Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
File:                     aa7afe85-abe8-3328-9407-af87c4793bd8.roa (raw, json)
Hash identifier:          MrqDIUwQiaOnr1apVhCk4uujWezelj1iTIJvM88HLAU=
Subject key identifier:   3F:38:48:9B:2C:C2:7C:B4:63:EF:48:74:A9:C5:AE:B4:8D:77:42:7D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068FC2E131A5E484460580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        75.112.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8f:c2:e1:31:a5:e4:84:46:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2a8b0ab7-3086-4141-bc88-df62a34ac2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:f7:e6:7b:ad:3c:7d:07:96:a3:da:99:29:
                    f2:fd:1e:d4:9c:0b:c5:d4:6c:cd:d1:b5:c1:77:65:
                    03:89:fb:a2:55:9f:ce:2c:9c:0f:83:5d:63:37:cd:
                    32:ee:74:09:11:54:09:2f:66:36:ef:c7:35:1e:92:
                    ce:ad:25:43:de:6e:34:a4:4e:b0:9a:4f:ff:f6:cc:
                    2e:b4:28:74:18:84:fa:6e:50:89:3e:57:99:90:3e:
                    c7:1d:6c:20:62:a8:84:56:5c:5f:22:e1:f6:67:f4:
                    ce:0a:d4:92:04:2a:cf:23:98:b9:9d:45:56:87:00:
                    17:5e:74:14:a9:25:83:57:75:bb:1d:2b:2e:02:7f:
                    44:39:47:7d:5c:7c:30:ea:87:f3:34:82:bd:da:b1:
                    65:f7:86:3c:18:91:b3:76:57:70:25:75:cd:ce:91:
                    85:6f:31:10:4d:cc:b7:05:27:80:b3:ee:93:31:da:
                    77:3d:c0:d7:f4:2a:69:56:6e:65:a2:1a:e2:0f:59:
                    88:1d:dd:ad:fa:63:c4:24:ad:b4:30:b3:07:ef:de:
                    14:71:56:64:c9:cf:0b:4c:07:b8:6e:26:c5:2b:30:
                    2f:32:76:37:19:85:d7:cd:31:27:35:77:83:60:00:
                    10:74:96:f5:0c:77:f8:fb:09:26:58:35:f3:39:5a:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:38:48:9B:2C:C2:7C:B4:63:EF:48:74:A9:C5:AE:B4:8D:77:42:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:c2:b4:8a:d8:99:68:3f:bf:5a:43:66:da:d1:e2:fd:da:
         d6:b9:63:76:cd:54:bd:32:3c:20:35:36:3a:d8:48:51:b4:05:
         4c:87:c8:ba:95:8f:43:b7:6f:8c:02:fd:f2:ff:54:33:e6:00:
         61:48:23:8a:e4:5e:f7:d9:53:6d:00:84:4d:6f:48:92:77:88:
         f3:0c:24:1d:57:73:92:92:af:3d:90:83:36:fe:2a:96:6f:30:
         42:d2:03:78:82:66:c1:c4:c8:55:44:48:eb:e1:96:ab:d9:1f:
         1d:8f:08:4b:e1:36:1a:a1:0d:00:da:2a:e1:e1:cc:e6:60:d1:
         71:ef:0b:11:53:64:98:c0:de:39:b9:3d:96:32:94:75:95:c9:
         5f:4c:46:76:d8:3c:7f:39:15:42:8f:49:ea:5a:7a:67:13:c4:
         30:6a:0f:8e:51:13:df:fc:5b:cb:ab:80:19:77:75:a1:fc:47:
         7c:5e:5d:b8:d6:e1:41:f8:aa:8a:dc:56:4e:29:98:ac:b7:81:
         e1:11:37:d9:13:19:36:19:84:e2:2b:f3:ab:c8:2d:fb:53:92:
         4a:1a:93:5b:ee:b6:a1:b8:a6:07:a1:f7:5a:c1:91:e8:9d:bb:
         13:93:a8:db:9b:92:fd:65:4d:1c:70:1f:2c:41:fa:03:f6:bf:
         16:87:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:34 2025 by rpki-client