Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/82b118d5-a69f-32e7-8245-af3abb6a97d7.roa
File:                     82b118d5-a69f-32e7-8245-af3abb6a97d7.roa (raw, json)
Hash identifier:          SyXNXNXdaB0Byoj/s+HU4tqt+fevVODKtozQvjNRZ1Y=
Subject key identifier:   1D:13:61:20:CF:BC:FC:B6:B6:12:86:F2:BB:97:CC:58:42:AB:E0:8D
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584900215888CD36AEF8D3BBD640
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/82b118d5-a69f-32e7-8245-af3abb6a97d7.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     19331
IP address blocks:        135.129.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:58:88:cd:36:ae:f8:d3:bb:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=b85463c5-ce57-43e7-94d0-50452675ffac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:0e:bf:d9:30:07:0f:81:f8:79:55:42:f8:
                    27:97:0f:7c:0e:d8:8b:c7:eb:49:9d:46:01:56:5b:
                    a6:95:a1:c8:fd:b5:57:58:28:0f:a3:76:ed:70:57:
                    fd:53:16:9f:99:b2:9e:d1:81:9b:54:b0:b6:fd:28:
                    2d:09:8d:56:48:7d:90:83:74:12:7d:34:1a:81:4c:
                    f1:78:7d:20:7f:51:bb:4a:98:40:f9:09:1b:47:26:
                    eb:23:27:eb:b9:24:85:47:cc:a2:b1:e1:05:9f:fd:
                    eb:0f:2d:76:17:84:e5:26:79:03:7d:bf:10:3c:9c:
                    02:8d:db:8e:55:7e:1b:ac:69:0b:bd:d8:13:66:93:
                    f1:d8:4a:11:4c:4c:7f:4c:b2:ea:20:f6:e5:c7:d5:
                    44:2a:49:4f:31:7d:9a:45:49:9e:4a:9a:eb:2a:01:
                    95:9b:c7:1e:74:f8:a7:10:82:a9:f5:fc:92:47:85:
                    eb:a3:30:4c:6a:18:5b:7b:65:1e:eb:8d:f7:3b:d2:
                    64:53:8b:8c:2f:64:9d:7e:20:d8:9d:c6:22:c8:77:
                    27:a4:b8:42:64:9e:84:34:31:cf:51:b3:8d:08:68:
                    92:98:b2:30:7b:08:75:d5:ff:02:78:4d:fb:2d:fc:
                    f2:24:4b:23:43:d5:02:1e:dc:b3:ce:8a:27:ec:22:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:61:20:CF:BC:FC:B6:B6:12:86:F2:BB:97:CC:58:42:AB:E0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/82b118d5-a69f-32e7-8245-af3abb6a97d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:a0:62:fe:3c:2b:37:0e:35:d3:fa:48:94:68:70:33:b8:
         6a:d2:5d:89:41:35:f9:cf:7b:39:f2:bd:b8:57:75:a1:c4:e6:
         00:90:25:84:1b:b8:8c:8c:7a:b9:93:3a:08:b3:46:20:58:e5:
         26:85:47:88:cc:9c:4c:c5:8b:2a:55:da:28:72:7b:1b:4d:ff:
         b4:14:b0:d6:86:49:d1:18:f7:97:dd:72:bd:df:21:54:5f:7a:
         21:3a:80:bf:5f:63:47:4a:1f:03:d9:6d:3c:1e:24:d4:44:ff:
         ce:cd:40:6d:7c:d0:39:bc:55:89:0e:8b:15:8d:39:7e:1e:e2:
         d6:43:9e:d4:2b:08:bb:23:e0:80:90:b9:d4:ec:c6:da:ab:29:
         59:10:17:54:2c:bf:66:53:39:b6:35:96:d6:37:4c:8b:32:1a:
         c1:5f:5c:5b:0f:f6:62:48:49:49:ff:2c:3d:67:02:61:3b:bb:
         4e:53:50:fe:17:42:67:d6:15:f3:3a:ea:ae:15:a0:48:ad:95:
         32:60:be:45:37:b1:dc:a7:14:94:62:a4:5c:27:0b:9e:8a:14:
         f1:0c:fb:39:d0:2f:2e:de:94:d7:a3:7f:23:c7:57:78:bc:f3:
         e1:91:9f:57:a7:d4:a3:cf:74:15:6e:3b:8b:48:ec:83:3b:23:
         04:4f:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:53 2025 by rpki-client