Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
File:                     5c55b5af-970c-3f95-a381-4d9948e52241.roa (raw, json)
Hash identifier:          feM/o07krDhiuVzKeleiBnKwhPP012GIMgDvnBNS/3I=
Subject key identifier:   4F:62:4D:FF:76:86:E1:3B:F8:60:40:3A:46:46:1D:D3:B6:3F:5F:E5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A03A54C1973ED92B33EEE146C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     399145
IP address blocks:        140.174.19.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4c:19:73:ed:92:b3:3e:ee:14:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=855d8a4a-3c28-45a2-902a-6a6b07424928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:00:32:5c:94:88:7b:84:ba:c7:20:00:80:
                    af:38:e0:d5:76:ea:ad:ba:d0:db:23:fe:cd:10:6e:
                    3e:91:53:48:b0:9e:44:e9:d3:44:b4:8d:16:b4:72:
                    63:cc:5f:00:8b:ed:ea:0d:1e:2e:ea:da:3f:69:af:
                    13:3e:ca:c4:df:01:9a:89:bb:34:1d:21:12:89:55:
                    6d:35:fe:dd:98:9b:40:44:8c:51:26:99:d1:c4:cc:
                    0b:09:4f:23:9f:6c:c4:0e:2b:0a:95:e9:0c:17:3c:
                    01:42:69:ff:34:d2:37:07:da:97:62:e4:01:4a:79:
                    8b:f9:2c:6d:a3:6f:48:ba:e7:02:b3:80:16:6e:55:
                    cb:5e:59:49:28:6d:c7:4c:e3:22:7d:09:b9:84:00:
                    71:10:67:56:5f:ec:f4:aa:a5:6d:25:c6:d5:18:0b:
                    70:15:e6:71:3c:8b:48:37:98:04:af:91:1e:0c:09:
                    34:ef:b2:72:51:0e:cf:92:8f:23:68:08:21:4c:25:
                    d4:1d:9a:91:82:4a:5e:0a:09:46:e1:80:05:fe:7d:
                    17:89:31:09:38:4e:ed:06:b9:6b:6c:ac:15:15:b3:
                    d2:29:fb:75:60:50:8d:6a:d8:f4:24:3b:50:69:e9:
                    8b:d1:c6:ac:f8:44:5e:d5:e5:ce:7d:01:cc:3d:64:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:62:4D:FF:76:86:E1:3B:F8:60:40:3A:46:46:1D:D3:B6:3F:5F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.19.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:97:a1:a7:e9:86:47:0d:62:e5:ab:04:cb:6e:c0:31:a1:
         91:8e:00:6f:32:d9:31:95:4b:0d:32:c0:c5:50:ce:37:4d:95:
         20:40:7b:22:47:02:4e:ff:01:c8:ca:90:5b:30:46:03:0e:b3:
         e6:2d:e0:a4:a3:6b:22:2a:d7:85:ba:2c:58:51:02:5c:09:a3:
         ce:c8:59:10:51:73:b2:46:e9:4d:3f:8c:37:86:fd:16:6a:38:
         f5:e0:b3:05:8c:b0:ac:9e:e6:84:c0:bb:c9:ff:70:e2:9e:ca:
         d0:0b:bf:f5:ba:4c:c4:0e:11:dd:9e:ef:ff:d3:9c:f2:77:84:
         50:a1:55:cf:fd:ea:d4:c4:c8:8e:a1:9b:4d:d6:cd:3c:d5:14:
         72:c8:b8:d1:f1:af:82:42:ad:4d:d0:01:cd:8e:b5:c0:ce:81:
         e2:cb:a5:12:9d:2a:63:2d:9e:e7:3a:f1:a5:58:2c:9f:6a:b8:
         2d:99:1e:4b:b9:c3:0d:35:dc:47:bd:01:e6:e0:53:29:9d:97:
         53:75:37:30:5a:32:43:84:11:34:76:e7:dd:d4:c8:be:e0:a6:
         2d:ba:20:65:fa:45:f2:c6:3b:90:09:62:b8:51:ef:7d:c9:67:
         6c:54:28:62:23:c1:ab:90:f2:fe:27:8f:34:e9:c0:e2:35:d5:
         bf:55:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:20 2025 by rpki-client