Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa
File:                     06141f40-0ed6-3044-b153-d74b76cba921.roa (raw, json)
Hash identifier:          IXX6fKrw6Y2eYyHwD3fmf+hGcSRMwWW4Zx/3wzfiqm8=
Subject key identifier:   6F:A0:EB:FB:61:26:5B:63:13:36:86:E4:98:56:6F:2D:EE:8A:D3:C0
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A374AD1F912C205E3E1D3D100
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     30103
IP address blocks:        149.137.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d1:f9:12:c2:05:e3:e1:d3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=654f218c-d962-4fd4-b26c-f1cc92b1fd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:85:c4:52:52:d2:54:e8:73:02:b2:e2:b2:
                    39:5b:4d:9d:b6:55:26:e5:23:dc:1f:96:d4:f1:fd:
                    c2:64:c3:27:28:c4:c4:c2:dd:6f:7c:27:5b:a6:56:
                    ef:2b:70:bc:ad:9d:d7:32:4a:ee:df:16:3f:b9:c6:
                    7b:12:45:0b:e9:a8:70:6f:e7:29:45:e6:8b:81:83:
                    29:85:b4:66:04:9c:9f:6f:47:d5:1f:bf:af:b7:31:
                    b6:31:2d:10:b5:98:94:1b:3d:93:c2:2a:01:e6:bb:
                    7e:fa:1c:8d:31:93:5e:d8:6f:44:7a:4a:5c:40:9a:
                    59:9a:4f:bb:ac:a0:6c:1b:b9:e7:38:cb:b6:47:cb:
                    8d:20:93:f7:42:30:d8:21:a2:10:0c:43:f3:44:37:
                    d7:e3:67:8f:82:7c:40:60:7d:2f:30:33:e8:12:2f:
                    2b:9e:54:1e:96:c5:19:5b:7b:c7:93:3d:76:4f:7e:
                    d9:26:e1:c6:c0:fc:9a:cc:e9:2d:89:83:3c:0a:d0:
                    8c:2d:9f:98:87:88:25:83:40:6e:a5:a2:37:9e:17:
                    de:9a:d9:32:20:63:5b:a8:0c:3d:db:8b:14:42:e1:
                    b6:60:37:99:6f:45:81:f6:29:26:58:fa:a6:84:e4:
                    82:ba:02:a5:37:d1:6b:9b:3a:ea:02:ea:4f:07:ed:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:EB:FB:61:26:5B:63:13:36:86:E4:98:56:6F:2D:EE:8A:D3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/06141f40-0ed6-3044-b153-d74b76cba921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:f9:ad:da:45:79:f5:40:c3:3e:08:36:a2:03:66:1f:68:
         50:fd:9c:cd:63:15:58:f4:93:3f:3b:2a:82:74:69:e8:20:ed:
         fa:a1:eb:b5:2b:46:c5:65:8f:0a:70:a1:ce:a9:82:1b:a5:3f:
         6b:d1:c7:61:be:c3:a2:e2:c0:43:de:c1:4d:d2:dd:60:c5:69:
         a9:ae:45:8a:ba:4a:a9:60:54:f3:bb:7c:1d:60:f8:49:24:ac:
         5c:ae:db:cb:37:ed:a7:fd:31:cf:90:70:b0:7f:af:2b:c6:79:
         64:c8:df:3e:2e:30:39:a2:12:aa:9a:06:bd:43:cb:15:db:48:
         01:b3:1b:88:e2:1b:6b:b5:81:69:ff:2c:5b:22:4e:ba:4f:bc:
         7d:51:05:dc:8b:96:42:df:3d:76:0c:63:fb:3a:fc:96:a6:aa:
         01:75:7f:9a:30:76:ce:1f:92:f1:15:f5:5d:59:f0:7b:86:b5:
         4f:39:93:5d:00:9f:33:15:44:d7:08:5e:2f:29:4a:a1:20:0c:
         0a:ca:31:dc:7d:f3:f5:16:e6:8e:8f:d1:b9:52:97:b8:a8:7c:
         ee:f5:83:6a:be:01:42:be:84:86:27:52:a0:34:fc:3c:55:cd:
         7c:2e:47:53:18:d4:0f:31:54:f1:92:51:07:15:80:e3:4d:07:
         74:85:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:29:33 2025 by rpki-client