Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa
File:                     548211a7-ec86-3843-8027-0b84f68da757.roa (raw, json)
Hash identifier:          nHBVmkH6fuduRnQlYAgMOaEguAR+7eVVaN7uPb1CMVs=
Subject key identifier:   59:6F:42:6A:EA:51:E2:8E:75:D8:3D:68:F6:8F:8B:B4:B5:99:07:D7
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F43285849C4D4C4A2ACBF61E41EFC9A70
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     35847
IP address blocks:        170.203.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c4:a2:ac:bf:61:e4:1e:fc:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=05fbb085-2cdc-4304-82fc-cad438039628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:51:06:d5:a6:56:4a:ec:c1:c8:69:ab:d4:
                    39:1f:0a:24:00:c1:77:40:1d:92:65:d4:e4:a7:65:
                    22:90:bd:34:b6:e1:49:3e:13:ec:a1:a7:36:de:c7:
                    d9:66:ec:3b:16:ab:55:e6:d7:59:73:08:3a:c7:59:
                    f5:b6:ee:55:b5:0e:ca:ec:f5:fe:01:ee:78:d4:31:
                    c6:ae:df:65:41:05:05:25:52:fd:8a:af:aa:18:86:
                    ae:d8:d3:67:9c:3b:f1:e2:a7:8d:41:dd:a9:17:75:
                    0d:ad:64:3e:46:87:c1:0e:28:50:6b:05:b8:a4:c5:
                    54:d0:59:a6:3b:67:75:e3:51:b8:8c:74:86:fa:88:
                    06:2b:13:ef:3b:d2:ef:ba:e1:da:fe:8e:27:ce:fd:
                    b3:7c:22:63:13:1f:a1:d0:56:36:39:41:0f:36:ea:
                    ac:13:5c:53:03:b4:c8:17:95:24:e1:77:c6:79:18:
                    a4:33:be:c8:c8:2b:3f:25:12:55:a0:ab:0d:bd:a3:
                    57:06:02:1f:77:66:24:1e:eb:b1:fa:87:a8:e0:49:
                    04:e7:fa:eb:ea:b8:bc:1a:9c:a4:31:1e:ab:88:fa:
                    37:51:c4:86:aa:1d:25:67:f3:e0:8b:7f:d8:cf:c3:
                    bf:04:20:2c:63:8f:c8:a3:db:5f:a5:0a:da:6e:0e:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:42:6A:EA:51:E2:8E:75:D8:3D:68:F6:8F:8B:B4:B5:99:07:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/548211a7-ec86-3843-8027-0b84f68da757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.203.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:ef:36:0c:1c:38:31:da:d0:cc:10:7b:05:88:bd:83:0b:
         eb:00:83:e8:6c:b3:8a:f2:37:b6:bf:38:7c:36:99:cc:5c:3a:
         6e:fb:43:e9:1e:96:79:e8:d8:cd:e7:7d:d8:10:4b:74:a7:2d:
         ef:d0:88:9c:3e:30:38:4d:13:b0:8e:54:63:70:68:a9:ae:97:
         88:0e:77:18:5c:7f:ed:6e:b7:0b:41:0e:7d:53:12:81:9e:6d:
         ab:57:3d:b9:36:fa:ab:d3:c5:f6:6e:e3:15:c0:85:6e:94:32:
         d7:2a:fc:f8:0f:64:b7:18:2b:21:54:01:2b:bc:7a:12:65:8d:
         ee:32:89:f1:63:36:ea:1d:50:3c:62:33:6f:25:02:88:bb:1e:
         9f:b4:e6:35:6d:45:a0:e6:5c:df:4f:6b:1b:97:ab:23:54:6e:
         0c:8f:d2:33:d2:a5:03:bb:84:e9:d1:13:d3:75:5e:d7:02:e5:
         c8:84:2b:c9:93:6e:7f:52:b4:b3:bb:b1:a8:80:7f:87:7b:e8:
         6c:bd:72:54:2e:19:48:9f:8d:83:5e:6f:5b:6a:8e:88:92:09:
         64:40:14:fa:07:a6:94:31:26:6b:1e:b3:1b:25:33:5e:a2:a0:
         88:7d:34:b1:90:3f:6a:a6:0c:44:7a:60:34:f6:e7:0a:f1:1e:
         bb:b0:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:55:41 2025 by rpki-client