Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
File:                     4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa (raw, json)
Hash identifier:          uTIogtrLD6xD1Semxd7y/yNFRdH+CoaQtzrXeiP/Plw=
Subject key identifier:   6C:E5:36:3E:8F:2E:63:CE:FB:FF:D1:CD:F2:8E:16:33:75:F8:95:3D
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584986046D4AA41E5A798789AB80
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     237
IP address blocks:        141.210.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6d:4a:a4:1e:5a:79:87:89:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=71699828-36fb-4479-88fa-3322a449477b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:e1:ee:f9:1a:66:58:6a:31:ec:2c:75:63:
                    50:5f:7e:58:63:84:e7:d8:d7:7b:5c:76:8c:ca:06:
                    e5:ab:b0:34:df:02:55:5b:53:5c:59:e3:7e:e6:23:
                    7c:36:08:b8:68:38:79:59:77:95:09:9a:a2:25:97:
                    d4:73:1b:d1:f1:e4:cc:4d:c8:be:5d:93:d0:88:a3:
                    b9:31:9f:c6:98:77:dc:31:45:71:26:a9:15:2b:c2:
                    5a:57:8f:1c:74:c3:15:a9:6c:96:18:54:43:55:00:
                    1c:dc:83:4d:00:f5:7c:7b:07:4d:55:ce:ea:28:fe:
                    12:f0:5a:55:92:8e:7d:88:c3:be:31:32:c7:15:85:
                    bb:81:ef:75:00:66:c3:34:85:a5:ac:82:c0:fb:e1:
                    7f:5d:62:fe:34:b1:7c:df:35:d0:d3:6b:22:93:f2:
                    68:1a:23:74:1e:08:d1:b6:86:8d:3d:e5:49:d5:ed:
                    13:28:9c:e7:17:8c:3a:6b:69:d9:10:e2:4c:2f:98:
                    08:af:6e:da:7d:3f:1a:46:e0:2e:79:87:f9:7d:5f:
                    d9:73:b4:4b:e2:bc:27:db:70:29:67:3b:f7:cc:53:
                    0a:20:98:48:bb:e8:bc:2a:7b:86:40:1a:f9:3f:1f:
                    be:0f:5b:87:15:33:55:12:28:9e:88:3c:b9:4a:cc:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:36:3E:8F:2E:63:CE:FB:FF:D1:CD:F2:8E:16:33:75:F8:95:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:00:c2:db:00:79:cc:bd:36:ed:14:e2:84:b3:03:59:b8:34:
         ff:01:52:68:c1:da:47:5c:ad:02:d1:0d:ab:29:6a:87:2e:ec:
         6a:79:2b:8b:e3:6b:c2:19:af:e8:86:8e:ab:30:72:1e:c6:1a:
         fb:3b:c4:64:1e:55:61:72:cc:ae:50:99:71:d4:e4:4b:bb:4b:
         2a:3b:56:38:86:9d:0f:bc:ab:24:93:8b:53:61:3e:94:75:19:
         1f:e7:69:dd:8a:e4:52:19:ec:85:32:eb:6c:d2:4c:a3:38:47:
         1a:61:c0:17:3d:8b:db:c8:ec:ec:ff:7d:d0:68:9a:4a:47:10:
         0d:58:b4:33:20:c2:5b:2f:b6:29:ed:60:90:ee:f3:a8:5d:09:
         84:e6:17:3f:61:2b:90:1a:c1:9d:3d:78:14:cd:3c:b0:a6:06:
         84:d3:c6:2c:ef:0b:1e:f6:cb:10:b1:0e:fd:06:e5:cb:dc:59:
         df:47:15:06:c2:bd:36:ab:d5:0d:37:2b:0d:db:6b:fa:c0:78:
         a2:44:9c:80:0a:75:e1:f7:27:14:06:ee:e5:f3:7e:fb:cc:2e:
         0a:fe:ca:b8:9e:25:84:c2:4f:71:ee:af:31:ad:5c:07:34:96:
         44:b0:45:4e:a7:bb:e6:10:63:c2:bd:5e:c4:25:16:79:a2:9c:
         19:83:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:22:50 2025 by rpki-client