Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
File:                     03982157-61b3-3065-ae38-53829dc9dce4.roa (raw, json)
Hash identifier:          646xfzVPA1lb2bIZUN5xB7yFOMpgvoIXPt2SlMId3ek=
Subject key identifier:   90:A5:E4:D3:D7:B0:B9:6E:AB:63:CA:72:0C:61:76:6B:5A:27:C9:19
Certificate issuer:       /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial:       010D0C9F43285849CE9A62EB6265E0B109F3E190
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     56308
IP address blocks:        148.188.240.0/21 maxlen: 21
                          148.188.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:62:eb:62:65:e0:b1:09:f3:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=78b6279f-a837-4cea-ac55-d65264a90552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:40:4a:4a:ed:38:02:09:80:11:0f:75:21:
                    c3:9b:04:ff:f4:23:e3:f9:53:4b:73:9c:35:4c:1a:
                    71:82:26:d9:03:0c:47:af:89:19:6f:49:17:be:d9:
                    71:cf:cb:45:e2:ba:6c:a3:9c:1b:37:b6:a1:59:c8:
                    30:21:fb:58:bd:35:cf:a9:9a:fd:70:7a:35:39:cb:
                    35:0c:38:f8:cd:8f:3f:ab:88:3f:6e:0d:5f:6b:c2:
                    f5:09:eb:2d:56:1f:8a:2d:2f:bd:7c:80:4c:fe:7b:
                    df:d7:b4:d5:25:bb:39:87:1c:0d:86:ce:9b:2f:b2:
                    74:8f:d7:07:61:ed:da:4b:d7:48:6e:5e:11:a3:2b:
                    c3:20:7b:3c:1e:17:7b:ad:14:f2:b7:d4:c3:f2:d3:
                    e4:d6:a1:a5:e3:dd:8d:4c:34:4b:b1:32:0a:30:c6:
                    9d:cb:01:e5:25:06:ba:98:9f:78:c6:5a:97:1d:87:
                    3d:e2:16:a2:b4:2d:e1:95:11:e0:4b:16:cc:2c:5f:
                    e4:57:38:ec:3e:80:82:8b:3e:6b:16:b8:c0:fd:5a:
                    8f:34:1d:a5:73:63:22:70:0b:72:c6:8e:3d:1a:14:
                    56:a9:6a:4a:36:48:e6:4d:62:23:d7:b2:92:42:93:
                    63:42:43:f0:cc:51:c8:18:ef:55:f4:93:b9:2c:ad:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A5:E4:D3:D7:B0:B9:6E:AB:63:CA:72:0C:61:76:6B:5A:27:C9:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/03982157-61b3-3065-ae38-53829dc9dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.188.240.0-148.188.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:c7:e4:e8:4e:5e:79:43:8a:ca:79:e3:91:e6:bf:75:4d:
         3e:2e:a3:a7:40:d7:3e:40:78:d7:5e:85:a1:48:0e:6e:ce:40:
         c2:74:b1:3a:53:a8:b6:17:2a:9a:13:9d:0a:76:71:e5:7e:c8:
         44:94:f4:0e:13:ab:9b:41:d8:84:37:c3:2d:44:33:8f:a4:95:
         d4:f1:06:0b:cb:2c:1f:0c:bf:dc:9f:1a:b4:16:3e:b0:86:2a:
         15:58:5f:30:4c:b0:c7:b0:17:d3:44:57:01:23:be:27:57:df:
         0e:94:4a:f9:57:4e:02:fb:8b:ab:d9:b1:fe:0e:a4:b8:3e:0d:
         bc:da:de:7e:d6:a9:bf:26:f7:34:cf:f1:62:09:82:d4:a7:c7:
         37:7a:fa:8d:39:8c:2d:59:30:73:c7:aa:62:20:56:61:a2:23:
         06:95:b7:91:82:76:d7:55:14:28:fe:13:a5:a2:f1:75:59:70:
         d5:a9:80:76:f6:36:89:39:01:7f:c6:00:6b:81:9a:6e:1c:86:
         1c:ff:0c:55:bf:40:0e:3e:0b:c0:aa:01:ba:69:6e:23:38:d6:
         f7:f4:74:f5:ce:69:8d:2d:86:cc:bf:05:fe:fa:a5:be:9e:5f:
         61:bd:81:6e:82:f9:8a:41:1a:63:f0:00:7d:a6:f4:3e:a2:8d:
         3e:7c:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:47:38 2025 by rpki-client