Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
File:                     c5f83fad-67aa-328f-bed8-a9b051be30b2.roa (raw, json)
Hash identifier:          F8feT4Qs2UgRaifts7qfnkPUMVkwGPa1Ugnz9sgBQH4=
Subject key identifier:   CB:DD:D8:BA:44:5A:0B:1D:8C:42:75:EF:02:A9:75:EB:D0:E2:99:5F
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F43285849E654F3069229BFC875463880
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     30041
IP address blocks:        148.222.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f3:06:92:29:bf:c8:75:46:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=356d01f4-7002-4bd2-b4cc-bd30e1ac1461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:6c:fe:89:6e:07:2b:68:ad:b9:5d:de:0d:
                    6b:0a:30:9c:9b:ef:95:8c:fc:3a:51:53:8c:cd:92:
                    35:44:45:15:15:ab:67:06:88:6d:66:82:7d:07:17:
                    de:d7:bf:c9:e1:14:2d:46:a3:05:67:36:e5:f3:2d:
                    b6:ed:e1:63:7f:2e:3b:a0:cf:37:66:5d:03:64:f7:
                    5a:71:cd:57:19:3e:03:23:c8:9e:3e:84:7d:35:85:
                    cf:8a:f8:fe:3b:60:4a:64:b9:c4:d9:d3:2b:91:bc:
                    77:1e:21:dc:93:f3:81:00:ac:71:59:97:ae:66:e1:
                    1a:88:e7:b9:ce:bb:de:74:d7:a1:60:61:d0:c8:16:
                    58:8f:7d:8a:f5:d3:19:bc:ac:fe:4b:67:1a:b2:54:
                    f9:bc:da:f6:6a:68:61:a3:b8:9d:f9:82:4f:be:03:
                    2a:39:4e:13:55:1d:f1:3a:1b:e5:b0:87:fb:8b:3b:
                    90:be:58:ea:a3:92:5a:58:6e:5d:bb:57:36:58:d3:
                    8c:15:cc:47:a2:dd:08:39:96:63:13:30:86:a8:25:
                    b6:de:89:0c:70:dc:71:f6:32:19:3b:c7:4e:ac:2e:
                    5a:71:01:8f:80:05:f3:6e:2d:18:be:35:87:44:e3:
                    9e:e2:af:aa:83:d3:5a:83:8c:d1:18:17:71:87:bd:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:D8:BA:44:5A:0B:1D:8C:42:75:EF:02:A9:75:EB:D0:E2:99:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:73:c3:ea:43:b0:45:ef:8a:75:f5:10:6e:6d:1a:17:da:
         9f:d5:e2:25:3b:d9:6b:b0:c6:cf:fd:71:1a:7a:55:9d:98:50:
         25:e7:f8:f9:99:3f:99:ea:c0:75:e3:3f:c5:25:d5:c5:c3:39:
         40:ef:87:78:af:b2:d3:55:87:c4:7d:cc:a7:5b:69:62:64:78:
         33:38:f8:1b:4e:0b:f3:30:e6:92:42:e4:9e:02:77:b0:b6:99:
         da:4c:45:d5:87:cd:c0:ae:8b:12:3a:5a:ec:79:7e:bf:da:98:
         fc:77:c5:95:7c:a3:b1:7e:05:4e:2f:eb:53:4b:29:d9:c5:9a:
         ff:2f:c1:63:85:f1:ff:a8:d5:8c:7a:89:ac:6e:bc:a2:8d:de:
         71:e1:5c:fc:30:83:1c:27:d2:c5:2e:ed:54:25:0e:d6:61:f7:
         15:d5:be:e8:2c:84:c3:42:f4:7e:38:51:a9:1f:a6:3f:ff:2a:
         7d:2b:d9:5a:16:c8:3d:03:2d:d0:10:5b:1f:35:47:98:34:1d:
         6e:6d:11:d3:80:c9:cc:c1:d9:a8:34:d7:a7:b5:e5:cc:b2:22:
         47:0e:c3:d2:dd:7f:61:e3:c8:45:d3:9a:45:3d:9f:ae:7f:dd:
         e1:e0:cc:12:72:30:5e:16:6c:0a:85:d2:9c:5a:2c:fb:4d:2d:
         8e:32:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:14:57 2025 by rpki-client