Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa
File:                     3aa31347-1ae5-323d-86b9-b57659cd5d56.roa (raw, json)
Hash identifier:          NvquJDVELIPRVeeGH3qyy7WiL3mhDkwFmUiiOfYTmJs=
Subject key identifier:   AB:EE:DE:F5:82:54:1B:C3:12:47:19:5A:FC:9C:A5:6B:4C:B2:C0:79
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285849B149EFB780D276B0C3CC6EC0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        155.226.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ef:b7:80:d2:76:b0:c3:cc:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=e45a88a3-7a8c-45b3-a707-6aaf2c444aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:92:24:df:23:44:14:da:67:8d:7a:7f:ae:
                    40:5a:04:32:29:02:ee:cc:d8:ce:69:c2:1b:21:64:
                    e7:ca:b9:a1:03:37:21:77:7a:54:53:cf:4f:a0:82:
                    93:bf:66:41:13:a9:2f:74:5b:4f:03:b0:1e:2f:ff:
                    ed:6a:4b:22:52:2d:6b:c9:db:ed:47:80:c4:8c:5b:
                    75:f6:bb:b9:da:cd:cd:18:d3:1d:99:c4:7b:49:5a:
                    06:da:b4:5f:b1:b1:96:8d:9d:13:ef:84:fd:a4:ce:
                    f5:9b:2f:79:13:98:1d:62:c9:e0:a4:10:05:64:f6:
                    27:0f:3c:6b:47:3f:d2:96:3d:a7:09:ed:6f:4d:36:
                    04:0c:ad:4c:67:17:41:40:07:34:a1:b6:f7:39:60:
                    52:ba:b9:88:c2:eb:a9:aa:30:42:15:dd:ce:86:0e:
                    10:f1:88:31:db:6e:b0:fb:eb:fa:e6:ba:11:24:d9:
                    a5:db:ae:57:64:ee:37:f5:56:50:b7:06:3b:e6:d0:
                    73:b6:6a:45:10:3d:7a:ec:00:77:aa:6a:88:4c:9c:
                    8b:37:65:08:66:b8:f1:85:1c:f9:4c:e8:62:1d:12:
                    43:6a:b4:16:2d:50:65:34:1e:dd:c0:ac:b2:ae:a3:
                    a0:b1:8b:8a:ba:22:ec:7f:d6:09:3f:dc:73:56:61:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EE:DE:F5:82:54:1B:C3:12:47:19:5A:FC:9C:A5:6B:4C:B2:C0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3aa31347-1ae5-323d-86b9-b57659cd5d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:4b:9a:0c:9b:75:64:04:1a:07:db:95:b9:b1:bf:ed:be:62:
         f8:46:a0:ed:1a:39:fb:59:03:4c:df:dc:f4:06:c1:8f:28:ff:
         c9:34:21:a4:63:4a:63:05:79:c0:00:a3:32:8e:63:66:c8:ff:
         56:0d:ac:d0:12:12:b3:c7:41:af:70:a0:d4:c2:a7:72:40:0e:
         24:d6:3b:4a:b9:30:57:66:b4:37:2c:3f:ac:ed:66:ba:0b:cf:
         91:2c:0f:91:e1:f8:34:91:fb:e4:49:04:40:f3:ce:54:78:4e:
         af:85:9e:54:5e:d9:62:41:19:d0:b6:96:77:88:c8:57:43:5a:
         6d:93:d8:da:00:04:94:86:6e:7b:ed:7b:2e:c7:c8:e9:81:cf:
         3d:f7:c9:f1:ab:ac:e9:d2:d0:88:83:bd:a9:66:b9:5e:3a:76:
         f1:00:e5:41:57:57:77:e2:43:d7:13:50:01:43:0d:5e:99:a9:
         00:ed:2f:93:0c:25:d6:3b:ed:e2:b8:ed:5d:5c:ea:ad:ad:bf:
         f4:a4:ea:da:55:dc:b5:bd:f9:c8:8f:90:0c:1d:e9:b7:70:8c:
         fb:b4:f0:bb:b2:49:8d:c1:af:76:b8:1d:f2:70:29:cf:9c:0d:
         0b:87:b3:32:cc:88:2e:d0:54:9b:cc:eb:5c:75:f3:1f:5f:67:
         33:ab:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:07:31 2025 by rpki-client