Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
File:                     48d29f1b-28ce-30ad-a06c-026eb5182a52.roa (raw, json)
Hash identifier:          5L4alhjGnRulHME/3LwlPJsyxnTnd1Sojw385bsSEhw=
Subject key identifier:   45:CC:99:AF:61:38:B2:DB:40:F2:83:A0:BB:8A:1D:B2:97:3C:00:7C
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285849CE9A66C9CD005B25251E8A70
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     10317
IP address blocks:        204.155.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:66:c9:cd:00:5b:25:25:1e:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=4542f5aa-620f-458b-aa94-d6f31c54e165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:95:54:11:5f:2a:a4:c9:b9:73:42:c0:eb:
                    9a:eb:dd:ab:bc:fc:09:0f:18:8c:3a:fd:ce:f4:96:
                    d6:20:42:15:b1:9f:b6:19:1a:bf:c4:88:43:76:e3:
                    42:ef:75:a7:9e:01:07:46:65:7c:db:02:2c:a4:e5:
                    55:54:9f:e9:3b:6a:5f:51:48:74:0d:79:ad:3c:e2:
                    ec:92:60:3c:6b:60:11:04:79:ee:7f:75:7e:f5:90:
                    d9:db:ee:3d:ca:f2:e3:11:fe:17:3f:23:57:e8:31:
                    bb:20:df:c2:1d:fe:fa:d0:be:f0:1e:c6:44:e1:d6:
                    27:db:30:f7:ae:79:a2:8c:b3:98:69:6b:17:0e:4d:
                    33:22:2d:bd:5c:4b:e9:95:c9:d4:4a:ec:8a:1e:ad:
                    7b:f9:40:d8:0e:fc:72:37:5b:e3:70:4f:26:d6:ab:
                    b7:4e:9e:cd:ac:b8:ee:9b:82:4f:35:5b:48:ac:5f:
                    de:0c:b6:f1:c1:13:78:30:bd:6c:62:2e:c5:44:1f:
                    01:1c:1a:39:6a:d2:1b:e7:63:aa:db:38:2b:17:c7:
                    59:77:98:34:9f:ff:a0:f7:d7:7a:58:70:30:a1:f4:
                    54:f5:73:56:84:72:55:8b:06:a7:be:ea:eb:4c:14:
                    fe:f2:78:aa:f7:fa:28:d9:6a:1a:56:39:92:09:d3:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:99:AF:61:38:B2:DB:40:F2:83:A0:BB:8A:1D:B2:97:3C:00:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:ab:61:ed:03:f0:fd:85:03:e2:31:b6:b5:71:68:a2:10:
         1f:18:d6:4b:40:55:b1:c4:78:9f:2f:f7:ee:01:1f:e8:ec:73:
         2e:29:77:e7:9a:dc:12:04:14:da:36:88:27:1e:f3:4e:03:8c:
         d2:ab:fa:0c:37:79:6f:ae:1d:c9:34:dc:1c:41:fc:c7:bb:82:
         cd:9e:34:ba:a7:cd:92:fd:99:43:99:55:49:9f:84:e9:24:78:
         fa:11:cc:80:70:2b:77:fc:a5:00:68:1a:a5:f5:c2:79:53:23:
         70:88:4c:de:c2:f9:bd:91:e5:53:77:77:7c:ff:53:86:6e:f6:
         47:ff:c9:3e:db:e6:0f:21:60:62:33:cc:31:5b:61:87:ed:fd:
         e4:e5:77:93:74:0a:13:bb:ca:a6:cf:c8:7c:8f:c6:44:58:a6:
         73:47:72:28:b5:26:bd:14:8a:11:0b:4c:54:7e:84:96:de:0d:
         a3:0f:b1:2e:0e:58:a2:c7:44:26:4d:20:26:0e:c6:a3:91:e9:
         2b:72:9a:7a:70:79:27:c2:5a:8a:e1:e5:80:7f:4f:3b:9d:ad:
         2f:b7:ba:00:ba:f0:21:1f:06:17:f0:40:e9:6f:c9:2a:85:aa:
         2d:b9:c0:72:3d:b2:c8:b4:86:e5:db:7d:be:f6:76:3e:91:23:
         cd:73:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:28 2025 by rpki-client