:ca:f0:b7:62:49:3c:bf:7c:14:57:34:5e:8d:65:b4:29:
         2f:c8:80:41:88:4f:31:20:36:1b:1b:56:28:9a:37:f0:5f:d7:
         db:7b:71:2a:ca:97:2d:2a:8d:aa:89:f3:87:1f:56:f2:6a:15:
         e7:2e:9e:12:96:4d:d3:dc:bd:52:0f:77:72:48:de:a6:a7:80:
         c1:7b:7a:e5:31:6a:5e:5c:a6:41:5d:ff:a2:a8:95:e4:b7:a4:
         db:df:bd:6e:68:06:ce:a9:9d:fb:1b:84:5c:94:bb:2d:9a:07:
         74:27:15:3e:63:e9:e6:67:11:44:72:0a:54:9f:15:84:c3:80:
         d7:eb:5f:5c:06:a2:bc:12:c5:9e:a0:b8:65:d0:d3:dd:16:32:
         6e:97:ea:22:9f:4b:3c:76:2c:bf:22:d1:9a:df:0d:d6:7d:db:
         9a:59:3c:f9:a7:2f:c3:8e:6d:e5:79:9e:80:f3:da:82:09:b7:
         ac:a6:78:87:b3:35:10:df:1d:2d:9b:91:75:f8:aa:37:1f:d6:
         80:ac:44:79:d9:9e:fc:fb:76:a4:a0:6f:cf:7e:c9:ee:1b:4b:
         71:3f:eb:98:dc:be:de:ca:66:b8:a3:ef:f1:5e:b2:21:32:e2:
         92:57:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:10 2025 by rpki-client