Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c0376940-5329-31fa-9ec9-49c095e74818.roa
File:                     c0376940-5329-31fa-9ec9-49c095e74818.roa (raw, json)
Hash identifier:          fOahtluljPrjkVxMhwp7vEDSUIq3voYmP9U95IiWBsU=
Subject key identifier:   0D:6E:CD:1E:BE:2C:9E:1C:EE:19:FF:05:24:7B:6F:55:B8:6A:3E:C7
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285849B149ED31D8431D5B95CF79A0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c0376940-5329-31fa-9ec9-49c095e74818.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396253
IP address blocks:        149.19.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ed:31:d8:43:1d:5b:95:cf:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=12c90fc7-6bac-4f55-9c03-8e26db1fa548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:3c:d8:18:25:98:49:d1:ba:80:6b:3e:4d:
                    fd:ab:42:73:c7:c9:7b:5a:fe:f9:34:35:4b:a5:3e:
                    a8:69:9c:5d:fd:72:8e:07:33:01:5d:d9:f7:60:ea:
                    bf:23:c9:ae:75:24:d2:60:8f:3d:4b:9d:cb:fe:0b:
                    05:a9:a9:a3:d6:3d:72:af:e5:59:eb:ac:bc:75:91:
                    91:82:9a:d9:16:ce:eb:e4:f0:91:c1:a5:92:33:9f:
                    8e:e4:e9:16:6b:2d:07:8e:18:88:89:e9:8e:f9:c5:
                    6c:a7:eb:93:5e:7a:26:09:c3:e4:66:14:ed:ed:a0:
                    ef:45:29:15:7b:b8:03:77:e1:bd:ac:2c:88:49:d7:
                    22:c1:ce:2d:89:cc:d7:9f:c7:a3:bb:5f:3c:e5:34:
                    70:44:41:f6:b8:cd:c3:af:37:4f:69:d9:85:13:bb:
                    fd:33:34:3f:6d:13:cb:34:59:17:41:ea:ba:b8:01:
                    41:4c:3f:ee:48:62:6b:d9:a4:0d:4c:0d:df:55:2f:
                    39:d0:98:2d:90:99:29:9f:4c:7d:47:e1:2c:73:2c:
                    90:84:6e:a9:f1:16:e6:c5:50:f8:4b:1e:0a:fc:67:
                    78:5b:75:4f:75:d2:64:7e:91:ba:3c:74:c9:d4:3b:
                    74:e4:0d:96:84:1c:33:66:fa:53:20:a9:3b:ad:f5:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:CD:1E:BE:2C:9E:1C:EE:19:FF:05:24:7B:6F:55:B8:6A:3E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c0376940-5329-31fa-9ec9-49c095e74818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:11:34:ad:b7:7a:a9:0c:6e:72:50:70:08:ea:54:50:39:
         f6:85:93:da:22:02:7c:fa:d4:00:56:54:4a:1a:e1:62:43:c2:
         33:86:ca:85:82:5c:f1:31:62:04:b5:3d:b0:b8:94:51:80:56:
         0e:10:b5:b5:b2:6c:ae:be:09:5a:16:5d:de:97:bf:69:d9:81:
         1c:11:dc:9f:30:ce:a0:52:14:be:a8:94:f4:3a:02:9a:01:a7:
         e6:88:da:06:5a:0d:fd:c4:5d:da:04:b9:59:4e:29:05:80:dc:
         c7:48:f8:d7:65:d3:f5:b4:0d:bf:8b:37:db:f3:a3:9c:22:d2:
         71:57:09:45:b1:e2:e5:23:b9:a4:75:eb:be:70:8e:71:d0:70:
         2e:19:73:c0:59:b4:3f:79:81:63:cf:53:b0:9b:c1:b2:5a:05:
         ae:89:81:59:40:1c:0d:6f:5d:d1:68:ba:23:6c:d1:40:38:88:
         5d:32:9d:1d:a4:64:56:74:b0:65:f1:13:28:ba:5e:12:1f:0c:
         e8:b9:23:8d:96:7f:e5:b6:5a:26:61:3a:c3:45:e1:e4:de:fc:
         c4:da:d7:01:5b:5a:7e:8a:5f:af:00:dd:fc:e3:fd:41:9d:ce:
         1d:6b:64:d5:83:c4:f3:70:9c:70:1f:92:bb:b2:df:9b:5d:03:
         3a:24:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:36 2025 by rpki-client