Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa
File:                     3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa (raw, json)
Hash identifier:          IajNeHSUs5pCNi5EYVmngey/drvEBjNBWCGU1u1Eyuo=
Subject key identifier:   5E:15:FC:42:A9:27:0B:FB:53:99:CE:EC:42:7E:2B:CF:00:96:3A:59
Certificate issuer:       /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial:       010D0C9F43285849D85F8DC37DBD717C4B868400
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        65.20.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8d:c3:7d:bd:71:7c:4b:86:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=036745fd-fc00-434f-8065-9b6c105fee42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:9c:9f:3e:1e:0f:1b:88:66:cc:c8:17:2b:
                    cf:1e:ba:ec:a7:e7:8a:84:3c:2e:40:cf:fc:4f:52:
                    87:a9:ce:a6:d7:b3:9d:d0:51:d6:be:a0:72:74:52:
                    71:28:47:a3:b6:ac:96:19:16:bc:61:4c:69:bc:88:
                    94:17:fe:68:72:27:a9:6a:97:8a:84:5d:66:0f:99:
                    4b:d1:f3:7b:1f:c9:85:64:73:3c:11:e6:f5:b0:55:
                    81:a8:18:77:05:24:e6:a9:ba:4f:25:8e:4d:46:98:
                    e8:2d:e9:31:81:b7:4f:97:85:fd:32:62:ad:62:ce:
                    ed:46:2e:6c:42:8c:36:37:0c:c8:73:11:1f:3d:d5:
                    e6:35:3c:fb:87:3b:fe:fa:2d:b1:62:e5:12:5b:38:
                    6b:0e:36:66:c2:b6:30:86:5c:b3:37:56:43:fb:d0:
                    01:00:ec:e7:44:ba:f1:2b:0d:11:96:1a:38:0e:2c:
                    4c:70:c7:b6:87:fe:1c:ac:bd:5f:41:3a:68:e4:25:
                    e6:71:97:e1:d1:00:d2:ed:6d:82:5f:81:eb:dc:ae:
                    b0:e3:08:6b:6c:ed:e8:f8:e8:a7:2e:8d:e8:9d:e7:
                    66:83:ba:d0:24:34:77:1a:02:ce:84:59:2e:4f:c8:
                    29:fc:bc:b5:ed:80:73:0c:c0:44:dd:17:e9:9b:7d:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:FC:42:A9:27:0B:FB:53:99:CE:EC:42:7E:2B:CF:00:96:3A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl

            X509v3 Authority Key Identifier:
                keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:79:04:36:d3:42:ac:6d:0c:de:ab:19:6b:50:3e:8d:9a:b8:
         63:f0:39:e5:e7:1f:f9:73:0d:59:97:87:91:8c:b0:6b:77:05:
         35:51:37:e8:64:d3:11:e6:68:b2:31:ba:ed:95:14:7e:1c:87:
         a3:78:e1:72:fd:ef:d4:f2:b4:39:ee:1f:1e:78:16:cc:cf:7a:
         df:05:e0:e7:e2:95:e2:98:5a:73:63:a4:72:f5:c7:c5:ea:72:
         e3:d5:f1:bb:44:11:f1:13:f0:35:28:e6:30:e8:f2:75:50:31:
         08:00:82:72:d3:b8:b4:38:a1:ea:0d:ab:01:d0:76:3a:2d:96:
         4f:2e:7a:6c:11:34:77:4e:7e:70:70:66:98:c7:62:66:55:fc:
         35:71:d5:2f:8c:9c:db:d8:79:29:61:56:fc:e4:9a:4c:ed:89:
         dd:8e:6a:92:cb:0d:f5:56:00:29:20:ff:5d:12:be:26:74:a3:
         87:a9:3e:06:59:ea:2b:08:0d:aa:f5:c3:38:df:ac:fa:fa:b9:
         bc:84:75:6e:c0:09:81:48:1a:a5:f2:e2:4d:86:bd:85:5f:95:
         66:92:33:68:e0:ed:28:e8:21:33:83:eb:53:0a:50:c6:10:57:
         b4:18:a9:b4:99:e9:70:32:d4:d3:7d:b6:91:f8:f6:c3:e5:23:
         f8:43:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:47:12 2025 by rpki-client