Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa
File:                     d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa (raw, json)
Hash identifier:          Q3WEERjo7j/6szGbkxzUMN/ZvorEOsyPdOUEhjD8pE4=
Subject key identifier:   F2:AC:D4:3A:E7:B3:EE:B1:ED:4A:D3:44:57:46:F7:3A:A4:B5:2F:8E
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849E7BA8A253317F78B6A209F00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     270856
IP address blocks:        169.145.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8a:25:33:17:f7:8b:6a:20:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=d3ca9c96-577c-42fa-b93f-7677f85f5ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:56:5d:86:c3:e9:0f:c5:80:58:18:4c:99:
                    d4:72:56:e7:32:88:c0:91:bc:40:b8:05:c9:97:9c:
                    a7:0b:c3:26:bd:80:20:8e:ed:88:a0:70:d7:d5:b9:
                    59:5e:fa:8e:d1:57:20:84:61:bf:1b:57:8b:ed:a6:
                    fc:47:7e:44:ab:d4:80:6c:42:7d:ae:29:fc:99:7b:
                    4a:38:3b:f3:41:ff:1d:1a:76:9b:2f:93:3b:cf:fe:
                    9c:6c:b6:4e:5d:4f:31:00:f9:0d:33:b3:d6:62:9a:
                    7c:ba:67:3b:f9:c6:1b:41:75:64:fc:94:96:9d:67:
                    b0:9b:eb:f7:e6:a3:13:51:b0:1f:90:2d:a1:9b:94:
                    7e:42:c7:cf:33:da:bc:df:68:71:d9:4f:8e:e5:b3:
                    70:7b:fd:ce:2f:67:df:bc:30:2e:52:a4:95:90:38:
                    df:55:2b:f7:87:d0:e4:30:87:5a:39:61:c2:cd:ca:
                    55:82:24:97:91:8d:b8:fd:28:de:2f:80:ab:82:3f:
                    b6:4a:15:48:1b:0e:e7:ea:b6:f2:03:bd:06:2a:f1:
                    6b:1d:75:c9:18:2d:f9:cb:1c:bd:5b:0a:20:e1:9b:
                    58:76:26:b1:98:4d:14:6a:de:dc:a3:ae:b0:3a:da:
                    3b:d9:2b:52:f5:ba:d5:82:74:1f:11:3d:17:74:b8:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:D4:3A:E7:B3:EE:B1:ED:4A:D3:44:57:46:F7:3A:A4:B5:2F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d8fba780-abfb-3268-92ad-ea1704dd0e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:54:e1:49:0f:73:30:7e:8d:38:9c:cb:8d:ba:c7:04:8d:
         18:7c:34:6c:15:a1:aa:6d:a5:48:69:ea:36:29:1c:80:99:d9:
         aa:4f:e4:bd:90:19:ee:08:e2:fc:b6:e7:3a:57:04:b2:46:01:
         c7:31:d7:94:0a:80:b5:84:bd:77:27:a7:b0:88:9d:81:66:94:
         b0:8b:9d:e5:46:69:98:49:ad:6b:5b:91:02:4f:51:96:27:9d:
         49:99:d3:84:ae:ca:41:b5:d8:eb:4c:77:48:d8:96:73:91:27:
         2f:50:2a:31:d8:36:e5:ff:cd:d1:7e:9c:ec:81:df:ea:3d:08:
         42:00:6c:71:fb:4c:1c:84:a8:15:9b:97:e7:19:67:86:bc:9b:
         fd:c4:18:57:cd:74:e3:29:cb:25:06:85:9e:d2:fe:40:a9:1c:
         e0:82:12:a2:96:15:cc:e6:fc:e0:f5:f8:51:1a:a5:f0:fd:9c:
         a7:2e:80:9b:48:50:0a:51:f1:2f:31:a5:98:4b:30:2e:06:46:
         a0:9b:df:43:d7:b3:4b:f8:da:f5:a4:b4:42:fb:55:8a:f1:a7:
         55:80:78:06:2f:81:02:d7:32:f8:ad:6a:34:d2:b8:d4:12:9c:
         a5:05:96:9f:4b:86:d8:af:ec:fd:ea:90:62:28:87:0d:d4:46:
         aa:df:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:54:09 2025 by rpki-client