Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
File:                     ff716936-7063-31f2-9384-008bde05ec92.roa (raw, json)
Hash identifier:          LrlsfYeGrSN5iS0TS87Hn9t61SE63UFctcdF5vqa8qw=
Subject key identifier:   7D:56:C8:AA:03:D5:E1:1D:79:6F:A0:2C:0A:C1:4C:30:CE:03:33:BA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849E654F3E07E5B96C274B0A100
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     271
IP address blocks:        142.231.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f3:e0:7e:5b:96:c2:74:b0:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=b14ebc35-15e3-44e7-aa09-b7ccbf82694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:bf:41:8d:37:4b:58:9f:8d:e7:49:11:48:
                    b9:fe:ed:2b:d7:32:ae:1b:d2:f6:f7:2b:0a:6b:29:
                    42:60:25:c9:f0:ab:3e:4b:ad:d1:77:b6:7e:35:3d:
                    9e:79:62:31:03:5e:0c:a2:1d:c3:9c:65:94:cf:1b:
                    2e:d7:06:22:aa:ae:e7:e3:8c:84:a0:d0:56:0e:64:
                    99:78:43:ce:8b:bd:39:31:1b:e9:b8:eb:45:7b:4e:
                    d3:e4:e8:f8:ab:5f:a0:c6:4b:2b:ea:ce:ff:89:da:
                    5b:72:ad:68:e3:f4:36:29:31:8c:f5:78:08:1f:91:
                    60:7e:1d:d6:c1:52:75:88:66:83:39:f4:d6:f9:a3:
                    54:be:c3:60:be:58:e6:ab:99:64:de:d9:62:8d:31:
                    3d:e3:80:dd:6f:ca:3c:2a:fd:62:ad:9a:48:29:5f:
                    b3:02:f1:db:70:22:1a:1a:78:d8:ba:5e:a8:6c:8f:
                    dd:d4:ca:f0:23:71:bb:24:cf:50:61:da:68:ee:19:
                    f2:20:74:05:d8:a9:71:e5:7f:d8:b4:e8:39:8e:42:
                    62:06:a6:d6:94:e2:d9:33:34:af:a0:eb:d4:bd:75:
                    86:6a:25:4f:b8:aa:17:19:25:af:ee:2a:11:a4:56:
                    c2:d5:c5:8d:5c:83:dd:ed:80:74:e2:9f:de:bb:5c:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:C8:AA:03:D5:E1:1D:79:6F:A0:2C:0A:C1:4C:30:CE:03:33:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:61:07:93:fa:b8:c4:65:28:34:3d:0d:08:b5:9f:6f:a3:8d:
         36:70:ad:10:2e:25:19:3c:f1:1e:df:32:b4:fc:45:0c:8d:f3:
         11:64:2a:11:eb:4a:bd:32:c6:7b:d9:2c:cc:43:ba:12:fe:10:
         d7:d5:88:39:be:b6:8d:b0:bd:56:03:55:30:56:b3:0d:57:88:
         db:fe:d4:42:70:c4:f3:0a:7e:bc:65:e0:95:53:8a:c3:e7:79:
         36:b6:74:24:ff:9b:c8:7b:f5:0a:7e:b4:64:a0:9b:16:03:e6:
         75:fd:66:da:42:f2:ed:34:aa:34:6d:ff:78:d3:d7:fd:8a:c4:
         d6:f1:fd:3e:9b:86:6e:a2:03:31:af:f9:8e:1b:ce:f8:85:b9:
         91:9f:de:82:50:b6:ed:93:c5:93:3e:e0:ca:70:72:f7:25:74:
         aa:35:77:e9:f0:c5:e3:00:29:30:1f:da:bb:ab:e5:f4:46:ce:
         0d:74:8a:b0:ec:52:57:69:af:8e:02:fc:37:8e:3f:b1:a4:9d:
         cb:b4:fa:3d:a2:fe:07:3c:50:f0:be:d5:91:b0:da:f6:56:29:
         44:12:9f:61:9d:15:4e:86:b7:15:d0:4f:bb:b1:98:da:5f:2c:
         19:e6:ee:c9:bc:96:b7:56:fd:0b:d7:e1:f5:99:73:ab:88:a4:
         30:74:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:26 2025 by rpki-client