Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa
File:                     acf7b392-08ac-38ef-8d86-7828934dfaf8.roa (raw, json)
Hash identifier:          2mUakCBsfaBiTkjWcCvKQ1oN8CIeOrheTAZwz3N1TVA=
Subject key identifier:   26:9A:84:40:34:8F:9A:CA:61:6C:6C:9D:E6:20:B9:6C:59:F9:5A:15
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F43285849D85F80AFFAFE701FF8C8F140
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     398543
IP address blocks:        168.245.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:80:af:fa:fe:70:1f:f8:c8:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1bef14a2-ab06-4a80-8d14-0cc9c7e821c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:91:7d:ec:58:0f:b9:f9:d9:f4:a8:ac:9a:
                    94:9e:47:36:27:f6:99:b7:de:55:9c:af:40:8f:7f:
                    f9:cf:e1:ea:57:f0:4b:1b:99:79:94:88:c8:80:4a:
                    2f:ba:a3:f8:e3:f1:87:a8:53:9d:1d:51:25:04:74:
                    c5:8e:d1:8e:a9:e8:ed:fe:e6:49:3b:f9:b3:e9:42:
                    56:eb:f9:87:8a:74:fc:ad:a8:47:8f:71:04:da:92:
                    0f:e2:45:31:70:fb:4d:49:31:33:70:21:ab:64:39:
                    07:4f:12:51:10:6a:9c:f2:26:9c:5b:64:72:72:46:
                    9c:2c:4b:1e:81:5f:9b:38:cb:53:f2:40:5e:9a:b0:
                    9b:1d:0c:3a:d0:49:67:aa:e6:97:65:26:c6:28:d3:
                    2b:2d:e0:7e:7c:c7:eb:a0:8e:22:bd:5e:81:f7:bd:
                    2d:3a:4c:05:8c:c2:12:60:dd:15:39:d1:f9:c2:d8:
                    7a:69:70:da:b4:e1:f1:01:a5:0c:83:e5:85:98:a2:
                    80:4a:64:21:75:61:57:28:e3:fc:b2:f2:53:c2:01:
                    5f:ee:4f:c5:74:5b:f3:fe:87:19:90:b7:1c:80:1f:
                    d7:10:d7:36:64:66:75:a3:45:64:45:dc:58:09:b7:
                    22:ae:27:89:e4:e4:58:33:04:1f:7c:31:4f:ea:65:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:84:40:34:8F:9A:CA:61:6C:6C:9D:E6:20:B9:6C:59:F9:5A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/acf7b392-08ac-38ef-8d86-7828934dfaf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:27:6b:ed:e4:f0:6a:7e:d3:88:c4:c0:9b:03:b2:a8:9c:67:
         d1:56:b4:a3:0d:1d:96:62:7c:0b:dc:36:59:57:0f:fb:2f:a8:
         03:08:86:e1:70:5e:c6:84:f6:b1:91:5b:2c:1c:ed:18:7e:5a:
         b2:b0:38:7f:9a:15:5b:93:23:83:74:d5:31:23:bf:64:7e:b9:
         64:a0:51:a7:77:4b:05:42:c7:2d:a7:99:89:9e:ab:87:1f:a9:
         a6:89:23:28:11:b4:8d:50:1e:db:72:f6:2d:25:6f:74:c0:e5:
         ff:96:26:b8:20:77:d6:60:31:e2:6f:c0:5c:70:1b:ad:cc:f7:
         48:b2:01:b5:c1:d6:ff:d0:ed:87:77:9f:f3:ba:6a:6c:16:20:
         c0:56:44:a0:e6:91:d2:a3:50:6c:15:61:fb:f9:d2:ba:0a:ec:
         7c:5f:6a:f7:e5:8a:8d:59:a9:d0:56:47:97:e4:1b:42:1d:36:
         ef:fd:e9:d0:c2:e0:85:cd:ad:d2:91:8f:27:54:ea:89:af:e6:
         88:0c:c7:14:ea:f2:0f:46:b6:41:2c:ee:7b:d5:22:93:2a:50:
         d2:56:ac:fa:0a:38:8c:d1:c5:5b:19:97:cb:8e:54:bf:fb:68:
         4e:4a:0a:7a:ed:ba:78:44:dd:62:d1:c1:8a:a0:a9:f4:20:91:
         d4:d8:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:50:41 2025 by rpki-client