Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa
File:                     48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa (raw, json)
Hash identifier:          Zz+PrzO/DRSgoMLvjZbn5/QWM+4t1bkJhimMe/yV6bk=
Subject key identifier:   E1:98:71:F0:F6:1F:E6:49:A0:FB:AC:F1:3D:7D:9C:0C:C8:30:EC:AE
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F43285849F7151BEB5B3949B35B724A20
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     16276
IP address blocks:        142.44.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1b:eb:5b:39:49:b3:5b:72:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=e5fc9473-508e-41f2-a50d-a60efe54efae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:85:ae:33:12:e0:14:8e:42:ed:04:b3:aa:
                    8a:d8:de:67:ab:6d:7b:59:66:6a:6f:a0:3f:43:11:
                    27:5d:0e:14:9c:8c:c4:c8:49:d3:4f:8e:9a:07:b6:
                    80:33:40:b0:5c:bf:2a:fa:df:0b:c1:3e:37:28:2b:
                    7a:7b:57:61:69:2a:a2:f0:ee:e7:70:04:91:86:d5:
                    61:a3:15:bb:3f:c0:9e:1c:a8:34:d1:2f:10:be:d9:
                    ba:9c:70:48:ea:a5:97:27:3a:5f:6d:02:9a:8e:97:
                    09:d4:f3:9e:35:6c:5f:ea:80:bf:34:e6:60:0c:1f:
                    bc:e9:31:77:5d:68:2f:da:5c:1d:61:82:f1:b3:bf:
                    5d:4e:c8:a3:05:1f:1c:66:08:98:ba:0d:16:ca:80:
                    15:80:57:cb:e0:d6:3b:4d:44:05:74:06:7a:95:28:
                    ba:3a:c6:43:3a:10:d8:6d:78:ae:ba:f9:e9:3e:22:
                    91:a9:66:d8:ee:76:cc:ff:9d:61:d1:de:43:6c:42:
                    ae:04:97:23:47:bc:18:5e:bb:ea:2c:46:05:8c:7a:
                    24:73:61:b1:ce:a3:db:f3:98:79:ec:6f:cd:03:f4:
                    60:43:a8:2e:62:53:91:90:5e:44:5b:7a:bf:25:30:
                    91:ab:3c:5c:21:6d:dc:9d:9c:82:1f:6a:4c:c2:b1:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:71:F0:F6:1F:E6:49:A0:FB:AC:F1:3D:7D:9C:0C:C8:30:EC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/48ab88d6-9ea9-3f7f-b13c-645b825e0298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.44.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:08:9b:b5:05:39:36:27:9b:b9:2f:5f:66:9b:1b:24:25:
         39:86:86:c5:ed:2f:a2:76:e9:18:25:ec:2d:28:c2:79:a5:f3:
         d9:c2:bb:60:24:cf:3b:66:16:50:21:c6:48:41:9e:05:25:a7:
         70:49:e6:cc:0c:4d:5a:e9:c7:27:a9:10:35:f4:c3:5c:33:59:
         71:57:89:48:d7:7b:ed:f3:1f:67:cd:d8:31:9e:c3:f5:71:2b:
         91:5f:cc:98:7d:2f:d1:fa:9b:8e:4f:74:1c:ac:69:c5:6b:d0:
         7c:14:ea:20:2c:2f:01:bf:a8:a2:14:14:b4:11:2c:0c:e7:dd:
         c6:1c:26:b9:ad:6a:d4:fe:79:0b:29:f5:5b:17:55:0b:e0:52:
         62:1e:44:ec:e5:dd:3f:fc:4b:5a:41:e0:fc:86:eb:4c:0b:69:
         e4:0b:d0:74:52:25:42:05:0d:6c:56:b7:c9:ba:b9:6b:2d:d9:
         68:da:d2:39:bf:db:88:3b:59:41:e3:cc:6d:f3:49:f0:6d:94:
         c9:f7:88:7c:37:47:a0:6b:2e:2e:27:90:5e:62:9c:b5:a4:ad:
         14:f2:01:d6:c7:b4:4f:e4:61:bc:38:51:0c:a0:de:a0:c1:f4:
         ae:9e:b4:78:66:89:5b:4c:93:82:b3:5c:7b:07:9d:69:e5:7e:
         a1:a4:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:40 2025 by rpki-client