Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c061fd22-1dfd-3be6-a4f6-a9c34d65fd09.roa
File:                     c061fd22-1dfd-3be6-a4f6-a9c34d65fd09.roa (raw, json)
Hash identifier:          MXOyyMZV+Axw7RHPCe+jw7ouzQ1DqYrbKwjjHRUI/8w=
Subject key identifier:   FB:91:33:BF:41:E2:CC:ED:E0:2B:07:A0:4C:99:59:CE:86:C2:53:56
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A396552A0DD2CF485E641D3C8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c061fd22-1dfd-3be6-a4f6-a9c34d65fd09.roa
Signing time:             Tue 17 Jun 2025 19:05:59 +0000
ROA not before:           Tue 17 Jun 2025 19:05:59 +0000
ROA not after:            Mon 15 Sep 2025 19:05:59 +0000
asID:                     401152
IP address blocks:        144.225.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:65:52:a0:dd:2c:f4:85:e6:41:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 17 19:05:59 2025 GMT
            Not After : Sep 15 19:05:59 2025 GMT
        Subject: CN=f0687a19-aaad-4925-9477-85aa35b0349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:7d:03:0b:50:ae:d1:27:40:1e:52:13:e8:
                    d6:e9:5a:2a:d8:9c:c8:dd:a2:87:7b:6d:c7:60:7a:
                    a7:0b:86:5e:64:20:8d:78:5e:c5:c7:25:81:d0:fe:
                    b6:29:7f:fc:07:7a:28:82:4a:95:aa:8c:18:d3:b9:
                    9d:0c:5b:be:46:7b:bf:73:bd:13:e3:1a:01:aa:9f:
                    a2:cb:4b:32:01:6d:16:67:66:15:6d:f1:37:0f:42:
                    42:b7:ea:35:61:8b:1a:93:31:39:97:55:10:ad:39:
                    b3:87:31:3e:2d:c9:58:c1:c1:6e:e8:dd:d4:51:00:
                    9f:dd:15:90:c8:c2:50:97:a0:46:94:9d:e2:18:94:
                    60:1a:ac:5d:1b:8c:e6:83:65:d8:6a:9a:6b:8e:2c:
                    8e:6a:82:bd:62:69:37:f7:98:eb:0b:8e:8c:16:b4:
                    f7:7d:f9:60:e6:a1:fc:de:86:63:f6:ab:d1:8d:06:
                    ff:28:54:60:2c:6e:27:fe:f5:74:04:30:79:ad:f4:
                    a5:d0:a8:b1:cd:fd:12:3a:02:a3:ff:01:26:8d:17:
                    84:2d:a5:a4:d1:37:7c:4a:25:46:93:ec:3e:2f:80:
                    ea:fa:70:6d:ff:e5:27:64:20:07:ee:10:b9:89:e9:
                    5f:6f:cf:46:65:d5:a3:68:65:fb:0b:5b:4c:fd:99:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:33:BF:41:E2:CC:ED:E0:2B:07:A0:4C:99:59:CE:86:C2:53:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c061fd22-1dfd-3be6-a4f6-a9c34d65fd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:2f:90:e5:94:fa:0b:da:51:48:53:3f:59:89:6d:5f:05:
         c8:29:0d:9f:d3:72:82:50:fd:82:bd:35:8d:c9:2f:14:fa:d2:
         d1:a9:74:9b:29:45:90:92:d5:12:c6:93:08:03:27:5e:85:f4:
         19:39:aa:1b:f2:59:9d:49:f6:46:43:f3:08:33:6c:80:b4:08:
         ed:2e:87:42:84:a4:76:8c:7c:c7:86:54:bc:42:69:79:bb:1f:
         02:97:1b:03:a7:29:96:ba:d2:4d:a7:d6:61:0a:9a:94:09:1d:
         87:68:01:85:01:72:fc:8a:56:3d:23:9c:a9:b2:ab:cb:01:e1:
         64:63:fb:1b:52:6e:e5:22:34:c0:76:c4:ca:1c:df:38:33:c4:
         00:b9:04:ae:14:6c:59:36:15:7f:d2:56:52:63:7f:2b:04:0d:
         55:6b:f6:46:58:49:46:98:7f:cd:cc:ed:ae:a1:68:c3:43:51:
         e4:ea:75:2b:74:d7:a1:45:4f:2b:6f:96:92:c8:37:99:d1:61:
         62:d3:ab:e1:e3:2c:c5:53:24:b6:0f:6c:73:83:b6:3a:66:ff:
         da:5a:f2:dc:3f:39:c7:56:31:d5:53:91:d7:2d:2d:05:99:e3:
         f7:11:0b:04:aa:79:db:1e:ac:be:0c:8a:62:d7:85:cb:d0:48:
         5b:1b:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:00:17 2025 by rpki-client