Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/4b368967-35e4-3ce8-870b-e3045172fb69.roa
File:                     4b368967-35e4-3ce8-870b-e3045172fb69.roa (raw, json)
Hash identifier:          Cu04C2ggmn+ua2MCN/aJJJKvFO3qZiVK46vtY1DkMbs=
Subject key identifier:   AE:42:7F:37:B4:12:6E:8F:2C:48:85:55:40:92:70:3D:51:5A:1D:5F
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584A5E60683761DC108273015080
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/4b368967-35e4-3ce8-870b-e3045172fb69.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     46320
IP address blocks:        148.222.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:68:37:61:dc:10:82:73:01:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=68e82984-20eb-429c-8670-da7d652b94e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:e5:d0:d4:cf:96:54:a4:6f:bd:9d:46:be:
                    ac:8c:a0:87:c5:ca:8f:2b:a4:b2:3f:c2:e5:84:a4:
                    c9:51:52:b9:bf:92:a9:6d:fe:ed:09:fe:8e:91:21:
                    53:87:ea:09:07:98:37:03:98:9d:3b:fe:a4:4c:39:
                    b8:9c:40:30:71:e5:b7:3c:47:87:28:25:5a:2b:db:
                    d8:dc:1c:a9:47:f5:fa:8e:31:e8:57:5a:ef:91:79:
                    75:1b:d4:e2:0a:5b:d5:a5:ef:d7:44:40:cc:15:6a:
                    10:f3:31:da:33:b0:67:d1:75:ba:fe:21:73:55:5c:
                    4c:9c:31:e8:97:97:90:3b:c7:ed:e7:b2:12:f1:4f:
                    81:f2:54:79:79:42:4a:13:10:46:6d:8c:2e:23:92:
                    c8:8c:f7:a6:cc:38:b4:41:a2:6d:d3:7f:40:1d:60:
                    94:41:f7:7e:e9:af:35:d0:01:93:1a:7b:65:f9:8d:
                    35:02:77:97:b3:d7:bd:c0:0e:06:e0:2e:61:13:82:
                    f6:a4:b0:16:ee:7d:d1:60:41:4d:a5:84:52:1f:e7:
                    c1:a1:80:12:98:6f:04:35:7b:27:a3:54:1c:eb:10:
                    9b:92:c1:58:0b:4f:ee:da:a4:7c:4d:ce:f5:8f:14:
                    55:30:64:ad:58:24:70:85:dd:2e:9f:a3:fd:2c:59:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:42:7F:37:B4:12:6E:8F:2C:48:85:55:40:92:70:3D:51:5A:1D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/4b368967-35e4-3ce8-870b-e3045172fb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:76:cd:38:a7:36:36:f8:44:73:c1:3f:a8:a6:80:39:a5:
         2c:3a:d2:1f:7d:1d:9b:46:6c:03:4c:55:88:cd:e7:34:3a:7c:
         21:94:78:ad:bc:9f:b0:ac:ed:de:7f:3f:ce:c1:f4:79:77:22:
         ac:de:16:96:7a:76:3d:8b:e6:e3:dd:50:8c:b8:cc:c1:ff:db:
         57:b9:a3:b3:43:8d:b0:60:a8:b7:18:40:fa:05:ab:ca:95:3e:
         81:ec:51:42:64:f9:28:94:e2:e7:79:63:0f:8d:c2:35:43:5b:
         cc:46:72:f7:2a:a4:be:6b:88:60:8f:9b:a5:41:9c:de:f9:88:
         bc:e5:64:6f:df:e1:e8:85:f9:40:27:eb:60:74:87:97:7a:ea:
         73:0f:a9:80:70:1a:bf:f0:fb:e7:a5:81:44:23:42:ce:0b:82:
         66:61:6e:59:ec:80:8f:1d:96:7e:10:8f:27:5f:5e:5b:10:2a:
         fa:8c:a7:6f:4b:7c:23:9e:07:4d:f8:64:8f:5d:82:3d:3a:5f:
         99:09:0a:63:3c:bc:4f:e4:91:52:a1:96:d3:6c:bb:3d:44:f4:
         1c:7f:05:64:91:ee:10:9a:45:2e:38:b8:fe:83:1d:6c:f5:b5:
         ca:c8:0d:7b:73:51:1d:1d:0f:ed:54:73:20:16:77:9d:6b:e0:
         d1:1d:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:49:30 2025 by rpki-client