Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
File:                     48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa (raw, json)
Hash identifier:          55M/WJLWtc7frf+ATED8ablQAIT+E2SCoqFVhp90/Ic=
Subject key identifier:   4B:D4:45:CE:33:27:C4:E4:66:FF:AE:EE:3B:58:19:80:1B:BF:95:D8
Certificate issuer:       /CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
Certificate serial:       010D0C9F43285849FE0FFC086CD99FDD1119AD00
Authority key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     8075
IP address blocks:        195.85.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fc:08:6c:d9:9f:dd:11:19:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=cc4aee74-678a-4486-806c-23ef6a6fed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:0d:37:61:10:c3:44:b9:cf:6b:b5:aa:56:
                    35:ed:2c:4d:30:64:a8:0b:d1:3f:67:5a:7c:1c:d6:
                    2f:50:ba:6e:dd:26:5b:c0:41:e0:28:ec:7d:8a:f3:
                    d9:84:d8:ed:73:54:38:4d:e4:9f:38:f1:6d:f2:71:
                    01:5b:0e:79:57:d2:aa:e1:bd:7f:df:6c:bd:b5:9d:
                    3c:91:7b:0b:fa:cc:fd:30:44:eb:50:b5:ca:7c:44:
                    6b:e8:12:88:38:90:c2:29:6d:78:27:55:73:da:c7:
                    51:7c:3d:58:5e:ec:3e:7d:b5:e6:cb:e6:dc:b3:61:
                    47:02:9c:3d:18:bc:f9:78:01:6c:37:d7:29:e6:bc:
                    97:af:10:89:f3:d8:32:52:b9:ab:dd:00:7f:c8:17:
                    5d:e6:4a:94:22:b8:0c:79:b6:fa:9b:b0:4e:21:9b:
                    93:02:0e:6b:c5:83:4e:96:b6:d9:04:af:ca:aa:56:
                    20:ee:9c:76:16:f2:05:cd:89:ee:c0:e0:04:00:9d:
                    d9:e9:82:d6:65:e3:53:3b:2b:dc:98:e8:99:02:cb:
                    36:ba:fe:c7:43:eb:ac:c9:85:53:6b:39:78:3d:a9:
                    2f:c2:36:9c:51:6c:52:59:f3:60:d4:30:e8:ed:11:
                    99:7e:0a:44:91:0e:ec:4a:4f:e5:a0:07:84:45:e2:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:45:CE:33:27:C4:E4:66:FF:AE:EE:3B:58:19:80:1B:BF:95:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl

            X509v3 Authority Key Identifier:
                keyid:00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:da:0e:17:46:52:89:1f:bf:1a:25:a2:76:e6:e1:ed:8c:df:
         40:76:22:a3:08:80:29:90:df:b5:1d:ff:df:07:7d:28:01:5b:
         6c:d1:e5:be:52:5c:ed:33:8b:59:b4:68:1f:cc:c9:79:6b:8d:
         9c:1c:be:0d:a0:23:93:ee:49:90:31:4e:9d:0b:2d:9a:2f:be:
         72:a7:1a:08:2e:e0:22:6b:34:cc:9d:f8:1d:cb:2b:e0:5b:13:
         17:6f:3e:1f:9b:fb:01:99:07:2f:b2:12:e5:bc:80:96:e2:bf:
         95:1c:1b:5c:3f:ae:1b:08:57:b8:2a:1c:f4:1d:e8:ef:74:4d:
         7a:60:ac:76:85:30:fe:9e:ed:43:3f:52:da:00:21:66:9a:06:
         4d:30:6f:4e:2a:43:ff:61:87:62:c2:16:c3:e9:63:56:ff:0c:
         0d:e5:c6:a9:ab:4d:d6:cd:88:b8:53:6e:26:e2:e2:3b:c8:01:
         6b:fa:d1:b8:cf:cb:bc:6e:be:8f:73:eb:51:e4:96:17:38:41:
         fd:ef:eb:cf:11:cf:14:7a:8c:33:bc:67:d7:61:ca:bf:20:b9:
         e3:e1:70:fb:78:df:4d:63:6a:78:ba:43:38:42:96:a3:c6:a7:
         dd:93:9f:7d:71:e7:a3:c6:ae:c6:53:73:4c:35:36:6e:c2:6c:
         86:ce:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:14:05 2025 by rpki-client