Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa
File:                     f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa (raw, json)
Hash identifier:          VVkZyz0I8Ij+0obQvP4LJVRrACknLFURCR7DmRUyxIA=
Subject key identifier:   49:04:55:C6:95:39:0D:7D:E6:E1:2F:BD:AC:E8:53:71:5F:3B:8A:68
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584A43DAFA645CB2401BEF2BA700
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     399076
IP address blocks:        149.234.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fa:64:5c:b2:40:1b:ef:2b:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=ab7a5a6f-2820-47a2-a24d-e14be2621282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:36:a9:c5:5a:a3:93:6a:e3:09:0e:92:2e:
                    a3:40:89:2e:ef:91:56:9d:a0:3e:86:bf:e9:2f:1f:
                    28:a1:c9:8c:49:0d:f6:44:c5:cb:ea:57:42:55:d6:
                    9e:ef:63:d6:4c:fe:72:d3:ea:b3:a4:55:12:f4:4f:
                    fa:7e:52:b6:0a:7c:65:52:84:7f:e3:58:29:43:46:
                    e2:f2:12:f2:c4:7d:a2:55:0c:56:18:4b:05:43:38:
                    a8:a3:29:d1:94:66:cb:ec:af:41:85:74:79:f6:46:
                    0a:51:1e:10:d0:26:c8:5f:63:6f:55:73:e4:92:a4:
                    aa:e0:79:13:63:f2:1f:c0:0c:2d:2d:db:a9:a0:21:
                    59:d2:cc:36:c1:51:b2:84:9c:6e:e2:49:91:8e:d0:
                    6a:55:5d:cf:f9:b8:08:29:4e:2f:ba:6b:a8:2f:40:
                    f5:6c:60:33:cc:20:48:44:5a:7f:d4:86:c2:3a:1b:
                    88:73:92:e0:47:6a:4e:7d:b2:c2:df:68:17:0e:13:
                    07:7d:cb:c7:e9:79:83:d4:9a:ac:af:a0:27:0b:9a:
                    a8:86:35:09:44:5e:e7:97:c1:5f:83:1b:63:ad:c0:
                    1f:9a:a7:24:b9:e5:5f:6d:b0:f1:8a:0a:42:9e:d6:
                    89:6a:1a:a6:68:cb:dd:6d:13:3a:a0:8e:46:73:46:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:04:55:C6:95:39:0D:7D:E6:E1:2F:BD:AC:E8:53:71:5F:3B:8A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:8a:d3:10:ef:08:f9:52:e0:43:52:d8:e5:c3:84:5d:90:
         df:7e:e7:51:a7:16:59:c3:58:0c:cd:f9:03:25:91:b4:88:c4:
         71:77:24:bf:5f:19:12:52:eb:5f:fc:5b:15:18:98:54:89:13:
         77:fb:b2:9f:ed:81:e1:3b:93:19:fe:7c:d3:52:38:31:be:19:
         00:d2:eb:68:bb:c1:2d:eb:c5:b5:2c:46:55:db:a5:a7:67:5e:
         78:17:cb:3e:f7:8e:f9:6b:40:fe:16:db:0f:72:50:43:32:63:
         24:fc:0b:14:82:61:de:d9:95:1c:1d:f1:73:85:a5:e6:b4:4c:
         76:e7:4f:cd:fd:ef:a5:7d:fb:a2:12:3a:e6:36:15:a9:1e:4a:
         4d:04:26:a1:6c:3d:de:f8:b9:53:96:d9:12:35:fb:d4:18:e9:
         c1:80:99:1c:35:e3:d9:17:ac:8a:f8:ba:db:5e:b0:ea:fe:0e:
         41:f1:1a:35:a7:7f:81:bf:2d:93:b2:d4:5e:a5:1a:ba:d4:9b:
         6f:5e:ee:95:bc:d5:24:5b:ac:c6:4e:65:73:ed:b1:be:ce:9c:
         0a:ac:fc:43:9a:62:29:64:08:7e:83:e9:a3:a3:21:74:c4:1d:
         67:74:7d:02:e4:ca:4b:e4:7d:ba:90:99:7c:6b:f9:22:85:29:
         a3:51:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:29:44 2025 by rpki-client