Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa
File:                     bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa (raw, json)
Hash identifier:          0m/aQFFa/ilC6NWJWqShOswPYuaGKqSYcgIQvxW6F7M=
Subject key identifier:   A9:11:58:36:8C:42:A1:79:AE:4B:72:F4:0F:CF:23:AD:63:B8:E6:81
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA95AB3CA5CD03303F2400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     855
IP address blocks:        142.176.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:95:ab:3c:a5:cd:03:30:3f:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cbf782b5-7d58-4a4e-8a08-24c3f877b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:a4:a5:5e:57:e8:17:84:5a:a5:27:db:2f:
                    d6:71:5d:b6:b8:d7:cb:ad:9e:8f:d7:71:d6:9b:03:
                    9f:91:ce:38:3d:82:a9:e0:73:2a:e8:c5:77:95:52:
                    0a:2e:fb:27:1a:4a:d1:88:a9:c5:79:40:a3:9b:72:
                    71:5b:dd:da:10:23:f7:ba:2e:72:fa:64:fd:a2:0f:
                    7a:6f:59:c0:89:1a:a4:e8:73:a9:e9:9b:79:b6:90:
                    af:b0:0c:bc:b8:7a:37:42:2d:2e:c2:c3:1f:a6:ca:
                    0b:65:cc:c8:bc:c0:4d:58:38:7c:fb:ee:14:63:61:
                    bc:e7:87:59:bb:6a:69:96:10:5a:43:88:78:c1:e5:
                    a5:99:4d:cb:7e:b6:79:4d:62:e5:1e:e2:b3:85:6b:
                    76:60:e8:04:90:7e:dd:53:40:cf:f4:ed:ca:d3:ea:
                    b6:56:85:fb:39:00:13:09:da:f2:06:ea:ea:3a:31:
                    fd:4f:11:84:8d:b6:a6:c5:1e:64:4a:71:a5:21:dd:
                    d8:1d:94:c4:ee:76:a4:ca:b6:a6:07:54:a7:ac:18:
                    94:3d:2a:57:09:8d:62:d9:9c:b6:09:23:28:4f:cc:
                    8e:11:c9:b8:0e:9e:54:ad:ce:25:fd:d4:25:09:cb:
                    e0:bf:24:67:bd:70:8c:ec:22:31:b6:fb:d7:10:1c:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:58:36:8C:42:A1:79:AE:4B:72:F4:0F:CF:23:AD:63:B8:E6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb7806e4-eb22-3e9b-84e5-a09de17e9dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:cb:1d:2e:f8:eb:66:5a:ad:a0:ae:af:ad:bd:0e:45:48:
         c1:e0:88:4f:93:d9:40:75:8e:b8:80:f2:dc:b3:89:91:8e:bf:
         36:fe:3c:8b:35:11:c7:d4:da:fc:9e:54:34:5f:df:5a:69:87:
         f3:df:73:87:73:d0:b9:c0:81:68:37:ba:8a:35:d6:06:c8:ae:
         2b:db:2e:44:5f:00:22:2d:05:82:0a:90:73:1c:9e:0f:d3:e7:
         0e:57:31:2e:49:48:ab:93:cb:5f:db:e3:52:fc:aa:4c:99:db:
         68:b9:bf:f8:41:75:e0:9c:31:d6:6c:b8:4c:5d:31:84:ea:6d:
         d0:c9:67:90:58:bf:c2:f7:b9:30:00:d1:8a:ca:ed:7d:8f:dc:
         61:25:88:54:b9:8a:0f:2c:48:89:08:66:88:f7:e7:f9:17:ec:
         bd:ef:0b:14:2b:94:49:5e:22:94:0f:7d:66:5c:a2:cd:0c:5d:
         c2:1f:1d:95:63:04:d5:1a:dc:d1:19:a2:9b:03:39:1f:50:58:
         6c:43:2e:e9:49:33:f7:0c:85:b5:25:4f:1c:73:95:e1:ce:75:
         ab:97:2f:6c:f2:ba:98:33:c5:df:bd:4a:8a:1d:56:05:2a:da:
         fb:5d:3b:1e:bd:08:29:e3:fa:4d:04:9c:3c:cb:be:7c:3c:81:
         72:ba:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:33 2025 by rpki-client