Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
File:                     e31456f1-214e-30d0-9c8f-f3fa76292a27.roa (raw, json)
Hash identifier:          70JE72o8SLzHAmGnotYjzw/Y6KpDcOOmSEJRknrrSaA=
Subject key identifier:   C8:29:91:5F:38:FE:37:A2:F6:8A:2E:9B:3E:DB:89:A2:43:B6:0C:CD
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285849EBEA52421D5024E1BCD2F8E0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     30456
IP address blocks:        141.195.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:52:42:1d:50:24:e1:bc:d2:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=98a43177-a384-4818-b61d-2aee68beefd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:46:5f:e2:96:31:b2:28:43:49:6f:c3:c2:
                    70:03:e9:f3:da:ba:f4:1a:2b:40:83:3b:6d:32:5c:
                    05:53:96:af:13:f5:14:c6:de:9f:46:e5:75:91:df:
                    25:6e:d5:df:b0:17:5a:21:a5:1e:d9:59:fc:3b:0d:
                    8b:46:96:28:62:85:0f:48:ea:c2:3d:75:0a:b8:d9:
                    70:73:61:39:88:ea:21:b4:96:83:a9:d1:51:20:38:
                    b2:8d:df:87:12:da:aa:ca:50:42:37:51:48:85:63:
                    6f:82:68:0e:99:e0:4e:44:3b:9c:29:51:5e:01:3a:
                    d8:2e:8d:ce:d1:3f:bc:45:92:54:e3:a8:e4:22:f3:
                    3d:c7:15:e5:af:9a:95:27:77:40:6f:14:6c:59:08:
                    16:0a:bd:6c:a9:fb:b6:09:bc:8a:6e:60:ce:af:7d:
                    92:4f:0d:4b:2e:2c:4d:6f:5e:e5:cc:b6:76:74:15:
                    ac:9c:12:bc:d2:cf:4a:f1:95:c6:b6:2e:9d:15:fb:
                    7a:16:dd:8b:2c:16:b5:1e:0f:16:5d:ef:88:6c:b7:
                    4a:70:a1:8c:86:60:64:cd:5e:d7:cd:80:4f:3c:fd:
                    39:15:f0:0c:c4:2e:49:4d:a1:73:56:38:cd:24:c2:
                    06:ba:d1:9a:ad:16:45:ee:29:fb:f8:d6:96:bc:81:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:29:91:5F:38:FE:37:A2:F6:8A:2E:9B:3E:DB:89:A2:43:B6:0C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e31456f1-214e-30d0-9c8f-f3fa76292a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:26:27:25:8d:a6:45:b0:36:0f:f3:4d:b5:49:9b:34:4a:
         6c:05:ad:36:c7:ad:90:a6:b4:27:ef:09:41:26:38:a8:53:b5:
         ac:61:93:f1:71:2a:08:81:b7:6f:ef:ef:82:f8:13:60:78:6a:
         f0:d0:32:92:2a:10:73:1f:c3:5d:63:b1:5c:24:80:89:75:ad:
         3d:cd:e8:a0:f3:e3:c6:ba:12:fa:f1:05:99:7a:97:27:67:03:
         1f:98:a5:33:22:40:60:a7:eb:8c:db:ab:9d:3a:35:7d:68:11:
         39:da:04:da:de:11:a4:ed:f1:45:0c:1b:17:40:a4:83:45:20:
         3d:1f:cf:8e:6b:df:44:90:cd:38:a6:ed:3f:01:f5:72:f6:75:
         a4:35:62:9c:8c:9a:ef:f2:49:14:46:1f:63:45:ff:c5:6f:37:
         10:1c:4f:9a:16:d3:d6:96:fb:5b:a5:94:f6:af:4b:62:e0:6d:
         de:2e:4f:40:24:7e:b9:44:93:35:f1:15:2b:9d:e3:78:b4:a2:
         a9:c8:51:ce:a3:33:a8:0f:dd:a3:72:77:77:15:da:26:2c:38:
         4b:0a:08:e3:57:31:09:22:b5:51:80:ee:81:26:04:49:16:6c:
         79:ec:c3:00:d6:fb:59:36:eb:b1:e5:13:f6:24:2c:e9:41:b2:
         fc:8a:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:52:45 2025 by rpki-client