Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf30fc14-f35e-341b-b4c1-cffeba7d86e5.roa
File:                     bf30fc14-f35e-341b-b4c1-cffeba7d86e5.roa (raw, json)
Hash identifier:          S59rlAnoXSo2g/Oc0hND14HA3nx2EQwPUns9xvbjcjc=
Subject key identifier:   0A:AA:90:96:69:6F:06:46:C8:2B:3F:CC:59:B8:D6:2C:0F:03:7E:08
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4407A5675F657AF6E8680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf30fc14-f35e-341b-b4c1-cffeba7d86e5.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        151.101.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:40:7a:56:75:f6:57:af:6e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=11db7884-5599-4b45-bdd3-42ad25731df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:53:cb:83:fb:a9:a7:b7:79:dc:d2:14:88:
                    53:df:94:6c:cd:f5:f6:09:3a:9f:4b:00:fd:e7:b9:
                    27:9f:e9:f7:d0:52:0a:82:e8:0e:97:a6:95:f8:b5:
                    87:9d:97:1b:25:61:28:02:a3:c9:38:c4:ad:11:2c:
                    88:62:23:4c:83:ee:6e:e1:95:73:d7:e7:d6:82:00:
                    06:a4:d8:0d:60:11:56:ee:e7:11:a3:32:01:35:05:
                    f1:98:af:f6:d7:43:f3:4c:e6:b8:f7:8b:01:70:76:
                    a3:a0:0a:93:2f:d5:58:56:fc:d6:b0:4a:63:4a:95:
                    84:42:0f:64:95:07:46:35:39:9c:f5:46:6f:bd:cf:
                    b2:ad:a5:9c:d1:8b:21:3a:0e:32:7c:cc:9b:09:fe:
                    f6:eb:7b:7c:69:14:48:74:02:0d:75:6c:64:02:34:
                    5f:c6:c7:d9:36:88:d4:20:67:7e:a8:13:bc:0c:3d:
                    61:2a:c1:70:cb:5d:91:29:b4:4e:61:f3:cb:8d:6d:
                    ce:db:b0:30:9c:aa:a2:86:c8:dd:f9:e4:d1:b8:e7:
                    4b:80:8b:e2:d6:7a:15:3f:80:8a:37:42:62:02:53:
                    45:b5:b9:f8:db:ac:62:73:c8:32:00:4e:57:ca:81:
                    bd:9a:4d:1d:d0:bc:55:1c:df:b6:b7:30:77:ad:bb:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:90:96:69:6F:06:46:C8:2B:3F:CC:59:B8:D6:2C:0F:03:7E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf30fc14-f35e-341b-b4c1-cffeba7d86e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:b5:88:c8:20:69:4a:6f:e2:81:2e:61:e9:2a:63:f8:3e:
         87:20:91:c5:43:f5:59:38:64:ff:c6:bd:42:df:4d:89:67:90:
         a0:85:68:ec:a7:bc:93:91:eb:28:c3:23:78:0b:e4:6d:14:e2:
         0d:43:e1:0a:f9:e3:82:c0:64:bd:c6:4f:97:55:d5:bb:33:4a:
         08:d1:10:4f:28:4f:ac:55:05:47:3c:58:d4:54:fc:28:3d:ba:
         e2:90:87:b1:6d:a2:18:0e:b7:50:7e:a1:97:67:9d:50:f0:72:
         43:6f:fc:85:d1:58:83:30:74:20:7a:35:b0:87:e3:41:49:b0:
         89:23:77:a4:85:d0:30:4d:7a:54:58:a2:1f:49:70:29:03:92:
         1d:8e:d8:ee:f7:68:f6:89:10:1e:84:26:9d:24:7c:2e:84:43:
         3a:e7:c2:5a:a0:35:b3:39:8c:47:e4:dc:c8:78:d7:93:bf:3b:
         50:08:69:0a:4a:4d:51:36:11:5d:77:2d:7c:a4:1d:48:2c:6f:
         78:37:6b:d0:e9:c2:00:6e:0a:65:2a:2f:fe:49:ad:94:9c:58:
         cf:02:dc:2d:b0:5b:4b:c3:cd:69:61:48:d7:8d:35:bc:b8:60:
         07:aa:3a:a8:59:b4:ff:a1:62:69:0c:09:fe:9d:03:e3:c3:df:
         98:9a:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:01 2025 by rpki-client