Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f51b5871-36d6-3173-b368-09f9426f46d8.roa
File:                     f51b5871-36d6-3173-b368-09f9426f46d8.roa (raw, json)
Hash identifier:          WGNi8Htw63Gtl6yaj9gAPIZ49HLv9arfDo9Jcir53Ko=
Subject key identifier:   39:69:74:C6:85:23:7F:EB:19:A2:CE:A1:B9:FD:F7:16:ED:B4:A9:68
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858490E16C554A85960FFE7809C50
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f51b5871-36d6-3173-b368-09f9426f46d8.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     27235
IP address blocks:        65.119.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c5:54:a8:59:60:ff:e7:80:9c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=39ab59d8-db15-46a3-ad83-0a2fb5ced042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:48:9a:ef:d2:2a:98:10:81:1d:8c:c5:3d:
                    55:e6:01:8b:46:b0:52:ae:86:b8:a2:c2:95:54:c3:
                    87:ee:a4:08:6e:84:48:cf:c0:c1:47:14:cc:cd:24:
                    b5:43:ac:bc:11:31:ec:0f:57:68:5d:28:00:a4:86:
                    88:6b:e0:cd:f6:46:0f:97:e4:63:52:f4:b1:f2:e2:
                    e5:1a:c8:c8:38:8b:f5:7f:57:48:9e:b7:6a:2e:7f:
                    00:59:7c:50:b6:34:12:cd:32:62:d3:2d:48:05:ea:
                    b1:9e:54:b7:a9:83:4c:16:9a:43:a2:8c:2b:e9:8d:
                    d4:6d:db:80:09:19:05:f0:76:e9:df:cd:2c:c3:16:
                    cd:c2:dd:ea:75:bd:65:15:c6:ad:d4:9d:60:e7:87:
                    e7:92:b5:97:1f:c8:4a:9e:cf:87:1d:b7:e2:82:8e:
                    ea:2c:5c:96:59:3e:3b:dd:7a:76:a4:c0:d6:f6:89:
                    8c:85:db:10:2d:d3:0d:c6:88:e2:ab:a5:d2:c8:d1:
                    dc:2c:65:21:90:bf:20:83:be:86:f1:3a:dd:02:16:
                    6e:38:db:62:5e:f1:7c:87:05:3a:33:d2:45:1f:05:
                    b5:3b:53:aa:8e:37:05:b2:a0:ec:72:6f:2c:2a:87:
                    82:72:52:13:3f:5a:4c:e7:46:1b:b9:93:08:ed:b8:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:74:C6:85:23:7F:EB:19:A2:CE:A1:B9:FD:F7:16:ED:B4:A9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f51b5871-36d6-3173-b368-09f9426f46d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.119.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:32:94:f7:24:c9:50:5a:41:3e:bc:f2:79:54:1d:4e:2f:
         d7:c3:c4:ca:bf:b6:f4:f7:71:92:b4:a3:2b:66:59:48:61:01:
         8f:7e:be:96:04:41:7b:55:f5:5d:1b:f1:41:36:ed:ec:ae:b2:
         ea:af:e5:5e:22:19:b7:25:b6:11:99:3e:c6:42:e5:58:49:4c:
         51:8a:73:37:63:0a:8c:d1:92:9f:75:e3:31:24:c3:a3:04:1d:
         c0:63:c3:db:6c:db:f2:07:36:5e:56:b4:08:dc:eb:e4:28:58:
         d7:54:48:f6:12:53:33:11:cb:8f:4e:26:c0:1a:05:67:76:53:
         68:18:94:ea:e8:46:56:c2:74:f2:8e:cd:b9:ab:c2:a8:50:62:
         98:be:03:8d:8c:e2:d2:e5:ef:87:07:23:09:94:5c:d9:12:60:
         4d:a5:48:1a:36:b1:c2:77:7c:91:36:d8:27:f5:59:7d:2c:c3:
         27:14:c3:06:3a:56:7b:d8:4d:cc:37:89:8f:37:58:5c:fb:c1:
         af:7a:28:39:6e:bb:90:e7:81:9c:6e:05:e1:38:0b:7c:66:82:
         10:57:82:5e:a8:cb:9a:b2:53:f1:4b:26:b7:37:23:17:94:d2:
         50:f6:18:bd:52:44:68:59:ea:30:73:bb:51:46:f6:b4:35:4e:
         96:cb:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:39:24 2025 by rpki-client