Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa
File:                     11cee1d9-72b0-33ee-8a5a-5853a7220542.roa (raw, json)
Hash identifier:          mQiDW/zgWVEgMq2huzCZWh7+222t0QDI4vAbnM7iwZk=
Subject key identifier:   B2:7C:F3:8B:39:49:99:2E:BF:03:61:33:46:96:E9:B7:36:D3:20:60
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584A3CE02C975EAEB7F3489141E0
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     46320
IP address blocks:        193.47.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2c:97:5e:ae:b7:f3:48:91:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=917575e1-e05f-472d-8f26-0aa4ca9df8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:e3:96:cd:b5:40:ee:63:37:74:83:a3:c8:
                    e2:c1:ab:a1:51:40:fe:e0:2f:13:1a:b7:95:91:00:
                    49:e2:1c:22:8b:f3:f7:d9:e9:33:d8:95:4a:57:e7:
                    ca:60:d7:4d:a5:2b:8d:f8:05:34:d4:08:b0:70:01:
                    bc:e4:65:b1:60:e5:33:fd:be:03:80:11:1f:d3:68:
                    0b:1e:58:6e:89:ea:57:ee:ad:7e:a2:97:01:3b:ab:
                    72:f9:30:2d:34:dd:12:fd:ee:75:7f:32:82:6c:50:
                    d3:70:59:91:32:be:6a:d4:57:cb:38:02:17:7e:59:
                    b0:2e:16:8f:e4:08:02:8b:35:d9:05:27:1e:87:cb:
                    c0:45:0f:40:d8:0d:97:f6:ec:a1:48:de:b7:27:c3:
                    e1:e5:34:d6:72:68:61:18:39:f1:79:ce:0e:8a:37:
                    08:c3:e7:2f:7d:73:ab:62:b5:3a:50:97:9a:d7:f1:
                    6c:3b:c3:45:2f:35:bf:33:7b:74:22:d6:de:a0:04:
                    3c:d9:7e:55:1f:44:cc:71:50:f6:b9:1c:a7:45:ea:
                    41:c7:0d:2c:93:4b:15:dc:9b:84:a2:2c:eb:94:d0:
                    fc:b3:3b:b6:fe:a8:82:4a:bc:c2:31:d3:39:87:eb:
                    93:4c:26:c1:a1:6b:f2:26:a1:c9:4b:f4:78:42:5c:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:F3:8B:39:49:99:2E:BF:03:61:33:46:96:E9:B7:36:D3:20:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:41:3a:3a:77:46:55:0f:e4:38:5b:35:26:3a:8d:a8:b2:
         76:11:0b:9d:30:3a:1b:3d:f6:64:d6:39:0e:5f:3c:e4:46:4d:
         0f:c1:a6:96:87:a9:69:da:cc:7f:a9:e4:40:15:7a:3f:dc:19:
         79:43:2d:59:a4:ce:51:de:cf:10:f3:46:19:ab:cd:4f:53:87:
         e7:97:49:a2:ae:7a:ee:f6:23:33:6b:7d:bf:6a:e6:58:50:49:
         05:f7:fc:bb:c8:5a:f2:a9:7a:00:9c:8f:23:03:c6:ac:7e:d6:
         f2:a7:be:1a:52:0e:4f:65:13:49:72:ac:31:78:0c:ae:8e:e2:
         39:37:5d:81:f8:f0:a7:bd:6f:b6:f5:da:b5:54:9c:ce:64:85:
         71:0e:2f:f1:29:60:4f:df:a3:6f:06:79:29:a9:90:6b:aa:bb:
         c6:78:82:4c:63:ed:7d:a6:c3:45:5d:7a:f4:2b:ae:1c:8f:55:
         7c:2c:56:2e:be:c3:df:f8:92:81:0a:f4:ee:a2:e5:da:1d:77:
         cd:d6:a3:5a:8b:9e:c1:af:51:e1:e6:17:d3:f2:52:64:3d:60:
         3f:82:7f:5e:f4:30:3d:de:28:2f:21:10:e2:e8:c4:b2:a9:d3:
         b1:ce:6a:8f:9d:17:cf:8e:c5:1a:3f:a2:77:4b:e2:5c:e9:88:
         c1:4e:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 13:43:26 2025 by rpki-client