Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa
File:                     745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa (raw, json)
Hash identifier:          +4gCsFEb0dsGdr25fec0mllngjvoSwUelI/aa3SKEKE=
Subject key identifier:   CB:1B:A9:C4:AB:A2:0E:03:DA:25:C3:C3:19:E8:A8:A7:5A:4B:5B:6C
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584A29555B9C80903004B7063800
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     399836
IP address blocks:        65.183.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5b:9c:80:90:30:04:b7:06:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=8ea6f0ce-9e94-4614-9d02-511a662f9284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:04:51:e9:96:a3:42:99:84:0e:23:8f:8a:
                    75:d3:09:dc:47:b8:ce:32:06:91:e7:ff:00:1b:de:
                    34:d9:53:78:39:15:1f:7b:e7:01:4b:f4:a6:c5:55:
                    2c:a3:bc:d8:6a:e5:0a:f5:db:9a:8d:09:f3:fc:b5:
                    56:92:5a:ed:85:a6:6b:3c:8c:52:64:a1:2e:6b:cd:
                    25:0c:fa:fd:a8:93:c8:29:a1:ca:1b:1f:a9:5f:a9:
                    3b:3d:54:93:f7:3a:4e:4d:5a:6b:0f:d4:ae:d6:1e:
                    22:53:10:57:8c:dd:04:fb:dc:53:62:45:7f:c0:0a:
                    03:52:3f:6e:de:92:7a:c7:f1:71:71:67:c4:44:e5:
                    09:18:95:54:6d:fc:78:66:91:c4:20:88:71:92:bd:
                    19:e4:dd:ea:dd:92:24:dc:9b:48:1d:80:c0:fb:7c:
                    0d:69:19:61:4b:dc:87:c9:45:ce:ce:f3:35:53:73:
                    de:34:ad:45:66:3c:2c:66:b3:1a:93:a0:79:6f:42:
                    65:0d:d9:e3:50:43:ed:7b:9b:d6:c9:50:bb:21:f2:
                    94:c4:4a:6b:37:07:be:90:d6:a4:34:a3:50:b0:34:
                    68:34:ad:0c:03:15:f9:c9:3a:6c:6d:ba:dd:68:be:
                    c1:b7:27:31:08:07:e2:45:92:a4:e5:f8:06:4d:5e:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:A9:C4:AB:A2:0E:03:DA:25:C3:C3:19:E8:A8:A7:5A:4B:5B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:86:a4:d8:bd:1f:b4:95:83:d8:55:32:8a:cf:8a:11:e3:
         2c:36:47:3a:77:bf:8c:51:f4:07:6d:7e:9b:f0:94:1e:8d:1c:
         53:95:52:54:53:09:9d:61:c3:df:d6:03:1a:5a:e1:62:7f:35:
         cb:15:06:06:92:ce:e7:24:e7:29:2c:65:65:e5:ac:29:02:a9:
         d4:61:97:b1:72:d8:47:27:c8:d6:0c:f0:e4:90:c1:25:fa:a8:
         5a:29:43:56:08:f4:60:4b:a7:d0:12:44:76:86:5f:56:89:08:
         f4:4a:82:84:60:1a:b2:2b:aa:2e:ab:2d:a9:c2:7f:fc:64:a9:
         fd:59:a7:79:df:bb:5a:9e:03:20:7f:82:63:e3:b8:4a:b9:ed:
         73:5b:8b:93:94:49:30:af:76:c5:10:81:50:10:a0:6f:6e:a5:
         b4:34:e5:27:98:9b:40:42:a6:46:92:12:16:31:67:c4:63:2b:
         30:dd:af:78:ac:47:98:e4:89:65:b6:8c:a6:72:ca:ea:65:8b:
         c5:17:30:b9:a3:37:ff:4d:25:0d:68:98:aa:8a:49:f7:1e:39:
         79:2b:99:13:ae:49:16:6b:03:c7:e5:d4:0e:7a:e5:e5:aa:98:
         92:9a:89:7d:d7:49:b6:cb:24:dd:39:f5:e6:b2:70:5c:88:b4:
         7f:e0:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:41:22 2025 by rpki-client