Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa
File:                     59304871-6491-3b57-9f1f-0458b6b92c46.roa (raw, json)
Hash identifier:          myuUtH8+t2KzZKHIPqlPY0b7cd/k7RnCAKTr4I6TJ+c=
Subject key identifier:   34:2C:20:9D:D2:A8:4D:EA:D6:43:6F:B3:29:E5:ED:BC:CB:F7:77:A4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A374AD2094C4B13E286054280
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     30103
IP address blocks:        149.137.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d2:09:4c:4b:13:e2:86:05:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=a276e0e7-b49e-4958-b6b5-d76c6ffc571c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:b5:54:28:cf:6b:95:6e:d7:4e:21:9d:f4:
                    43:b5:db:70:61:3f:ef:6d:36:95:b0:e3:5d:23:d5:
                    bb:81:41:36:fe:6a:36:db:ee:56:82:86:3f:00:6f:
                    20:43:9a:19:4b:8a:8d:af:51:d9:d1:e6:81:f1:97:
                    b2:9b:dd:c3:36:11:b0:30:76:62:6f:c3:59:d8:62:
                    ad:2f:d7:87:76:00:18:40:d6:80:fe:30:b5:09:00:
                    bf:2d:37:a6:b2:ab:a3:47:99:6e:bb:ef:9b:e5:4c:
                    ef:12:1b:2c:bd:b9:f8:1b:89:d9:79:29:14:22:ff:
                    54:e6:7b:2a:6f:7f:92:f6:68:55:da:85:de:9c:2e:
                    7f:c0:94:2c:e7:d2:9c:46:af:94:20:7f:1a:63:20:
                    a2:76:71:31:69:5c:15:d2:9f:29:84:07:6c:ae:92:
                    09:b1:5c:01:7d:17:a5:0c:94:3c:33:dd:24:43:22:
                    e9:7d:da:ba:6b:43:58:36:45:51:ab:d7:e2:7c:76:
                    ff:c1:49:42:fb:88:3e:bf:9a:39:57:6c:f1:30:c4:
                    ef:7a:c5:4e:e9:13:3e:b3:7e:ba:2a:ee:63:97:7d:
                    43:bd:1e:f2:ad:ce:8a:b7:ca:0c:9c:99:b1:c1:d5:
                    e1:34:63:7d:9d:60:e5:73:7b:60:58:21:b6:8e:cb:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2C:20:9D:D2:A8:4D:EA:D6:43:6F:B3:29:E5:ED:BC:CB:F7:77:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/59304871-6491-3b57-9f1f-0458b6b92c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:e4:b6:ef:fb:91:14:5e:15:f5:02:20:44:67:1a:9b:26:
         e7:64:d0:41:62:ee:cf:a3:2b:db:3a:f0:a7:26:d4:de:69:ab:
         5b:c8:7a:66:fd:23:7b:22:52:5f:9b:be:8a:79:bd:4e:48:f1:
         76:f9:c3:93:cf:96:35:7f:68:7c:e0:c7:5e:2e:8c:89:f3:4f:
         ef:4b:62:42:4c:90:b8:10:4a:77:db:c6:ca:5a:f5:bb:f6:aa:
         c8:9e:d9:74:be:38:8b:31:8f:d4:09:c9:d7:e6:ba:1e:2a:ae:
         d7:ef:af:02:8d:e9:37:b6:a4:12:7b:e9:d7:fa:dd:9d:ae:6b:
         7b:70:df:f4:f4:54:ec:2b:80:61:9a:ff:f2:9b:84:75:89:28:
         ff:ee:8c:97:08:7d:e9:2a:b1:28:f4:80:3c:c0:31:a2:4d:e8:
         3a:80:42:84:63:15:f0:05:8c:e8:d9:81:ba:55:fa:36:c6:fd:
         e3:63:2a:01:a4:c7:54:87:5d:ef:71:06:6b:69:eb:40:65:77:
         27:25:53:4f:c2:48:ab:b8:69:bc:b5:f1:96:64:93:6b:eb:96:
         4f:9d:10:8d:29:d8:d4:ff:49:ce:b2:0d:b9:ff:89:24:a5:c7:
         2a:45:27:38:0f:37:bc:20:c1:23:fa:c2:7e:a9:54:35:c4:de:
         2b:7e:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:38:49 2025 by rpki-client