Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
File:                     bde58f87-486e-3511-a7ec-9f8ee003a894.roa (raw, json)
Hash identifier:          ri3Tj/a7hmvF5AaIWN+wL4OA230KoMmKpq4SvCFJgig=
Subject key identifier:   F0:22:66:62:A9:22:93:0D:5B:EE:2C:05:DA:34:A7:48:9B:A8:8A:6D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285849F491E8B435FF8E9243284FA0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
Signing time:             Sat 24 May 2025 03:25:03 +0000
ROA not before:           Sat 24 May 2025 03:25:03 +0000
ROA not after:            Fri 22 Aug 2025 03:25:03 +0000
asID:                     19886
IP address blocks:        171.162.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:91:e8:b4:35:ff:8e:92:43:28:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 24 03:25:03 2025 GMT
            Not After : Aug 22 03:25:03 2025 GMT
        Subject: CN=e057bfda-4e7b-4ff0-809a-c2fda77866d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:13:e6:a6:ad:2a:19:d7:b0:b5:d0:fb:4e:
                    cf:bf:e1:00:44:7a:59:e2:ed:1b:6e:3c:7d:c2:cd:
                    a8:f8:1a:6a:ca:f5:08:a4:46:68:be:67:64:53:8f:
                    ee:3b:49:b9:8c:71:0d:00:48:c8:b0:f4:53:2e:83:
                    2c:77:c3:c0:44:67:ee:ad:8d:44:02:8a:54:40:69:
                    71:85:c4:19:05:48:b7:38:0d:ed:c3:52:52:c8:d0:
                    a0:8d:99:31:76:1a:81:0c:83:61:17:38:06:79:de:
                    a2:bd:3b:bb:b0:75:dd:2a:5d:2f:4b:7e:f5:40:24:
                    3f:16:2b:c4:75:1d:7e:6f:56:c3:61:81:82:b2:cd:
                    23:af:c8:58:c6:18:50:68:2a:fc:cb:47:51:6f:27:
                    68:fc:c0:98:dc:ec:0f:19:ac:78:0a:23:25:ae:1c:
                    b3:10:81:e7:eb:7a:09:0c:68:04:b9:f3:f8:30:7e:
                    f1:96:5a:ca:45:a1:4f:30:02:f2:c9:bf:9f:b6:ef:
                    84:e4:29:b0:7f:20:9f:34:ea:e5:34:27:c5:73:31:
                    51:08:e6:98:8e:10:fd:91:67:52:e5:56:78:bc:33:
                    38:d9:2e:6e:cf:a4:3a:db:94:33:88:8c:d5:d5:4f:
                    49:50:1f:94:7f:e1:ad:7b:4b:4a:f7:11:ff:5a:e5:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:22:66:62:A9:22:93:0D:5B:EE:2C:05:DA:34:A7:48:9B:A8:8A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:e1:a4:4f:e1:da:16:ac:01:99:48:f5:f7:57:4a:3f:f0:
         4d:9c:10:d2:e4:39:96:56:41:74:2e:eb:49:c9:37:b9:3e:aa:
         23:3f:63:2e:bd:de:2c:a9:63:c3:a9:45:6b:70:a4:75:27:1a:
         cf:25:26:9c:0c:ab:c7:81:2d:24:c7:e4:dc:06:ac:9a:f4:54:
         c3:db:09:db:50:ad:47:ba:59:3b:cb:d4:b1:42:f6:35:d2:00:
         a2:b2:5c:2b:fc:5c:2a:9f:7a:8e:bc:e1:17:c1:58:c8:02:36:
         f6:d7:d4:7d:a6:a2:dc:a8:b7:33:24:6f:33:04:89:dd:e1:c4:
         a1:6e:0d:ad:11:c6:47:11:91:c4:df:da:77:46:d1:29:85:80:
         81:c0:db:e9:1d:4e:ed:8f:81:c5:d2:53:ec:07:96:00:d1:8f:
         55:80:6b:cf:2d:71:be:8f:c2:05:4f:78:3f:11:cc:64:02:ed:
         05:be:dd:61:33:11:c7:17:97:04:0b:c0:96:da:28:8e:ab:8c:
         f7:17:12:b5:bd:d8:b2:2f:f0:fd:14:41:a3:27:2a:cc:a9:54:
         28:a4:cb:ad:4d:93:fa:68:1d:28:e2:e9:93:8b:22:28:fb:b9:
         f6:ec:34:e7:da:4a:aa:95:7d:e9:57:c6:31:c5:62:2b:f5:7d:
         df:e2:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:59:05 2025 by rpki-client