Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
File:                     1f9591b0-4083-39f8-8942-3519df96e89a.roa (raw, json)
Hash identifier:          mLDChdh7TFv4TFnwIxbJ2kpD36AEl6js82Xlc4s1c9M=
Subject key identifier:   E0:9A:AB:4D:BA:A7:FC:B0:43:1C:14:FC:49:FB:FB:4D:D8:AD:0D:02
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F432858498339BFEAE54246E7E2E88CB0
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     30058
IP address blocks:        217.149.96.0/22 maxlen: 24
                          2602:fb1b:60::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:bf:ea:e5:42:46:e7:e2:e8:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=adf12686-6da6-4b66-aeb8-01bba574df33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:2b:ea:83:f1:3e:b5:b7:27:7f:3b:f9:1b:
                    3f:b4:2d:ed:fd:e6:ee:bf:5b:2d:e5:19:bc:bf:26:
                    5c:94:66:78:e2:e7:ab:d3:45:19:65:a2:f3:c7:a5:
                    e9:27:d9:61:2f:76:85:27:8c:49:cf:6b:4d:b6:1e:
                    b1:33:ae:23:27:d9:70:81:90:89:e2:e6:32:27:c1:
                    9d:57:01:4f:36:0c:af:ea:b2:46:35:b9:19:66:88:
                    dd:3a:40:f8:42:51:62:bc:9f:52:d8:1b:3c:07:40:
                    e5:f6:39:97:b7:f7:4b:cc:b8:77:43:72:14:b2:dc:
                    36:62:2d:37:e5:03:21:6b:d7:d1:78:9c:9d:5d:32:
                    5e:1c:77:ff:92:31:f4:09:3b:46:ac:a5:fb:47:b9:
                    24:73:85:85:07:98:a3:14:af:69:a6:51:80:81:56:
                    d7:28:47:a2:9f:33:c0:82:90:d4:36:a8:e2:97:82:
                    b2:c5:97:8d:8f:17:67:b4:7a:37:a7:c1:f6:19:4d:
                    e8:b6:43:3e:f2:99:9c:66:af:33:48:f6:34:6a:21:
                    46:00:e2:b5:55:ce:5f:17:d0:26:71:f2:e6:d7:16:
                    79:17:f6:82:8b:c1:8b:a7:82:22:27:a7:a1:ed:89:
                    d7:92:ca:a0:9e:f3:e5:8d:68:27:43:a1:47:b8:9c:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9A:AB:4D:BA:A7:FC:B0:43:1C:14:FC:49:FB:FB:4D:D8:AD:0D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.96.0/22
                IPv6:
                  2602:fb1b:60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:b9:de:34:64:c6:eb:4c:99:af:9e:20:a1:fd:9b:2f:1f:
         46:70:f6:8d:18:19:77:f1:17:9c:66:b2:25:e2:82:ec:4c:37:
         bf:c7:8e:06:7d:d0:d7:66:91:5f:f0:b2:f1:54:4a:d6:44:3f:
         44:40:e4:a2:8a:f3:66:4a:21:8e:3c:1a:42:e1:13:d7:2e:64:
         db:b4:a2:41:70:ce:73:c6:13:b2:40:ff:6c:5e:0a:80:97:8c:
         eb:21:9c:0f:03:56:eb:e0:db:33:2e:4c:24:15:58:0c:18:bd:
         88:65:1c:3c:18:7e:09:5c:ff:04:72:31:91:f7:43:9c:b3:46:
         4d:dd:9f:7f:b7:08:23:ce:3b:35:56:8b:e8:70:8f:13:ca:94:
         ba:eb:ec:c9:55:4b:a8:07:96:76:d4:05:a7:a3:6f:27:ff:93:
         d9:e3:f3:ae:8c:0e:32:98:39:6f:f1:fc:38:e0:37:de:aa:49:
         92:b4:4f:ff:07:11:c0:6a:42:9d:0d:94:f4:57:8a:e3:25:28:
         4f:ca:44:ce:21:04:15:70:7c:10:96:4a:ee:66:30:13:31:4a:
         d8:12:30:49:dc:90:c1:6c:f1:32:a9:a4:8f:b1:a8:c5:e4:5c:
         d3:25:0d:48:0f:60:0b:26:6c:b9:28:1a:ec:58:3d:88:7a:28:
         d6:68:f8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:48 2025 by rpki-client