Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa
File:                     69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa (raw, json)
Hash identifier:          YKgiwxHTiP1fZiB0PpoEZY0hHRJXLamJUdaVkEkTSv4=
Subject key identifier:   48:BE:87:0D:1A:CB:E6:37:0B:4C:91:20:4B:A3:A7:10:90:BC:67:D3
Certificate issuer:       /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial:       010D0C9F4328584A1E2AA96A4917F3AE9651C600
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396163
IP address blocks:        149.248.72.0/22 maxlen: 24
                          205.142.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a9:6a:49:17:f3:ae:96:51:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=b7082a57-397a-4f57-b5e8-1f9a9b665fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:fb:e2:90:09:0e:1a:6a:4c:b2:03:94:0f:
                    b6:1a:1e:6a:45:64:04:47:9f:20:5c:fc:99:b1:16:
                    fb:9b:be:5d:c8:44:db:fe:30:ee:b8:7f:fa:f3:ba:
                    c0:ee:5c:88:44:f2:5d:c3:09:db:06:9d:ba:fd:7c:
                    d8:2b:13:d3:f9:4a:3e:6d:bd:6d:0a:76:75:56:3a:
                    12:45:94:26:af:4e:40:a6:b3:49:9d:47:8e:7e:f0:
                    bb:43:5c:14:3c:b2:01:a6:e6:ce:89:af:1f:ac:83:
                    04:d2:d1:b1:fd:e1:58:83:64:8d:8c:d4:f9:9d:43:
                    56:e0:c3:be:ed:11:cf:d9:a6:60:70:c4:ec:43:d8:
                    d6:39:39:64:16:4d:27:e5:33:f8:07:06:dd:84:26:
                    e9:d8:16:bd:e6:c9:16:0a:86:28:86:43:06:ee:70:
                    b5:02:db:ad:d2:07:f5:a2:97:74:2c:e7:3c:4b:7e:
                    a4:9f:54:80:31:fb:e2:32:79:85:04:6c:ab:cb:9e:
                    6c:72:0c:23:9c:c9:a0:d3:b6:a4:4d:02:3f:6e:fa:
                    d7:51:3b:ce:a6:60:7a:11:0a:26:5f:9f:c3:06:a9:
                    e6:a9:01:0b:26:8d:04:9b:31:60:07:80:ce:8e:33:
                    a6:27:3e:3f:2c:42:95:8a:d2:08:2f:9b:7d:da:06:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BE:87:0D:1A:CB:E6:37:0B:4C:91:20:4B:A3:A7:10:90:BC:67:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.72.0/22
                  205.142.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:c2:10:96:9e:47:4f:35:8f:ff:c9:a3:71:43:16:de:ae:
         5d:bc:5c:f2:c1:54:02:48:f6:91:4b:fd:b9:ee:3d:e0:1b:5c:
         b3:2b:30:58:58:14:77:82:65:75:9e:ac:e1:79:bb:61:21:15:
         8b:c3:92:99:bc:65:2e:91:4a:32:37:6a:f7:da:61:a7:de:1f:
         30:f7:9f:e6:55:36:53:c7:62:a9:0d:a0:c7:5e:92:97:16:6c:
         dc:b5:a4:fb:ff:fb:1d:e5:99:be:14:fa:e3:9b:53:c5:e3:0f:
         60:97:b5:73:e0:39:89:ba:ea:c0:60:d0:a4:42:4b:32:63:78:
         64:02:72:c1:11:82:b3:72:d2:f6:4d:5f:6c:42:5f:46:13:2e:
         43:43:35:c2:98:d4:5e:c7:14:8e:d6:c3:0a:48:06:db:ad:5a:
         31:14:0e:e6:b0:10:84:19:07:2a:5b:7e:ae:27:f4:64:d9:d0:
         38:6e:cf:95:8c:61:a1:9e:da:ba:72:1b:0b:48:08:5d:8b:b7:
         d9:46:b5:f2:f2:1d:f0:a4:31:58:e6:58:36:9b:15:9e:31:5a:
         a6:f2:95:f1:0d:23:f2:46:dd:2b:7e:bf:8d:ce:87:42:58:87:
         5e:3a:ea:88:74:76:32:5e:83:99:80:a2:72:45:44:53:9a:a1:
         92:c4:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:11:00 2025 by rpki-client