Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa
File:                     5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa (raw, json)
Hash identifier:          h5hqLR9AyszpdiaJip8mU891m0IA4YpeomAryyYwdRg=
Subject key identifier:   68:8A:D1:CB:0A:5D:95:71:C7:84:08:3A:39:0B:A3:1F:13:8D:52:E8
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285849B149F27DAD28F551ABEB5D80
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     27370
IP address blocks:        140.241.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f2:7d:ad:28:f5:51:ab:eb:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=8daa2389-047e-4ae3-95ae-a33101939f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:2e:74:04:75:9f:f6:f9:82:37:c2:4b:68:
                    e4:03:69:21:86:f8:8b:d1:29:c8:8a:1a:d1:af:87:
                    42:fe:7d:95:dc:19:00:9b:8e:5a:62:82:a6:86:43:
                    7f:6a:17:d3:8b:04:a1:b3:dc:d7:8c:9f:c6:31:b4:
                    41:23:72:a6:8e:4b:87:6d:78:29:71:ec:e3:cf:44:
                    3c:2e:c3:ef:93:7a:8c:c1:9e:37:28:aa:b8:9b:e9:
                    4a:7e:47:46:c0:da:4b:e6:57:57:b3:17:df:1e:c4:
                    2f:a2:c9:23:c7:fd:6e:5e:1e:8e:9f:d6:8b:0e:87:
                    dd:13:39:99:7d:10:9c:0f:e3:e4:fa:5e:a0:e2:e0:
                    19:fa:3e:5a:b3:2f:68:1d:3d:a8:7a:86:63:b0:fb:
                    fc:ff:c4:fc:0e:f0:66:5f:3c:4a:76:30:3f:e9:2e:
                    6a:46:89:a4:89:d9:6e:0c:21:7d:df:19:df:4d:d1:
                    26:5b:25:46:32:d0:69:b1:23:2b:1f:3d:0b:1c:17:
                    71:58:ee:9e:a5:f3:8c:2e:87:d5:db:fc:58:60:0e:
                    fe:16:7c:15:ad:f0:aa:33:f1:d1:1b:40:d5:71:bf:
                    e4:bb:6e:54:d3:57:e9:c3:d3:ed:54:cc:02:34:ca:
                    33:21:75:5c:1f:c9:bc:fc:d2:30:58:c2:d6:91:fa:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:D1:CB:0A:5D:95:71:C7:84:08:3A:39:0B:A3:1F:13:8D:52:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:88:75:e6:ea:c6:ba:d0:bf:c5:12:67:80:8d:1e:c0:e7:
         b2:99:f8:94:0e:4b:b2:46:16:6c:f0:2b:0d:d8:9b:54:90:c5:
         5a:74:83:e7:39:ce:dd:4d:5d:c8:33:68:da:2d:71:6f:12:f1:
         4a:53:b9:82:79:9f:e8:4a:a6:01:52:dc:67:fc:f2:44:b6:c2:
         b4:0f:3f:b5:c5:34:7d:2f:a5:88:47:f6:57:b0:f7:a3:61:bc:
         49:7b:8a:df:e8:0c:a6:19:d0:ad:c5:ce:74:7e:b7:52:3b:8c:
         94:96:87:0e:64:42:fc:0c:3e:18:65:bc:3c:39:17:79:da:e6:
         af:99:ac:d7:89:80:f4:f4:1b:38:7d:38:54:ef:97:80:41:9d:
         a7:d4:f6:38:38:bc:01:8b:67:1e:33:77:d4:4d:54:d6:a3:cd:
         c2:6b:d9:dd:98:9a:09:26:0f:ee:31:c2:c5:0e:4a:ef:7c:35:
         c0:bb:64:12:8d:3c:1d:cc:bd:ed:70:67:55:91:ae:e2:8e:2d:
         e2:8c:78:2b:2c:3f:db:02:32:73:dc:e6:2b:3c:aa:1f:42:7a:
         53:1e:d8:77:ab:c6:50:d2:ba:40:65:f4:d0:5a:72:86:c7:d7:
         20:17:0c:65:f6:0d:f6:a7:00:5d:8a:e0:11:e3:06:78:65:cb:
         97:00:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:41:59 2025 by rpki-client