Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/c1d8e12c-44bf-3651-b9e3-5d573cb926f0.roa
File:                     c1d8e12c-44bf-3651-b9e3-5d573cb926f0.roa (raw, json)
Hash identifier:          EKW4xhJ07C8Td+uu98nWUjU9Q4Ztl5wHn7CyEng0ACs=
Subject key identifier:   41:A6:64:8B:8E:7A:CD:83:10:89:FD:25:C0:2C:67:C7:A2:E2:D2:C3
Certificate issuer:       /CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
Certificate serial:       010D0C9F43285849C0A4E9834E237CDF15854B40
Authority key identifier: 1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/c1d8e12c-44bf-3651-b9e3-5d573cb926f0.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        148.59.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e9:83:4e:23:7c:df:15:85:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=9fc3f82f-16be-45ad-b267-b42ddadb6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:65:b8:8f:de:bd:2a:85:4e:aa:67:04:22:
                    73:c9:93:53:5c:f1:2d:ba:5f:63:83:e6:cb:a1:48:
                    73:d5:f6:07:39:c9:0d:48:3a:c2:9c:13:f9:9b:d5:
                    ab:5b:91:b0:b2:99:91:3b:0c:91:59:3e:e8:4b:db:
                    76:58:af:2b:2d:cc:ff:bd:b4:69:5a:34:58:f7:fe:
                    9d:5d:a6:7f:cd:64:6f:d6:a3:ad:a9:9f:a3:a5:30:
                    ae:15:a4:4d:8c:11:b8:d6:d9:36:4e:2b:c9:4d:38:
                    05:e0:f5:18:1e:a3:88:f9:8a:e2:3a:f5:42:6f:a3:
                    eb:1b:85:df:26:e7:07:80:09:bd:d6:61:77:79:c2:
                    71:bd:10:ce:0e:29:41:a1:62:aa:a4:17:a6:c7:fd:
                    17:16:1d:7e:5d:ac:77:2c:d7:db:46:2c:39:79:f0:
                    b6:20:b5:2e:a8:2c:6c:46:a9:51:ec:2e:d5:aa:ea:
                    54:a8:fa:1f:ba:a4:03:2f:0d:d8:02:f2:59:44:7e:
                    27:bb:5c:03:c5:53:6e:fc:d5:f7:76:4e:31:43:ac:
                    25:fc:59:76:91:0f:83:ee:b4:00:7c:e3:dc:ca:90:
                    2a:38:b5:d4:4c:82:20:cc:61:7e:ed:9e:5e:d0:7a:
                    8a:ee:d3:4c:68:8f:0d:47:f7:9c:02:57:86:17:bb:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:64:8B:8E:7A:CD:83:10:89:FD:25:C0:2C:67:C7:A2:E2:D2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/c1d8e12c-44bf-3651-b9e3-5d573cb926f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:77:ad:1e:52:40:47:ef:31:6e:0d:c9:bf:c2:f0:64:ee:
         e8:49:a4:b0:d6:b2:f9:65:f4:b1:46:8c:2b:4a:63:8c:31:b0:
         13:67:d9:30:41:c0:f9:fe:ab:87:1e:8e:fe:da:a3:e0:c7:78:
         78:84:56:4a:88:e6:04:a3:e0:9a:d1:7d:ed:84:ef:43:7d:77:
         43:7d:e6:86:b1:e3:fe:d1:52:f8:52:16:d2:69:42:6f:e9:86:
         16:16:1e:18:d0:e1:9b:6b:56:2c:1a:f0:5f:b4:73:09:80:7f:
         5a:43:b7:ee:ea:69:49:f2:aa:0a:04:dd:e4:d7:a6:92:4f:c0:
         bc:f3:12:6e:20:ff:ff:63:c2:01:8d:c3:fe:3b:13:1c:8f:85:
         17:2f:ae:82:c5:72:94:c9:ae:d4:90:35:9e:32:40:f3:d7:8c:
         2e:99:8c:1b:50:71:66:31:da:5d:52:68:c1:88:72:a1:a3:02:
         8f:01:d1:c1:01:d7:14:ec:70:c8:6f:12:2d:91:66:c7:50:9c:
         3a:cb:f4:2f:98:91:9c:8e:7d:97:b4:52:c6:41:0c:1e:77:90:
         5c:a1:6d:86:25:43:b0:3c:63:f9:6d:d1:62:a4:ba:65:f2:64:
         55:90:1a:84:5e:e9:ec:22:bf:42:54:f0:11:50:c7:f1:14:ae:
         5f:79:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:23:26 2025 by rpki-client