Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
File:                     844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (raw, json)
Hash identifier:          u3K00FwN1CndlWKfkywVPy7h1gFUr7ySGzO4q7qxVeo=
Subject key identifier:   1F:A4:8B:61:7F:B0:85:EC:2D:D9:8A:D1:B3:56:2A:1B:C9:99:CE:E5
Certificate issuer:       /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial:       010D0C9F43285849F7150ECB6D80CF056DA9DCC0
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     10453
IP address blocks:        205.149.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0e:cb:6d:80:cf:05:6d:a9:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f0278679-b242-48c1-a6e7-c0d0def51724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:cd:35:91:6a:ff:13:8f:8a:fb:d2:dd:7e:
                    6f:3b:03:71:e1:77:69:76:7c:79:32:99:cd:94:3e:
                    9f:21:28:4c:82:5a:17:dc:ec:cc:b5:8b:83:5e:f0:
                    ea:ac:b1:c5:a6:d3:69:63:89:1c:3b:19:64:7f:4b:
                    6b:5a:b7:bb:4e:4c:33:2c:9b:17:8e:67:57:05:b7:
                    ca:62:9c:4f:66:56:49:27:d1:63:46:f5:91:df:8b:
                    53:5b:80:b1:12:46:d4:d1:e9:9e:ff:93:59:5e:7a:
                    a1:61:8d:0f:3e:3e:a9:fd:97:3c:3f:c8:5a:e5:3a:
                    36:50:2e:93:90:80:05:1a:72:a3:c7:87:10:9d:e2:
                    a0:12:2c:38:43:b6:11:d6:bb:c8:61:76:c2:16:5d:
                    83:aa:ba:76:a5:c6:95:ec:cb:2b:72:b4:f4:2a:10:
                    ee:81:d4:e7:35:10:a6:19:cb:fd:e6:9e:78:83:58:
                    a4:93:9b:a2:45:81:4a:7b:b8:0e:cc:82:1b:95:c9:
                    a2:ba:1f:fb:99:8e:8c:bc:11:c5:bb:cd:1d:93:ce:
                    02:47:28:c9:9a:50:46:55:9e:94:96:15:21:24:e0:
                    44:de:1d:ed:17:ca:a6:d4:be:19:33:8c:8f:9b:6a:
                    d2:f8:ec:5b:eb:53:4f:34:c5:96:91:9f:08:25:a4:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A4:8B:61:7F:B0:85:EC:2D:D9:8A:D1:B3:56:2A:1B:C9:99:CE:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:f9:cd:06:b9:bf:fa:62:4e:35:30:6e:9c:ad:6a:bb:9b:
         60:f1:7d:82:b8:4d:ca:da:4f:6c:10:c1:9f:85:a6:35:ca:92:
         ed:4f:9b:27:c0:54:04:54:5c:b4:47:6f:f0:54:ef:50:32:b6:
         77:d6:b0:f9:08:45:7a:51:87:e7:81:f9:b9:3b:dd:94:b5:b8:
         86:11:1f:03:32:a8:ad:4e:f0:93:02:22:77:66:ad:08:ca:dd:
         b6:33:ff:15:df:73:80:26:e6:76:53:9b:f8:52:bc:b6:3b:6a:
         cf:51:bb:58:1e:08:c6:47:3a:c5:d1:39:10:a3:76:cc:cd:e0:
         85:45:de:a1:15:02:21:d2:bd:d6:3b:f8:f9:c5:7d:16:f2:e4:
         eb:2e:f9:1a:9d:bc:2d:88:f6:38:27:f7:2e:72:ed:eb:38:aa:
         2b:1d:84:4d:1c:7e:f6:86:8f:07:c3:58:7c:bb:76:fe:6b:e7:
         32:a6:2a:71:6c:78:c7:9d:52:54:f3:1a:9b:15:62:c5:4b:0b:
         b7:24:7d:36:d6:75:6d:ab:8b:75:0e:a1:92:ae:ae:98:a9:78:
         27:54:12:bf:fd:3b:6d:43:02:4d:a4:4f:24:09:36:87:1d:5b:
         66:55:f0:86:48:5e:3e:f8:ca:2e:e5:8d:a4:ce:cb:af:6d:0c:
         d2:49:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:02 2025 by rpki-client