Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
File:                     1905bf21-ee68-3188-bef3-4a4a821e314f.roa (raw, json)
Hash identifier:          UPUZILRdKxhAi4wrjHENBtjUc2f03Ur69d7PYT3b8XI=
Subject key identifier:   75:25:1B:C2:46:A4:BE:8F:F5:9E:1D:46:C7:2C:43:46:13:D8:30:AE
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584A56005223CC641436E8D0A15F
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7896
IP address blocks:        137.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:52:23:cc:64:14:36:e8:d0:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=f1df84fa-8f58-437f-82e2-75f522ff4548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:86:76:2e:5e:67:40:99:30:c7:f2:3c:ad:
                    5c:50:60:c2:bb:7a:41:32:08:c9:45:c6:25:40:57:
                    56:4b:7c:f7:f5:76:e8:df:42:95:b5:5a:db:5f:1b:
                    ef:4b:f5:71:9a:70:2a:bc:f7:6a:0d:31:eb:a8:65:
                    e8:01:e2:ec:8a:60:13:16:de:a9:e7:e1:f4:fb:07:
                    ca:f1:0a:31:76:e0:d5:95:ef:64:3e:2d:8a:2a:2e:
                    ce:a0:77:17:fc:32:0a:f4:86:7f:af:2f:f2:9d:d7:
                    0d:41:fd:ea:98:01:b8:7f:09:2d:2a:cb:b1:7f:c9:
                    10:82:21:9d:f5:73:d7:59:4a:6f:f9:c1:ae:94:bb:
                    6e:28:a4:7c:d5:17:d3:27:b2:d3:f9:91:45:15:79:
                    ec:88:d6:82:54:c8:db:66:2f:13:d7:6b:8d:6e:4b:
                    33:98:2e:1f:c3:64:80:2b:69:c7:10:19:72:7c:e3:
                    22:b9:4d:6d:38:7b:6b:28:4f:d5:f6:e6:64:cc:c2:
                    e7:bc:e3:72:33:61:5b:28:97:1a:e5:86:bd:c4:3b:
                    36:3f:02:67:24:6f:eb:70:a6:a5:cf:90:38:ad:fd:
                    d9:d1:74:cb:07:64:3f:f8:3e:f4:61:cd:56:5e:89:
                    29:fc:b3:8f:40:af:e9:e0:96:2c:2b:9b:53:19:bc:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:1B:C2:46:A4:BE:8F:F5:9E:1D:46:C7:2C:43:46:13:D8:30:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/1905bf21-ee68-3188-bef3-4a4a821e314f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:27:9c:5a:53:c4:10:f2:bd:39:84:31:eb:62:6b:f6:ea:
         a9:3d:70:51:89:8b:5c:61:7c:8c:77:90:48:13:5d:aa:53:d2:
         67:01:d8:22:4b:83:d9:a0:33:b9:21:40:b4:6f:26:ab:fc:13:
         32:01:fc:3d:ae:6b:90:53:25:cc:66:13:6d:8f:b3:28:b1:4d:
         40:2e:74:b4:34:65:5f:aa:d7:a2:47:d0:db:b2:04:5b:5f:e3:
         13:d3:b2:9f:f8:74:94:f0:6e:c7:1e:8f:be:16:cb:4d:22:66:
         4d:83:9b:f1:a6:de:28:3c:05:a7:60:b3:fa:24:43:b3:38:42:
         bf:40:07:64:14:56:9d:34:82:a8:df:29:81:53:20:c2:04:87:
         e3:92:15:d9:4d:49:cc:11:b2:26:86:73:0e:6c:1e:17:04:87:
         22:ae:09:8e:89:3c:0b:1d:b2:28:73:1c:a6:00:a5:8f:7e:4a:
         7b:f0:37:49:58:34:40:0c:c2:b6:89:07:93:b5:19:2f:85:0e:
         40:be:dc:05:f6:20:4a:9b:1f:c9:36:d2:a7:ee:55:f7:2f:41:
         62:bb:2c:a5:90:b4:a0:6a:4d:fc:0a:ba:98:d1:1a:1b:fe:9c:
         dd:ba:02:b6:45:1e:33:2a:2f:44:6c:de:51:7e:6a:55:6f:f2:
         c7:35:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:05:34 2025 by rpki-client