Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7448e480-46d0-39fe-ac1f-4251fc3eed08.roa
File:                     7448e480-46d0-39fe-ac1f-4251fc3eed08.roa (raw, json)
Hash identifier:          xKCpQijvEYKKXT73xUNENSNGy7UE4lN4CzTFhSxLGwY=
Subject key identifier:   E8:4E:B7:59:ED:B7:25:EC:00:9B:69:7D:A5:4B:38:81:94:9D:E7:DA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849F71527F6DA716BF12A71F500
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7448e480-46d0-39fe-ac1f-4251fc3eed08.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     22953
IP address blocks:        132.219.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:27:f6:da:71:6b:f1:2a:71:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=bab74a18-2f56-4756-9069-3193051cae64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:df:e4:b1:6e:2f:2d:c0:d7:7e:69:d2:45:
                    d9:6d:e3:db:4e:ff:a4:25:0d:fe:a2:7d:d8:26:26:
                    c6:cd:4e:5e:89:50:45:5b:42:09:51:b9:b8:53:96:
                    40:49:a2:3a:56:fd:6e:24:68:cc:d8:31:f6:d6:45:
                    f2:7e:a6:e4:59:b2:6a:4e:fd:09:95:bd:1e:3b:84:
                    9c:54:e7:41:3d:cb:75:29:79:be:12:85:92:89:a4:
                    51:c6:73:d7:6d:8e:5c:e0:cf:c6:9d:a5:7a:c7:7e:
                    67:f5:a6:2d:3c:b1:2d:07:60:4f:d2:2c:43:cc:1b:
                    a5:3a:3f:3d:45:99:98:a5:69:e0:95:34:f5:e6:a1:
                    94:5d:fb:1e:4c:3a:78:00:63:df:42:0e:df:56:6c:
                    82:45:bb:70:55:2c:e2:f6:3d:fb:91:b2:e9:f0:79:
                    c5:b8:4b:f5:07:b9:7a:7f:a9:e8:0a:79:6d:96:9c:
                    25:01:e3:d7:0b:97:01:97:36:ae:8c:88:80:c8:85:
                    42:ab:2b:3d:bc:2b:5e:4e:5f:1e:a5:52:2d:03:b1:
                    7c:1c:80:b6:cd:46:7d:dc:04:03:04:1d:e0:0b:82:
                    b4:ea:f8:f3:76:8f:a8:1a:0c:24:5a:e3:a6:a8:bb:
                    28:2e:92:fc:09:80:ba:ce:2f:33:e4:c0:60:21:bb:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:B7:59:ED:B7:25:EC:00:9B:69:7D:A5:4B:38:81:94:9D:E7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7448e480-46d0-39fe-ac1f-4251fc3eed08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:07:a8:d3:c0:c5:f1:c8:ae:e5:81:5d:18:e7:62:2d:eb:
         90:8e:e1:24:4e:22:c7:94:c4:2f:1c:6c:c7:ff:1c:0c:6b:76:
         2b:07:db:50:91:24:ab:fd:c1:a7:47:94:ee:07:d3:40:ef:a2:
         48:df:33:f5:44:15:92:3d:7d:49:d6:b6:1b:29:c5:4a:a0:f0:
         09:a6:ce:91:c4:1f:d9:39:a2:5d:bb:31:8d:88:f1:e1:eb:55:
         d6:c5:9b:cc:73:2a:59:cf:2d:c2:ea:cb:ce:dc:d2:da:b9:63:
         e7:0c:e8:42:3d:ff:3a:55:8c:6c:04:46:bc:02:30:3c:dc:fe:
         ed:c0:8f:b0:10:e7:06:2a:87:8a:1b:72:38:78:48:e7:07:20:
         6f:28:69:2e:a0:88:ba:73:63:79:59:33:2b:6c:95:87:e4:2e:
         93:38:2a:89:01:e2:dd:94:d3:88:04:b7:3e:50:23:60:5f:1a:
         70:91:8c:f5:75:ee:f9:a6:62:50:dd:64:1b:10:b4:80:41:71:
         b4:79:57:6b:e8:f1:a7:5a:68:19:29:bb:ae:54:8a:ba:cb:2e:
         4f:13:d7:ad:4d:5d:6c:04:2c:fd:63:a9:9b:7d:d7:c9:88:4a:
         5f:1a:bd:64:e9:7e:07:93:70:42:1b:c8:ed:92:bc:d5:2d:50:
         e7:99:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:23 2025 by rpki-client