Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa
File:                     493df7eb-5298-369a-adb2-76f786c0b925.roa (raw, json)
Hash identifier:          fvsWlGmYYheXI7V+T5vKaf2RdZt+rRGP4AHd6/hFwe8=
Subject key identifier:   65:B4:7E:C2:EA:89:0E:22:B2:94:B3:8C:1C:BB:AF:78:81:E3:4F:6C
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F4328584A7350970C4F0CE710035AE080
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     63270
IP address blocks:        209.212.48.0/20 maxlen: 24
                          2604:9fc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:97:0c:4f:0c:e7:10:03:5a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7a64cbc2-9c77-4f93-be25-cd165aa8485f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:71:67:e1:34:09:fc:89:32:a3:7d:b7:d6:
                    5d:cc:cd:b3:41:ff:00:8e:96:8d:90:60:a9:e1:9b:
                    ea:61:d7:50:d4:bc:54:06:56:67:30:14:72:28:c5:
                    3a:bf:44:42:51:6a:aa:5d:21:00:f8:fa:1f:b7:eb:
                    d0:c0:a7:9d:69:e0:64:7a:2e:6f:53:46:93:5f:71:
                    5f:fc:45:99:6b:28:43:96:24:4c:b6:68:15:67:3c:
                    2d:55:14:4b:3c:19:ec:de:12:61:69:d2:51:4c:c0:
                    51:98:90:4b:70:37:d0:cd:16:8e:9c:e9:8a:28:20:
                    52:c0:0b:1e:e5:81:51:4c:5c:7f:91:1b:fa:0b:bc:
                    94:cc:8d:d5:d0:76:8f:9d:fd:3c:17:65:69:99:36:
                    c8:c2:83:5f:69:d2:15:41:7c:1e:26:b8:38:bf:a3:
                    97:a4:23:cb:6f:2b:bc:2a:82:97:d3:1c:37:3b:40:
                    73:c8:3d:1a:7f:c1:4c:79:9e:88:e0:2d:db:fe:fa:
                    f8:db:e0:d2:e0:c2:68:da:13:2d:db:26:c5:1f:ab:
                    df:44:a5:16:a6:f8:a4:7f:89:db:5e:95:55:ff:4f:
                    ec:11:a8:9e:80:e8:cd:2b:f1:79:ae:98:29:30:62:
                    9c:66:6f:26:ec:34:67:8b:08:7e:ba:34:ef:99:b9:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:7E:C2:EA:89:0E:22:B2:94:B3:8C:1C:BB:AF:78:81:E3:4F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/493df7eb-5298-369a-adb2-76f786c0b925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.48.0/20
                IPv6:
                  2604:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:c8:c1:a7:25:89:dd:20:a1:4c:86:df:3c:82:03:f6:d8:
         52:c8:bc:ed:d1:78:dd:0b:99:bb:5d:9d:1b:7f:8d:0e:07:82:
         65:28:f3:91:48:b5:a0:cf:96:85:56:6a:49:33:76:15:da:f7:
         f6:65:c1:89:46:47:03:2e:72:1b:c9:de:71:4e:d4:27:9e:64:
         f7:b8:35:c6:91:b6:0c:22:e6:68:9f:82:ae:7a:3e:0f:e3:9f:
         a6:b3:13:8e:74:48:5a:f5:ce:01:24:70:ab:f0:d2:b1:b4:4f:
         d6:1e:c2:69:d0:e8:fe:bf:1e:90:74:a6:f4:0d:df:64:0b:70:
         86:d7:92:61:cc:a2:8e:79:6f:b4:7e:0b:d1:1d:19:7c:f7:fb:
         c5:c7:26:c9:a9:e0:b6:e3:b4:0c:f0:6e:f3:df:9b:7e:9f:7e:
         b8:d2:0e:38:1a:71:f2:53:fa:f8:a3:c4:a9:fb:14:93:85:71:
         dc:b7:f3:ed:12:90:2c:82:7a:5a:c3:0c:43:62:eb:8c:81:de:
         6a:12:5c:b6:73:5d:37:fb:51:5f:01:22:c7:39:cb:22:3b:0d:
         9e:4e:9b:b4:f2:d6:15:38:a3:0d:f3:f3:f2:68:78:18:a8:f2:
         98:3c:ad:53:45:c7:7c:7b:f6:79:e4:83:71:34:5f:f1:c2:94:
         1f:66:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:04:43 2025 by rpki-client