Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e522dd5c-f400-35c7-ba14-ae90ad9584d1.roa
File:                     e522dd5c-f400-35c7-ba14-ae90ad9584d1.roa (raw, json)
Hash identifier:          a7Jml/9t6eCTFkBmoZbgHNLlD4T1Wcm/wRVGcJP5QEQ=
Subject key identifier:   2B:62:46:81:EB:73:13:D4:28:DD:F0:FA:FE:EE:10:8D:29:82:8D:92
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285849E654F8D47A4751A8AA445600
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e522dd5c-f400-35c7-ba14-ae90ad9584d1.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        155.226.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f8:d4:7a:47:51:a8:aa:44:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=9494296d-4bb7-4197-b210-319fe3c5810d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:7f:5a:f0:21:30:a9:43:ac:22:b0:a2:23:
                    94:cf:37:89:a0:09:f3:59:f6:bb:d6:c1:b0:39:70:
                    ab:22:7c:85:2f:08:59:cf:4c:75:1d:e8:0d:22:e3:
                    c4:52:63:7c:9a:0b:22:b8:4a:cf:d6:bc:1e:7a:be:
                    d6:94:ad:81:ca:dc:49:a0:ed:a8:40:d1:be:df:1c:
                    34:4e:b7:51:15:45:4d:7d:f1:6e:32:ee:30:8e:21:
                    2a:59:23:2b:b9:80:24:ea:06:77:96:35:84:c2:1e:
                    61:77:78:f5:07:02:11:39:64:9d:99:bc:35:ea:1c:
                    56:b6:9c:74:67:d6:e6:f3:02:93:95:9b:91:84:e1:
                    5a:ac:92:d0:e8:bd:c2:6c:e9:87:d8:93:2e:d5:9b:
                    7a:48:cb:ca:85:b6:5a:86:d2:72:be:4b:b7:a2:83:
                    13:fc:9b:5b:5a:1d:81:dd:a1:c7:67:b0:87:3a:62:
                    7e:4c:09:df:6f:f7:bf:ff:2b:fc:9a:95:65:14:80:
                    b0:05:6d:61:5a:b4:15:10:dd:93:3e:cd:58:cd:c8:
                    93:56:28:5f:3a:85:b5:62:1f:35:2c:12:80:c4:90:
                    8d:c4:4a:99:6e:e4:2f:fb:a0:c3:37:24:72:3c:ff:
                    c4:20:49:87:92:65:63:66:26:6e:61:47:a1:d9:fe:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:46:81:EB:73:13:D4:28:DD:F0:FA:FE:EE:10:8D:29:82:8D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e522dd5c-f400-35c7-ba14-ae90ad9584d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:f1:05:de:46:55:ef:26:d2:1c:37:ba:91:b7:65:ca:22:e8:
         80:fd:11:44:41:2b:c0:ea:d1:85:cf:35:46:b4:93:b6:96:33:
         4c:b7:1b:90:fc:c2:5b:8b:de:4a:59:b6:3f:41:8f:75:47:17:
         a8:61:16:25:fa:82:28:0a:37:b1:66:72:2c:70:0f:14:c3:81:
         ae:04:11:7f:63:4f:80:53:93:0c:f6:96:61:c5:88:fa:37:3b:
         f3:2e:d8:ad:a1:ff:f8:40:b1:0c:de:a7:27:65:2b:9f:41:9c:
         cd:02:7b:98:2c:9d:56:1d:50:81:23:17:2a:37:b4:96:ab:d3:
         71:ae:a8:5e:11:b9:dc:78:3d:b5:b2:c8:c1:28:7e:9e:88:06:
         f9:36:26:a9:4d:82:67:6e:9e:08:89:a7:43:7c:ea:e4:b8:a3:
         71:1f:67:81:e3:8f:2d:cd:1c:5f:0a:74:cb:4c:79:50:62:9e:
         b0:53:a0:6d:d3:7b:39:b0:0a:46:71:63:72:34:3a:83:a9:cd:
         2a:77:27:ea:cf:96:b6:57:ed:4a:fb:cd:ec:c2:c5:0f:bc:be:
         ba:9a:ee:cc:b3:3e:25:3b:aa:25:a6:0c:c3:f6:40:fb:bc:37:
         d4:08:99:ed:4b:4c:5c:02:bf:0a:44:c2:c2:bb:a3:ab:32:15:
         38:d3:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:50:36 2025 by rpki-client