Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa
File:                     28848381-14b0-3959-8fcc-8c48327276f4.roa (raw, json)
Hash identifier:          qBGVMGpXrsk5lbImiC+g6k8sIJ6UTZxNe7+ilB+X1ag=
Subject key identifier:   70:61:E5:B3:8B:D2:5F:8F:EA:C1:43:5A:56:A0:E8:66:AE:D7:AD:05
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584A10353643892C593802ED5A10
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     12213
IP address blocks:        45.78.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:36:43:89:2c:59:38:02:ed:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=22010a2e-1dd0-45ad-a1b6-4ad2232314ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:72:19:cf:8a:e4:e2:ed:a2:12:15:da:56:
                    cf:6b:14:b5:2f:1d:13:2b:69:48:29:c7:8f:5d:62:
                    0b:6b:c9:dc:d2:3f:55:ce:65:58:6f:95:91:57:74:
                    43:8a:5a:d1:bd:6b:48:32:a1:54:1d:61:f3:24:e6:
                    8a:34:b0:e8:aa:2e:cc:6c:4e:4d:91:1a:8c:81:d3:
                    9e:6a:49:63:58:79:84:f0:ea:eb:9f:2d:99:bb:af:
                    b1:0b:30:fc:29:ec:64:df:8d:a1:2d:b6:70:67:94:
                    2e:e7:f8:56:57:20:44:3c:da:8c:1d:17:5d:c9:56:
                    2f:6c:8b:e6:f0:42:34:6e:c7:ce:ce:f0:04:af:13:
                    81:29:c1:dd:88:ce:d7:e6:51:a8:e8:bd:a6:06:69:
                    68:c1:bb:55:a6:21:69:14:c2:01:d1:ce:ca:a2:ac:
                    61:bc:8d:cd:3e:87:b1:e5:3b:96:32:4b:45:fe:90:
                    6b:ec:4e:8d:0f:86:44:ef:65:95:f7:82:bc:8f:56:
                    b9:de:63:f2:e5:45:f3:47:1f:58:86:a5:b9:78:49:
                    15:e2:cd:34:c3:11:e0:e0:5c:70:dd:ab:e6:77:73:
                    9b:ac:d2:91:b7:fb:3a:26:d1:0a:29:29:64:4b:c2:
                    20:2f:ae:63:8c:0c:7d:7a:df:86:85:2c:c3:6f:13:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:E5:B3:8B:D2:5F:8F:EA:C1:43:5A:56:A0:E8:66:AE:D7:AD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/28848381-14b0-3959-8fcc-8c48327276f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.78.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f8:ea:fd:e6:bc:72:ba:15:b4:a1:c4:f8:85:43:ec:22:97:
         57:31:bf:19:2f:27:e1:cc:39:d3:cb:62:53:c8:74:ea:26:d0:
         96:8d:63:07:6d:c0:b6:58:4f:03:7c:7c:4a:50:64:09:75:d5:
         4b:b9:5c:46:32:3e:1d:ed:74:f1:6c:e1:eb:4f:87:06:2b:a0:
         c7:7e:60:ad:f8:f3:7b:03:8d:ad:12:e5:ad:e9:46:3e:f3:b4:
         75:82:8b:ee:c1:d8:8f:b3:79:7f:83:23:d9:2d:83:a5:49:fe:
         72:e0:3a:dc:e8:11:a4:66:d4:66:cf:cc:9a:42:96:50:67:57:
         33:2d:3c:71:79:31:25:9b:2d:79:6a:60:e8:8b:df:32:7c:cf:
         14:5b:3d:fc:ce:c0:9e:f2:ff:0d:de:b7:18:fd:76:fd:c8:c6:
         c6:c4:97:c7:82:51:2d:a7:73:cf:71:80:4d:de:e5:c7:6f:a0:
         2e:cd:80:c5:79:51:59:c9:0d:d0:01:59:d6:7a:b8:c0:40:9a:
         ed:9b:4d:07:9a:b1:df:ea:ad:0f:c4:e0:6d:80:52:2d:f4:e0:
         1b:7e:1f:25:e4:15:75:dd:81:54:01:7a:c1:6d:fe:a0:cf:d9:
         76:6e:bc:6a:a2:11:c1:be:ad:af:36:07:15:63:f2:63:1d:12:
         83:0d:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:12 2025 by rpki-client