Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
File:                     cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json)
Hash identifier:          cKXi/9ZVT4WX8QkIlN6Pvv6OidccPH6qILUpSf93amc=
Subject key identifier:   FB:09:D9:13:C0:A9:DD:FE:6E:66:12:63:D8:2C:91:8E:DF:DA:55:46
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F43285849C20A0A17AAFBD56198282900
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     87
IP address blocks:        149.165.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0a:17:aa:fb:d5:61:98:28:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f7f5e3a1-acbe-41b1-9270-35a11eae7780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:69:d3:77:af:67:6c:d1:e1:dc:e5:15:e2:
                    27:16:c5:92:14:0e:bc:14:8b:dd:3a:a5:ff:f6:ad:
                    cd:31:7e:28:e9:5b:07:6a:97:51:5f:c5:9f:6b:c2:
                    8e:cd:ea:9b:90:4b:3d:0f:8a:e6:eb:8c:3e:4c:93:
                    3c:e7:4a:a1:27:46:1c:8c:c8:74:2a:f2:e7:23:17:
                    07:a8:f6:52:8a:ee:7d:5a:84:7f:bf:7b:d5:1f:ca:
                    51:44:a3:04:b5:e9:24:f2:00:e5:98:43:32:43:e3:
                    59:39:d3:2c:67:db:55:1b:b5:46:8c:9d:eb:83:11:
                    fd:98:58:e5:42:6a:4c:73:6b:c9:41:b9:73:7f:8b:
                    d7:fa:4f:38:31:fa:90:39:99:82:1c:da:4d:cb:a1:
                    74:38:c7:db:cf:9a:d7:93:5a:58:11:ad:24:29:c4:
                    74:5a:ed:df:13:df:ee:b4:f5:5c:a4:1c:9f:9d:3c:
                    3c:5b:22:e9:ef:88:1c:7c:34:9c:d6:52:e5:02:24:
                    34:54:f3:ef:ec:d9:06:b2:fb:c3:69:86:e8:81:77:
                    2e:f6:8f:75:d9:1f:b0:b6:d7:a2:ff:b8:ff:33:eb:
                    de:9e:18:5e:24:71:cb:13:d7:8c:c6:40:9b:e1:6a:
                    01:fe:54:62:15:d6:11:5a:c0:af:82:4c:3a:4b:be:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:D9:13:C0:A9:DD:FE:6E:66:12:63:D8:2C:91:8E:DF:DA:55:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.165.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:b9:6d:28:52:aa:4a:48:ca:34:95:6c:62:17:dc:dc:b3:ff:
         de:a7:74:27:cd:4c:70:cf:72:e0:4f:6d:60:37:3a:e0:d6:99:
         e2:20:33:93:37:68:c2:aa:20:62:ba:ee:e2:7c:cd:8b:33:b0:
         78:6a:a3:47:04:61:88:23:80:fe:11:a9:4d:c1:de:1f:63:6b:
         d3:92:66:f8:92:94:f3:83:a3:25:54:a8:bb:af:03:70:b9:c5:
         a4:04:83:04:81:24:61:05:e3:3e:f7:0c:f4:16:3e:c8:51:46:
         20:a6:67:3a:c0:5b:22:8b:04:35:3b:ec:aa:fc:e6:3d:56:0b:
         23:54:d0:0c:e1:7d:90:6a:4a:57:e0:b4:44:16:13:de:33:19:
         18:03:ff:d0:4f:1c:8e:e6:bc:03:87:3e:9a:8d:5f:0c:78:7a:
         9d:19:7e:db:eb:a1:7e:dd:dc:f6:65:99:ba:a3:01:54:f6:26:
         0e:af:41:3c:fb:af:d7:7e:b7:06:a7:12:c1:d2:8a:fc:75:11:
         c2:bb:2d:d0:45:97:e8:fa:a9:00:ac:63:0e:b7:98:6d:39:79:
         8e:8b:da:ca:9f:8a:b0:69:27:a2:0a:7b:fb:d7:ac:ec:0f:38:
         66:d7:68:d8:a1:b6:fa:17:fa:c6:3f:61:77:5e:fb:be:32:ed:
         e1:e9:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:32:07 2025 by rpki-client