Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
File:                     d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa (raw, json)
Hash identifier:          FJxUUXAqF10sPBUNKmv35J37hJD2//zJNYju6yOyffU=
Subject key identifier:   EA:4E:16:B7:9F:5F:B9:41:A6:0C:18:5B:63:23:DC:C6:DD:6F:AA:F8
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F4328584A146565D10A1C8018618513C0
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     396045
IP address blocks:        142.202.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:65:d1:0a:1c:80:18:61:85:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=94cc6721-3476-4d8a-9192-0c2dda2da411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:7b:9f:8b:74:3e:e4:7f:80:53:21:1c:ae:
                    94:0d:96:2d:cf:2d:fb:a3:a2:e4:69:b7:e6:fc:cf:
                    b0:65:c2:47:be:c4:ad:25:a0:d0:75:3f:f3:84:10:
                    36:30:ea:37:cf:61:be:b2:ef:34:43:79:e5:7e:3b:
                    09:ae:ce:86:d8:02:ce:00:05:5f:a1:7c:34:bb:59:
                    d8:ad:71:87:70:13:a3:b9:ed:c7:2a:01:d8:5a:1f:
                    52:bc:70:10:c3:17:22:84:01:59:04:b4:42:46:e8:
                    dc:1e:32:32:a9:ed:f6:20:3f:24:91:58:51:14:97:
                    d9:a5:08:01:96:94:b7:b6:3a:41:67:d9:ac:08:97:
                    23:03:91:68:bd:81:17:f7:75:28:99:66:27:70:2a:
                    4f:97:3a:27:ee:62:5e:ab:bc:e6:11:c5:80:66:76:
                    f3:7c:07:88:b1:01:27:7f:c9:36:32:fe:93:da:60:
                    72:f7:17:6b:a2:b4:b0:d8:ef:c0:38:11:e4:22:da:
                    68:a4:44:42:78:fe:d3:26:43:78:d8:21:6b:0c:db:
                    86:3f:b4:35:fb:ae:5f:2d:82:03:81:86:1f:0c:f6:
                    03:18:24:70:9c:b7:d3:39:59:cb:23:fe:77:94:fc:
                    c0:93:dd:32:ea:06:c3:14:a7:da:0f:62:86:42:3e:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:16:B7:9F:5F:B9:41:A6:0C:18:5B:63:23:DC:C6:DD:6F:AA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bf:2f:7f:e5:22:a7:78:54:7c:94:51:fd:fd:19:26:a7:0f:
         17:9b:52:95:73:86:2c:4d:d1:94:70:30:d6:1f:8d:1c:2d:6e:
         6c:df:18:28:8e:7c:64:e3:7e:8e:b5:40:4e:cc:12:d5:c2:ad:
         3f:da:6b:39:ef:a1:91:da:09:1d:66:09:ea:64:66:53:6d:a7:
         5a:4e:56:a7:a3:71:64:24:79:67:ba:ea:df:eb:36:35:a3:78:
         c6:72:76:40:de:fd:0c:82:80:2d:8d:0c:5d:7b:a7:99:5e:a3:
         7f:af:4d:30:64:2d:7f:98:e1:f9:99:c9:f5:86:b2:c1:10:8d:
         b8:26:2c:3b:4f:db:51:85:6b:eb:b2:07:a5:3c:61:25:8f:cb:
         ac:1e:92:2f:a8:43:53:dd:47:34:f4:9c:76:c1:c1:f7:1a:8d:
         c6:97:dd:46:38:9d:03:6e:4d:85:95:cd:f8:66:3a:ec:69:c3:
         3a:b8:4f:22:4a:32:a3:04:3f:cc:c8:a3:05:b8:da:5b:00:f2:
         bd:35:4f:4e:f6:22:4f:1b:46:75:e3:da:f6:fd:92:e2:81:da:
         50:50:ae:d5:f8:35:36:df:74:58:6b:ed:d8:0a:9d:f8:52:3e:
         85:5b:09:79:61:91:83:c1:28:f0:a4:b8:c1:59:32:38:01:c8:
         c8:0d:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:21:56 2025 by rpki-client