Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/08534cef-9d1d-34f7-9a18-fc1fccbb6f18.roa
File:                     08534cef-9d1d-34f7-9a18-fc1fccbb6f18.roa (raw, json)
Hash identifier:          yPC0IpdlMB5m9pJwrFQPl6+YN1PJpXe7H6xP0rDjmDo=
Subject key identifier:   41:95:91:A8:71:A8:02:55:2E:56:B1:89:99:43:E4:53:ED:B9:7F:A5
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584A146559E13D80A6688AD8B480
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/08534cef-9d1d-34f7-9a18-fc1fccbb6f18.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     18434
IP address blocks:        205.141.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:59:e1:3d:80:a6:68:8a:d8:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=25053642-107b-47cf-887c-4a33b9020989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:4b:19:06:be:26:d7:82:70:e6:69:c0:07:
                    99:a1:f1:da:5c:de:24:32:1f:26:ee:20:d6:0a:ce:
                    1c:11:93:51:73:3c:a7:a8:84:ff:b2:0d:28:81:fc:
                    5f:9d:a2:7e:0f:cb:53:5d:cc:79:89:35:29:6d:70:
                    45:47:a1:94:77:e6:e3:2e:a1:58:7e:3a:06:b6:3a:
                    fa:db:42:5b:1e:bc:b2:31:d5:fb:e5:34:b3:4d:ae:
                    5d:4f:63:5f:89:ac:44:99:3a:ba:fb:45:e7:5c:b8:
                    97:63:2f:97:c6:19:f1:ef:8b:6b:7f:b6:b7:98:7a:
                    2c:ef:cd:70:6f:46:8b:31:e2:df:39:2e:91:7a:90:
                    b6:89:0d:05:25:c1:4f:26:6e:a8:ae:8f:e3:1d:6f:
                    a9:8a:90:70:85:af:12:3c:8f:cf:4d:f0:40:eb:17:
                    47:f2:12:8f:a7:f2:73:cf:1e:7d:09:83:2d:b3:7a:
                    93:e6:a3:35:0a:2c:61:a5:3b:32:21:ba:4d:bc:e0:
                    c8:d1:73:e0:6d:63:b7:11:e6:ea:6c:89:66:0d:49:
                    47:1b:2a:01:9b:9c:18:96:7a:86:ee:09:17:9e:bb:
                    89:6f:44:df:29:4e:37:b6:c4:38:a3:a1:05:45:09:
                    05:9a:03:54:cd:3b:60:5c:fc:33:77:79:8e:c8:71:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:91:A8:71:A8:02:55:2E:56:B1:89:99:43:E4:53:ED:B9:7F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/08534cef-9d1d-34f7-9a18-fc1fccbb6f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:7a:79:62:d3:1d:ae:f9:c6:cb:e6:c1:ab:04:c1:24:55:
         43:62:cb:41:ea:70:94:4b:29:55:23:d6:d9:bc:14:8f:13:77:
         b9:ed:bf:57:5b:5c:a4:88:29:60:3f:56:d0:13:57:d6:5e:00:
         da:eb:08:90:6d:ed:af:e1:8c:1f:6f:b6:59:5e:83:23:ce:8a:
         e6:55:54:70:53:5d:f3:51:9b:53:98:53:85:1d:62:38:21:56:
         53:78:7b:ca:77:43:25:1e:7e:cd:12:db:d1:bd:d3:89:91:bc:
         40:8f:f9:fd:fc:9b:a7:4b:87:d3:88:8f:22:c8:8e:2e:8a:bb:
         a3:83:eb:64:78:e7:ae:c0:fe:f1:d3:f9:44:e9:55:47:d7:bb:
         21:e2:6d:97:59:9b:fd:e8:f5:e6:5b:14:77:ed:59:38:2a:13:
         5f:c2:25:66:c3:eb:87:1c:8f:c1:45:c9:22:cf:85:96:77:62:
         21:09:9f:92:00:ca:d6:3b:84:89:e3:95:4a:9d:2b:8a:28:ea:
         5f:88:fd:bc:32:39:a6:78:f5:30:d0:24:55:64:99:9e:17:48:
         96:b4:09:6e:7c:50:09:4c:da:78:f7:f2:7f:38:70:76:e4:ba:
         a4:5d:a8:7b:ed:7e:5e:4d:73:91:d2:58:70:f7:74:8e:69:4b:
         24:32:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:13:41 2025 by rpki-client