Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa
File:                     f29bc5ef-4151-3787-82c8-edfd86593688.roa (raw, json)
Hash identifier:          QKOYcU4hkUWm7cXqEHTRMC7Skz9kAwGJzhDpC7x0128=
Subject key identifier:   94:F9:55:A9:DA:39:98:27:13:C7:17:4C:9C:7F:CD:93:6E:25:CE:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9384FBFBEA6F8EAFFA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        142.115.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:93:84:fb:fb:ea:6f:8e:af:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=945ac1c8-3d2c-414c-89a6-11c0eedf7c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:6f:5f:bd:be:9b:16:ed:76:92:4b:1d:c3:
                    f0:66:d2:f3:97:da:93:e3:c1:de:51:2f:dc:73:94:
                    84:71:90:ca:4c:f8:37:cc:c3:0d:b3:45:d1:01:72:
                    1d:b5:ff:ba:99:1d:ad:c5:09:e1:47:41:52:6d:6d:
                    bc:05:c4:45:d5:63:5a:e9:90:01:2d:51:33:b6:b6:
                    5a:84:5f:39:f1:c1:9a:9c:62:1e:f9:40:20:2d:c7:
                    0b:2f:10:d6:b4:9d:47:ce:e5:c5:a3:a2:36:4c:47:
                    54:db:22:78:d2:31:95:6d:2b:6f:13:46:e5:06:8c:
                    fc:24:02:54:a2:d1:61:32:e8:97:6b:8d:22:ba:a1:
                    ec:34:83:b9:b3:a6:41:8d:e4:9e:e7:44:c6:de:9f:
                    fe:79:b5:07:ef:16:87:ba:15:b1:30:57:f2:81:d8:
                    0f:74:ab:40:19:94:56:de:9d:95:46:55:86:b4:ca:
                    59:e2:37:4d:66:c6:48:a7:3d:98:45:e4:0e:d9:85:
                    a3:9a:d5:dc:91:cc:7b:61:eb:79:63:51:07:7d:9d:
                    d0:df:bc:18:90:b7:29:01:d2:81:49:01:7f:5e:72:
                    8f:2b:29:9f:04:2b:5d:33:c2:f4:d7:dd:2a:c1:8e:
                    d2:54:be:7d:b9:6b:0f:a3:4f:23:c3:4e:36:13:2c:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F9:55:A9:DA:39:98:27:13:C7:17:4C:9C:7F:CD:93:6E:25:CE:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f29bc5ef-4151-3787-82c8-edfd86593688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:c0:9b:5b:77:ff:46:15:f0:cf:09:8d:93:0a:b3:c0:f6:
         23:9d:b8:27:bb:45:08:34:17:49:1e:80:23:49:6f:f3:6c:a4:
         98:63:ce:2b:7e:ac:8a:ae:88:2f:0b:16:16:ad:32:85:44:6f:
         36:72:a8:8e:62:e0:2c:a7:2d:76:58:01:fb:e9:84:15:99:26:
         14:8a:18:57:cd:1e:b7:8c:c4:f7:80:1c:ff:6d:9a:19:ea:99:
         e2:1e:60:f8:f6:d2:b0:e8:21:b8:2f:58:5a:05:b4:fb:de:81:
         21:3d:c3:b7:4b:cb:bb:27:3f:38:13:7f:97:36:4d:73:8d:75:
         90:98:39:ed:3e:5a:b6:58:6a:98:20:a7:20:bf:8f:60:ab:61:
         81:56:fc:7c:dc:ee:3e:5c:dd:49:73:3d:5c:ca:23:a6:cc:e8:
         c0:57:bd:9f:d1:ae:4f:56:4d:dd:44:c9:a1:a0:d8:d3:e6:0d:
         df:37:cb:0e:e9:06:d5:60:42:e5:d6:6a:50:0d:a9:51:f7:47:
         cc:a6:b6:ba:61:fe:57:85:62:ff:80:07:43:68:1b:13:c9:37:
         c4:50:1d:8f:a9:77:13:38:58:ff:fa:94:09:88:53:6d:b2:6b:
         68:fb:45:57:ee:64:94:ca:f3:d3:1b:87:7e:3e:43:db:0b:88:
         75:af:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:35:55 2025 by rpki-client