Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
File:                     4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa (raw, json)
Hash identifier:          Pqh96uVkIhBerC0gczG/WbQjKwX+Oi/6soTu7EWQsoI=
Subject key identifier:   10:6F:92:82:FE:EB:60:95:8D:80:0F:1B:A1:A2:54:50:27:0D:F5:68
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285849B149F26D64474194CABFCC40
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     27370
IP address blocks:        140.241.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f2:6d:64:47:41:94:ca:bf:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9e53211e-9324-4231-ac0e-40520a4e69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:d4:57:6f:87:f7:d1:98:ba:3f:5a:a9:39:
                    83:fd:6b:60:48:15:39:82:42:7a:66:99:62:34:57:
                    e9:ca:d5:c7:9a:ff:36:ba:03:1e:e1:14:42:ff:71:
                    82:b2:84:ea:1e:d5:f7:ba:3e:95:8a:cf:9c:d4:2d:
                    37:0a:d1:db:93:9b:6a:81:c8:70:71:2c:3d:9f:1a:
                    36:08:ed:1a:0e:1a:51:d2:95:2b:52:5f:5a:2e:e1:
                    d4:fb:93:bb:c5:6b:80:60:9e:72:98:ed:7e:7d:ab:
                    e3:da:b0:58:98:0e:d7:51:7f:99:db:6c:62:72:dc:
                    6a:09:7a:3a:24:54:77:e7:12:7a:1b:c4:e3:aa:b0:
                    a4:64:9c:6a:54:5f:80:fb:f9:8b:a0:37:20:98:60:
                    2c:36:c7:3b:dc:e2:74:d3:2c:ff:94:1e:2a:d2:c1:
                    e8:07:2d:93:d2:f8:f7:f0:1c:f7:8e:9d:f2:8b:64:
                    fa:53:c3:41:41:b2:20:64:dd:ac:88:56:d0:a4:a8:
                    90:c9:31:06:ad:4d:5b:6e:3e:e9:b6:33:89:fb:2c:
                    b5:29:2e:1e:de:f9:06:e3:95:e7:41:1f:19:c8:17:
                    ba:df:1a:fd:8e:60:a0:1c:bf:0e:f6:91:ff:5e:41:
                    6e:4a:05:64:f5:4a:a8:e8:d3:f3:1f:fb:ac:dc:d3:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:92:82:FE:EB:60:95:8D:80:0F:1B:A1:A2:54:50:27:0D:F5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:d3:12:73:ad:90:e3:8f:b5:d9:66:d3:fa:13:40:65:9e:
         27:3e:06:38:f6:c1:26:5e:43:bc:72:26:9d:23:ac:60:89:70:
         51:c2:ac:e0:74:e7:9e:7e:06:a7:66:9e:d8:bf:f4:97:6b:41:
         50:2e:15:a0:65:31:1f:83:e9:a1:2e:56:b2:6b:1b:89:1d:56:
         bb:ca:8f:5b:fb:ea:1b:e0:3b:96:27:41:6f:3b:da:24:80:7b:
         61:89:2a:89:3d:28:4c:28:5c:76:fd:56:ee:0a:66:35:1f:14:
         4f:cb:ea:80:5f:09:77:89:c8:18:29:4c:39:e2:5b:fa:a3:71:
         c4:30:5c:42:c2:b1:99:fc:6a:53:78:d5:e8:a2:e0:55:32:cb:
         29:72:c9:a8:60:08:2a:9b:bd:a4:6c:1e:e2:c3:22:d8:31:21:
         f7:02:41:6b:d3:33:ca:32:d3:ac:54:ba:1f:e2:e7:bc:76:02:
         88:a5:dc:ad:a0:c9:69:47:dd:0b:ac:3e:86:a0:d6:c5:89:2f:
         a4:6a:ca:4e:fe:ec:2c:14:1a:cd:cf:1c:17:fe:e7:67:58:15:
         a5:75:94:62:74:51:ad:09:9d:45:6f:2f:bf:7a:9e:e6:c6:6b:
         90:91:56:cc:57:92:99:03:65:b9:90:29:4e:4c:84:43:ac:da:
         87:cb:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:24 2025 by rpki-client