Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa
File:                     e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa (raw, json)
Hash identifier:          4YANIthZ+0U+4LZijvsDgewLI5YRcPzQOHuReGtrOKw=
Subject key identifier:   A2:79:0E:99:62:20:47:38:18:33:71:24:93:31:1A:7F:51:7E:39:F3
Certificate issuer:       /CN=910396e7-2d32-4040-a73d-ad686b8445b3
Certificate serial:       010D0C9F4328584A3B7AFC6A79C1F302DEA76180
Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     64541
IP address blocks:        110.172.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fc:6a:79:c1:f3:02:de:a7:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=ac9cb35c-7c61-4cd1-b61d-f2933993bc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:20:6a:cb:75:26:5f:f1:56:3c:fa:6e:00:
                    86:fc:05:b8:1a:a5:1a:cf:f5:a7:40:10:58:77:75:
                    0e:e5:09:c4:6e:dc:64:ec:d1:be:51:04:4a:f3:d7:
                    50:e5:28:83:45:4c:ae:ad:07:ab:4d:9e:9f:ee:a9:
                    cd:5c:fe:9f:6a:a8:e4:0b:1d:c0:88:9b:78:e7:01:
                    b3:0c:b1:f1:b3:30:85:49:9e:ae:f9:fd:be:ba:39:
                    c4:c4:f5:3a:09:63:8e:9b:94:0c:71:ef:7b:90:4d:
                    8a:23:a5:1e:54:2f:67:02:bf:1e:89:b6:1b:5b:fb:
                    5a:c3:dd:13:e1:0e:8e:89:a9:8d:a7:00:de:51:ff:
                    06:20:3c:73:84:5a:8c:7d:09:07:44:aa:0c:c6:b6:
                    e1:f6:ec:ed:c4:ec:58:f6:79:ae:8c:9d:ee:6d:de:
                    38:e3:e5:01:16:58:c6:97:19:d9:9b:68:db:8c:cf:
                    ca:d3:b5:22:c7:a1:22:e8:ce:b6:4e:bf:a8:f1:a7:
                    bb:a0:42:d8:45:df:49:6e:4a:bc:f4:bc:23:bb:af:
                    98:80:73:90:b9:ea:cd:0a:14:98:a3:eb:50:82:1b:
                    e3:50:11:ef:3a:f4:ed:4e:3c:a9:e3:c9:cc:ca:81:
                    aa:bc:c3:2a:29:42:d7:90:02:c8:a0:93:14:dc:b4:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:0E:99:62:20:47:38:18:33:71:24:93:31:1A:7F:51:7E:39:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/e30f92fd-d5a1-3bb1-806c-8929f756ac67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:2c:81:90:4b:46:ad:fc:a5:f8:87:d4:b2:01:c7:d1:ff:
         ea:53:a4:80:27:8c:39:07:20:a2:b7:53:59:17:65:86:2b:40:
         ff:28:31:91:e2:9a:37:25:59:05:3f:19:dd:45:c3:78:35:b5:
         ab:7a:27:35:8f:ce:50:6d:be:84:7b:b3:20:98:78:c3:4a:be:
         dd:e2:fe:9b:39:5b:6b:3a:52:cd:88:53:ec:ee:15:23:f1:54:
         2b:81:d0:2f:49:64:14:82:f9:83:97:e1:66:f9:06:20:22:19:
         b8:cc:a9:be:f3:ba:b0:46:52:69:6b:b8:af:ff:43:0e:14:4f:
         f4:b7:73:70:ee:06:3e:e2:d7:77:89:2e:ea:e2:50:58:59:41:
         cc:bb:59:50:eb:0d:06:fe:ff:01:71:84:2f:7f:03:45:db:98:
         ae:2a:c7:a8:ca:04:9a:0f:49:68:b2:2e:94:32:3b:c3:80:b3:
         99:7f:c7:bc:2c:62:85:d4:ff:3e:bd:56:53:01:a1:2e:ee:bf:
         1c:57:be:29:ef:48:e9:59:e4:a7:0a:4b:a0:b4:a7:2a:6c:6f:
         eb:8a:7d:ae:86:51:35:46:9a:0b:be:f8:9a:7b:65:0a:6a:11:
         09:cc:bc:2e:f3:39:1f:4f:4e:fa:50:cc:0a:49:b1:90:1a:39:
         87:84:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:46:12 2025 by rpki-client