Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
File:                     8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa (raw, json)
Hash identifier:          UIQ2lS0Fk6pWpKVKrIFb7NftYp+ESq4Ntrnl2vHRsNw=
Subject key identifier:   0D:27:51:F0:07:24:67:2A:70:64:9A:F8:C4:FE:56:CB:6F:6A:4A:B3
Certificate issuer:       /CN=fb17e7fe-b629-4f60-b002-5a63654202da
Certificate serial:       010D0C9F43285849E2252E008A333C184050D900
Authority key identifier: 9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        142.147.14.0/24 maxlen: 24
                          162.247.96.0/21 maxlen: 21
                          162.251.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2e:00:8a:33:3c:18:40:50:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb17e7fe-b629-4f60-b002-5a63654202da
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=6959704d-d5d0-4fe4-b5a4-88457030d2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:80:04:6d:c8:ac:bc:24:0e:5f:df:6b:80:
                    ba:fa:b6:63:cb:41:62:10:8d:80:13:64:cf:bf:24:
                    dd:47:b6:d8:dc:d8:da:cb:b8:73:30:13:ed:a1:a7:
                    16:71:01:01:cf:8a:9d:65:a1:27:f9:3e:2a:23:f0:
                    1a:2e:b0:9a:86:e4:45:10:2a:81:20:b0:2a:67:21:
                    ac:2c:db:34:d8:ee:0b:22:38:2f:0d:79:1d:aa:60:
                    a2:91:6f:1e:7a:8f:77:1c:e6:3d:dd:19:2c:15:18:
                    ab:3b:2c:00:e1:56:f2:a1:51:3e:97:c5:fb:d3:75:
                    b6:04:2a:0b:72:f8:1a:85:86:77:89:77:c7:db:dc:
                    24:a4:0a:2e:69:f1:2e:69:f1:24:5a:36:43:e5:54:
                    bd:0e:66:94:39:92:cf:10:ac:4a:df:fd:4d:8d:e8:
                    9a:5d:db:fa:40:56:ea:a6:66:b7:a2:59:de:0e:68:
                    a7:59:ca:5c:b4:93:b6:d8:91:40:35:a9:a2:41:9f:
                    3f:89:ae:50:90:04:9f:71:af:55:b8:18:0e:e9:1e:
                    8b:58:8c:dc:c9:b0:59:69:0f:95:34:05:79:b4:12:
                    1e:09:04:7a:d4:06:d8:8d:7d:23:8d:f2:27:1d:34:
                    28:1d:30:5e:94:17:ad:6a:c2:b6:f9:e8:04:9d:4c:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:27:51:F0:07:24:67:2A:70:64:9A:F8:C4:FE:56:CB:6F:6A:4A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl

            X509v3 Authority Key Identifier:
                keyid:9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.14.0/24
                  162.247.96.0/21
                  162.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:b2:db:8c:34:4f:4e:d8:41:b1:30:93:f4:95:34:88:94:
         e5:23:d7:a4:57:a9:ed:3c:5b:74:d4:f9:18:33:8c:75:31:fe:
         3a:66:fa:e3:40:f1:5a:be:2f:bc:09:1a:dd:35:ab:8c:d1:b4:
         93:29:4b:5a:8d:54:b6:fa:41:4f:96:14:87:09:78:d9:d1:3a:
         15:03:2b:e5:b8:9b:da:dd:8f:27:60:19:58:8e:16:90:22:09:
         78:61:d0:78:91:35:b6:42:f4:22:dc:f6:b8:77:0b:2c:27:e4:
         b3:56:61:82:8a:d1:30:88:98:bf:81:23:ee:cf:46:59:96:ec:
         d4:36:19:bd:26:12:14:ca:cd:21:d8:21:60:86:bc:36:86:72:
         33:6c:2e:a7:11:0a:ed:d9:26:8c:cb:18:a5:8a:2f:6c:4c:a0:
         35:db:b3:4f:6a:90:10:90:f2:2c:e7:77:38:01:6e:bb:78:28:
         66:99:67:4e:53:8a:e0:c1:fc:3e:9b:fa:c1:ce:1e:69:40:cc:
         69:6d:0f:f3:36:5b:63:e2:5a:20:b8:c6:3d:bb:05:b7:f4:85:
         45:83:77:1f:26:79:d9:c2:bd:98:17:49:7f:48:83:ed:20:3c:
         15:80:7e:98:70:5d:45:f6:4e:9d:24:03:12:73:12:d8:5e:31:
         09:2a:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:25 2025 by rpki-client