Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa
File:                     ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa (raw, json)
Hash identifier:          o1mQzg9uvrg7QZ6pGiNKuIYok54opuaLTIKMyFWiY/M=
Subject key identifier:   D4:0C:FA:EA:04:67:02:2A:AE:52:6F:C7:8A:F2:23:3A:B5:D0:AF:F2
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F43285849D62F3FCB46DBA313836D9B80
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa
Signing time:             Tue 13 May 2025 06:12:01 +0000
ROA not before:           Tue 13 May 2025 06:12:01 +0000
ROA not after:            Mon 11 Aug 2025 06:12:01 +0000
asID:                     25655
IP address blocks:        173.241.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:2f:3f:cb:46:db:a3:13:83:6d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: May 13 06:12:01 2025 GMT
            Not After : Aug 11 06:12:01 2025 GMT
        Subject: CN=c7b64273-03ad-45e7-88a8-03cd8516124c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:37:38:b2:86:a1:78:1d:35:c9:8f:74:3f:
                    86:10:21:a8:dc:40:8b:36:30:b2:ff:c4:bc:7c:8f:
                    a4:0b:66:70:de:4d:d6:44:cd:29:0c:cf:7e:a5:bd:
                    e4:5f:70:f6:33:83:d5:d0:b5:29:78:86:0c:8c:19:
                    9e:a2:23:14:e2:83:8c:a6:8f:0e:d0:3a:dd:a1:c8:
                    03:7b:c3:8f:4e:c5:02:76:6c:1f:b3:9d:a9:97:11:
                    25:a6:5a:f0:c8:20:2e:f3:85:19:c2:d6:cb:83:35:
                    aa:af:bc:72:c3:b0:c1:9a:9b:e6:0c:c2:05:ad:6a:
                    0b:a1:f2:5d:f8:eb:df:45:28:1e:66:3c:53:94:c9:
                    cb:73:28:93:29:e0:b2:15:71:de:dc:06:e9:3c:dc:
                    1c:48:13:ca:fa:e6:60:25:e0:b0:52:27:ff:b6:25:
                    e1:18:62:17:93:aa:17:ff:b2:e2:40:25:3c:e2:ea:
                    28:93:3c:0d:b9:84:9c:fc:3c:7a:07:9d:71:b6:d7:
                    5d:10:1f:79:da:93:9f:f0:ae:f2:dc:90:0f:ee:8d:
                    1a:df:81:da:97:d9:31:b5:45:7e:6e:78:1d:5d:59:
                    f2:8e:c5:85:f2:ca:5a:c8:f0:87:ec:59:88:e0:3d:
                    c1:79:27:42:8b:bb:e6:7f:d4:78:56:5e:62:e0:09:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:FA:EA:04:67:02:2A:AE:52:6F:C7:8A:F2:23:3A:B5:D0:AF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:4b:54:5a:ba:85:cb:61:ae:0b:c9:f9:e5:ee:9f:e7:a8:
         41:cf:f0:88:06:bc:5d:9a:6e:83:61:ce:09:bd:06:5a:6a:41:
         06:58:b2:3a:77:f1:68:96:4b:b1:b5:34:98:b5:13:99:f1:1d:
         ab:9c:7a:f5:73:4a:5a:32:3b:53:45:1f:09:41:43:a0:7a:3a:
         88:41:c5:b0:49:9d:d2:e3:1d:22:b0:8c:52:b0:f9:ee:c9:50:
         61:70:18:52:65:23:41:bc:a3:a0:7e:2d:6a:a6:a1:47:1a:16:
         3f:28:72:2b:c1:19:b3:d6:8d:9e:dc:0b:27:ff:9c:57:eb:8e:
         86:48:35:49:2e:e3:4a:01:7e:4a:ff:d1:bd:b7:46:d5:92:17:
         06:c7:fc:2c:be:46:e3:01:77:59:ab:59:8e:77:67:0c:74:70:
         54:16:cb:63:34:f5:0b:b4:3e:c7:46:34:4a:28:f9:68:c2:98:
         a1:ed:e2:f7:6e:e3:5a:99:61:ba:2e:d0:37:ea:1d:48:29:c2:
         25:83:28:26:e3:cc:ab:1e:f7:ff:26:7d:f7:de:45:fd:92:96:
         35:b7:a2:25:76:95:7e:68:ba:b2:9f:30:86:f7:7f:eb:7b:2d:
         f3:ac:db:d7:8b:6f:b4:57:d7:73:9b:b5:b1:4b:85:2d:58:e8:
         c2:21:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:36 2025 by rpki-client