Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/590535a0-ede6-34f7-a8e7-293cd01f8bcb.roa
File:                     590535a0-ede6-34f7-a8e7-293cd01f8bcb.roa (raw, json)
Hash identifier:          DyJ9yNs635KgYFxHZhfQIY2TVhTnM+SCM0a8oYElR2s=
Subject key identifier:   AC:2F:6B:53:26:FA:A0:A1:AC:4D:F2:53:73:10:B3:26:74:F2:28:99
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584A4C42C8F6F5F1DAE0558DE500
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/590535a0-ede6-34f7-a8e7-293cd01f8bcb.roa
Signing time:             Tue 24 Jun 2025 13:16:46 +0000
ROA not before:           Tue 24 Jun 2025 13:16:46 +0000
ROA not after:            Mon 22 Sep 2025 13:16:46 +0000
asID:                     134990
IP address blocks:        99.230.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:42:c8:f6:f5:f1:da:e0:55:8d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jun 24 13:16:46 2025 GMT
            Not After : Sep 22 13:16:46 2025 GMT
        Subject: CN=4cc0fce6-0806-4aa8-81a7-58c2181f34d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:1a:94:dd:8c:8b:5b:d0:d8:d7:19:55:24:
                    a9:c2:07:45:6e:b1:41:09:1b:3f:cd:8b:4f:32:de:
                    28:4c:f8:ed:b0:fe:25:40:5e:ec:4a:7a:f9:7c:f9:
                    34:44:f7:85:3b:e6:8c:b2:8c:e9:2e:63:45:11:d7:
                    53:d7:76:57:20:59:25:06:2d:77:54:64:5c:af:01:
                    35:b9:03:b7:a9:a3:b8:99:43:8c:75:0b:f5:e6:ff:
                    d1:1c:c4:b8:b8:0c:8b:a4:2d:54:18:0c:c1:e1:55:
                    5e:b8:7b:e6:79:ba:ff:05:43:62:3d:27:e2:bf:05:
                    eb:69:e4:3a:8b:ee:a7:f8:3b:44:c9:ba:be:ce:3d:
                    19:1c:da:d7:5c:a4:a8:10:8a:7c:48:b6:32:42:ec:
                    65:c2:8f:c9:72:92:ca:b6:4e:3a:c2:bc:ba:94:5d:
                    4a:fb:4a:a9:ab:b1:7d:a0:a7:42:7e:2e:57:cb:85:
                    dd:28:87:a1:14:a8:f0:8b:c8:b8:3a:45:ee:65:51:
                    a3:c0:70:97:83:4e:22:4c:78:03:38:03:e6:7d:89:
                    2e:98:40:74:b2:b3:e7:4c:cf:d9:86:2e:56:08:ab:
                    ff:53:c8:58:bc:1a:53:7b:cf:0a:29:10:1d:67:1a:
                    46:36:10:2f:49:8e:d4:b3:bf:ef:95:2f:7a:fa:33:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:6B:53:26:FA:A0:A1:AC:4D:F2:53:73:10:B3:26:74:F2:28:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/590535a0-ede6-34f7-a8e7-293cd01f8bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.230.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:0a:c1:a9:8b:03:9a:77:e6:98:38:86:d7:0c:f0:4c:7d:
         f9:da:09:4b:d2:de:80:58:c4:c4:8f:50:3a:b2:f2:80:c7:6d:
         31:ac:94:f0:dc:f0:e6:85:24:b7:6f:a8:1f:c4:c7:c0:61:ed:
         7f:3e:12:f2:fa:35:c7:c2:6d:f1:b9:6a:f5:fc:8f:a7:f4:42:
         0d:1e:8c:6e:48:67:63:b9:ff:83:70:db:43:b7:1b:85:05:f0:
         ac:87:7a:67:f4:dc:d5:1e:8d:d9:b8:1f:82:86:85:e3:45:ef:
         6f:57:17:d4:53:41:02:f2:7b:e7:00:10:e9:30:4b:c5:a1:22:
         70:75:fc:ed:d2:3a:da:e7:ea:58:b0:65:2b:51:06:e3:8a:7b:
         a6:cb:94:b8:2b:e4:e7:07:cf:fe:91:df:4c:19:00:0e:d9:d3:
         4b:24:58:dd:74:9f:29:90:23:8f:d5:9a:ef:08:37:25:bb:67:
         18:98:2a:85:9a:41:5d:b8:24:35:b9:9e:36:29:e5:01:20:94:
         58:67:78:01:89:a8:c5:2a:59:1f:ca:fd:35:67:0b:1a:77:cb:
         33:95:24:f7:ef:f9:6d:52:0b:0e:d2:b3:c2:9a:7c:8f:12:cc:
         67:74:04:9d:57:d0:79:f1:72:40:c8:cf:b3:bb:7d:0b:bd:04:
         14:cc:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:33:12 2025 by rpki-client