Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/048e03a5-e1ea-35d3-8b61-81e4eabbb7dc.roa
File:                     048e03a5-e1ea-35d3-8b61-81e4eabbb7dc.roa (raw, json)
Hash identifier:          lBUccwBvbS2TBh58Ly3q6mKvLCIrd4c0Xh+KQPjn64c=
Subject key identifier:   1D:D0:98:2E:5D:10:5E:A0:2E:4C:38:62:9B:90:E4:6D:E6:7E:D3:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A88409F3F27D9D335DD8C6DC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/048e03a5-e1ea-35d3-8b61-81e4eabbb7dc.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     11427
IP address blocks:        168.148.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9f:3f:27:d9:d3:35:dd:8c:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=f1176681-34a1-483c-b818-335706ca4a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:07:20:8c:fb:b0:22:1b:fe:b5:2f:69:62:
                    a4:b8:7e:45:9a:b9:47:e9:ad:a7:85:fe:b3:ea:2b:
                    ad:63:35:73:a1:28:c5:db:b3:c5:8a:4f:88:cb:6d:
                    9d:fc:6d:28:13:2b:b1:47:bc:de:6f:32:79:a6:be:
                    83:7e:bf:1f:5d:38:d8:b7:56:35:02:35:e8:a3:df:
                    e1:45:0b:6d:56:fa:bc:44:1e:34:58:a1:ee:7a:45:
                    f5:0d:70:9a:b8:35:be:6b:80:4f:ec:67:f7:5f:d0:
                    23:4b:a5:3c:a5:99:35:6e:4c:cf:b0:f5:87:1a:7c:
                    32:2b:09:17:ee:be:53:6a:50:d2:d4:36:e8:10:b4:
                    ce:07:f9:cc:35:34:7a:94:e3:86:90:42:7e:3d:03:
                    cf:76:d4:2d:5d:2d:b3:fc:21:69:bb:c1:a8:67:a1:
                    47:9a:19:bb:54:6f:06:93:c3:e0:dc:67:76:61:fd:
                    c2:5d:ff:40:54:b4:ab:69:df:63:8b:36:bc:8c:55:
                    97:bc:d9:09:28:75:72:6e:64:d9:af:d6:c9:f7:98:
                    75:ee:3d:65:48:a9:bb:64:89:c2:c7:5e:2d:f4:4e:
                    d8:07:72:fe:48:60:4b:e1:d7:39:62:7a:4d:e1:9b:
                    1d:d2:55:80:ad:71:99:ab:68:4e:92:53:3e:a3:fe:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:98:2E:5D:10:5E:A0:2E:4C:38:62:9B:90:E4:6D:E6:7E:D3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/048e03a5-e1ea-35d3-8b61-81e4eabbb7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.148.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:02:26:cd:c9:b0:f1:59:ba:14:be:f5:d7:bc:2d:83:e4:
         a2:c7:30:0c:f0:7a:e1:b1:8d:3a:72:f7:0d:af:d2:e3:d3:7f:
         1c:10:c6:eb:4b:3e:97:69:21:59:66:8f:b6:c1:66:a0:36:1e:
         bc:77:5e:7e:65:c8:33:22:87:81:1a:a7:d6:db:ea:f4:43:7d:
         54:e5:51:69:f5:2c:f4:80:f1:e6:58:ea:4f:8d:f8:df:a8:44:
         7e:eb:47:68:98:67:d0:97:df:98:58:a4:28:f1:1d:2f:f0:c9:
         21:b5:cc:88:9e:39:b5:48:80:1e:29:ca:42:51:49:0b:c4:b4:
         08:59:d5:b7:b7:14:32:0f:e3:39:ea:4d:f8:86:11:c3:e7:8b:
         3b:8b:a9:8c:fa:14:6f:ac:b7:31:86:82:51:db:91:9f:53:cd:
         85:ca:08:66:28:7e:59:73:6a:d9:de:d3:60:0a:0d:5e:bc:28:
         fd:26:75:1c:1d:51:0d:74:60:47:0b:39:8a:a0:07:34:e6:40:
         a5:93:9e:94:ff:db:1d:f5:c7:59:0c:2f:18:9d:9b:fb:30:a2:
         07:be:1d:61:9d:ee:53:7d:2b:24:cd:44:fc:3a:0a:9e:40:c7:
         87:e8:46:2d:33:3e:5d:82:62:29:b6:f9:73:f8:6e:27:bf:40:
         dc:74:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:35:32 2025 by rpki-client