Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa
File:                     30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa (raw, json)
Hash identifier:          e64HKKa5aftoYH6/ixGmQNOMyPLfMu99G+doSX20P7I=
Subject key identifier:   4D:E3:50:AD:38:23:02:0D:F1:00:40:B7:47:F7:4D:10:1C:C3:A5:DB
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A43DAFEC56AA11FB565484A80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     5769
IP address blocks:        24.48.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fe:c5:6a:a1:1f:b5:65:48:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=43e1e0be-dba4-4ae1-bf53-773bd0c9521b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:73:c0:81:a4:1d:28:e4:a7:8e:0a:7a:d7:
                    c5:8a:cf:43:9d:f3:44:88:09:78:12:f7:ba:8a:0e:
                    1d:40:8b:f1:8c:a9:fb:b7:32:86:99:f6:a2:07:9f:
                    11:b5:b8:d0:4f:f1:47:ed:96:24:c1:cb:8b:5d:c5:
                    70:ed:9b:10:7b:57:16:f7:fa:99:93:69:21:d7:2b:
                    bb:f0:8f:e3:44:a5:00:3b:00:29:63:1f:ae:98:5a:
                    a2:3c:f3:54:c9:3a:e2:ba:5d:32:ea:5e:6c:29:cd:
                    1a:df:31:c5:b2:71:49:bf:22:a5:af:92:31:df:5c:
                    6b:0d:5d:a1:a3:54:16:15:24:47:15:ea:cc:e2:7f:
                    6b:36:e8:f0:82:4e:6c:d9:53:57:7e:81:3e:47:a2:
                    4f:63:14:c1:15:ad:0e:a3:ec:92:90:fa:6d:f5:89:
                    ef:bc:10:d8:af:23:b4:cd:ca:e9:76:e3:5c:69:de:
                    f4:1e:dd:75:82:c0:d5:fc:c3:29:eb:44:5a:66:1c:
                    4b:55:0a:c4:06:39:b0:eb:cc:be:e9:d8:dd:42:cd:
                    53:c7:57:c1:97:7c:be:46:52:74:6e:3a:31:de:e2:
                    5e:e2:92:9c:b2:6f:40:81:f9:80:6e:12:3a:95:4e:
                    59:a4:1b:e8:ea:84:7d:b5:40:7d:52:92:3f:14:b4:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:50:AD:38:23:02:0D:F1:00:40:B7:47:F7:4D:10:1C:C3:A5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.48.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:22:18:c9:20:ff:84:ff:b7:a0:e4:4b:d5:4b:b7:86:c2:cf:
         de:8d:06:e1:80:1e:04:1e:2c:2d:74:39:ce:c8:c5:8b:ba:fb:
         11:d2:57:59:33:97:b2:5b:66:97:2c:12:94:ef:30:73:01:7c:
         6a:9e:d3:ff:ac:21:78:5b:a9:ce:0b:b3:bb:9c:32:6a:af:5a:
         37:75:54:a1:b9:c9:d9:9e:10:64:6d:bd:7b:f6:27:ef:a2:7f:
         81:e5:e9:23:16:8d:d0:70:bd:82:8f:56:6e:a4:88:ad:8a:3e:
         16:62:96:f2:29:b8:b7:89:bb:33:4d:05:65:d6:ab:d5:70:b3:
         cd:d4:26:3c:a9:8a:ae:4c:5a:5e:a6:a2:b0:a3:5e:e4:24:8f:
         6f:84:84:20:b9:8d:73:74:79:9b:10:8f:77:a8:86:c3:96:3f:
         5e:5e:2b:1c:9b:bb:0f:5c:ed:9c:3e:61:a3:a1:2b:74:72:c9:
         93:6e:4a:cc:7e:d3:31:96:e1:1e:34:36:78:e6:fe:55:6e:ce:
         eb:b6:bf:c7:98:aa:66:44:3e:91:2a:ed:79:c4:7f:47:97:cb:
         f5:c7:d9:80:69:f2:7f:38:f9:b2:96:21:80:be:75:d7:fa:b6:
         fd:e5:21:f6:45:33:fc:9b:c5:0a:b9:7b:50:68:af:de:5d:fd:
         91:5f:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:54:01 2025 by rpki-client