Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
File:                     23aa5ada-e8c6-3774-8704-d313c1478c4a.roa (raw, json)
Hash identifier:          zdMeSmn3nACvoPx6JevgaR1zR+FwqzGap+zJ1wjNubk=
Subject key identifier:   0A:77:84:AC:1B:12:18:E4:2D:7A:D9:26:3D:95:B9:E5:B1:C1:BB:E6
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F43285849D85F87F846B7C094F52184C0
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     19331
IP address blocks:        192.199.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:87:f8:46:b7:c0:94:f5:21:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=fa1ecee8-c15a-4b2a-b6ef-3babf3af0dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:1a:af:af:5c:2c:db:e6:57:92:50:ec:07:
                    65:2d:87:ef:a3:7e:e7:97:0f:c1:12:3a:6e:66:60:
                    38:d1:e8:65:16:fd:ba:09:63:ad:c5:bf:21:c5:39:
                    90:08:a4:af:47:bf:a7:5f:7f:97:85:82:4a:a6:a7:
                    a9:0b:41:b6:a4:c7:51:9f:93:14:d8:a9:ed:33:e6:
                    70:52:03:3d:63:18:30:a6:41:de:4e:b5:bd:a0:f7:
                    eb:e0:13:da:c7:d3:48:c6:2a:e1:7d:a6:87:0c:3b:
                    77:e1:2e:bf:b1:55:15:cd:79:e9:93:07:df:b6:4f:
                    bc:ae:7e:70:e7:e5:99:ad:44:8d:75:0d:ee:df:3f:
                    3a:d1:b8:e6:1e:7b:29:d7:d3:78:69:f3:46:ed:a1:
                    5c:3e:ff:b7:9f:f8:24:17:53:b7:e5:5b:ec:13:6e:
                    be:c6:38:7f:ef:7f:0c:88:2b:37:4b:55:94:c7:ce:
                    10:48:9a:a8:b1:46:e5:bd:cd:35:50:13:be:cc:f0:
                    e5:57:47:bd:03:37:ab:9b:c0:65:c8:a0:c6:8d:f2:
                    95:60:f9:db:4a:be:fa:3a:a4:b4:c2:d1:18:10:be:
                    46:21:4c:b5:1b:2c:a1:e3:b6:33:1a:98:81:9e:a8:
                    7c:c1:99:83:68:ed:da:8a:26:10:d9:c1:84:ab:ec:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:84:AC:1B:12:18:E4:2D:7A:D9:26:3D:95:B9:E5:B1:C1:BB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.199.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:d1:48:67:83:11:26:b6:cf:c1:97:3e:fe:8c:af:4f:36:
         6e:a0:ad:40:c6:64:4f:96:61:8d:83:20:58:96:23:75:07:b5:
         dd:c2:f4:31:72:fb:1f:b2:e0:10:34:0d:47:35:72:65:8a:c4:
         9e:51:ed:9b:0f:0c:de:00:a8:f6:1a:13:ca:38:61:36:05:86:
         58:d3:e7:04:11:9d:56:b8:4b:47:20:ca:9c:c6:4a:cd:d5:49:
         34:67:b8:56:ff:f3:31:b0:14:9b:e7:89:41:5c:65:9e:7e:e0:
         7a:06:d2:d0:55:a0:86:98:41:18:99:e4:cb:39:d9:54:15:66:
         52:13:27:bf:83:b1:32:de:21:66:fb:ad:d7:a7:77:b2:72:c5:
         6d:3c:b5:0d:d7:d7:c3:89:c8:29:48:6b:6e:16:55:fb:78:b5:
         bd:f2:e0:0b:a8:78:d2:18:fb:25:98:6a:33:38:fd:77:cf:01:
         e0:73:ea:70:73:81:86:54:3e:f0:99:78:5b:98:58:5e:73:76:
         f9:a1:ec:06:8e:3d:bf:9f:62:63:b7:fc:e8:46:e8:bb:bf:f8:
         38:92:16:a6:ba:87:21:1b:75:0f:1a:05:04:2d:87:a2:48:21:
         93:83:5e:a7:b0:f0:0b:dc:93:81:fc:96:6f:60:d0:4e:d6:65:
         a3:da:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:18 2025 by rpki-client