Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
File:                     1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa (raw, json)
Hash identifier:          5qCYuJESuiXYTIlqwrCHL5HjhFHf9gSupt3a6aSb6h4=
Subject key identifier:   67:4E:3A:67:CD:9A:27:23:34:47:4F:AD:25:DB:5E:17:82:15:25:C3
Certificate issuer:       /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial:       010D0C9F4328584992949E3335C5F785191CEF00
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     8075
IP address blocks:        142.147.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9e:33:35:c5:f7:85:19:1c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=b0ef646f-b405-4648-9a39-287ea3cc58fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:8f:42:4c:56:15:f9:13:2e:cf:7b:db:4e:
                    c7:3e:33:c7:ed:d2:09:a8:9a:9e:88:db:4a:52:7a:
                    ad:b2:d0:5f:c6:21:64:38:9c:03:7a:c8:da:0d:37:
                    94:c9:32:51:f4:89:a8:33:e7:df:57:5c:54:a4:03:
                    91:1a:03:a8:a2:6b:ef:6a:17:26:31:0b:35:47:13:
                    ac:cf:d6:34:b9:21:55:96:78:ee:cd:3b:04:2f:ec:
                    ec:68:e7:c0:18:13:58:09:63:47:26:1f:de:be:a8:
                    bf:bb:20:cc:ae:d4:ac:1d:b6:22:f7:43:85:bc:c2:
                    5c:f4:54:4c:54:1f:af:c6:c9:b4:47:75:94:90:f8:
                    15:52:a7:dc:58:23:08:63:62:a2:30:c7:7d:78:0f:
                    2d:62:2a:86:f3:98:c6:94:0b:0e:05:16:db:b6:55:
                    e9:30:3c:e6:cc:e1:67:8c:64:e9:0c:2d:2d:72:ad:
                    5e:b2:d1:0d:4d:4e:2b:4b:bb:c7:da:50:34:e8:66:
                    72:4c:09:6a:10:0e:0a:bd:e3:29:62:1b:bb:6b:93:
                    ea:93:41:7a:74:20:90:00:a2:f3:0d:5f:2e:cd:57:
                    75:86:06:ba:c1:84:66:8c:a9:ae:a0:6a:6e:81:79:
                    5a:c7:12:6b:b4:25:f4:68:2c:53:54:18:ca:8d:0c:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4E:3A:67:CD:9A:27:23:34:47:4F:AD:25:DB:5E:17:82:15:25:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl

            X509v3 Authority Key Identifier:
                keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:f4:dc:0b:bd:e5:07:d1:44:73:5e:8f:dd:25:7d:1d:e5:
         73:77:9a:0b:28:cf:73:16:8f:8a:65:d6:89:f5:0d:d7:f6:1b:
         a9:25:69:26:f2:fe:de:fd:f3:ce:66:b2:b0:3e:3f:78:0b:38:
         72:49:35:ae:98:87:6d:8f:16:94:50:80:22:18:50:30:00:4d:
         79:c4:0c:ad:50:a5:fc:23:21:bd:a8:9a:3a:9f:32:6f:ca:4e:
         fb:f0:e1:08:d6:55:53:4c:31:0a:0c:4e:da:c6:29:dc:2e:3c:
         9c:aa:71:90:03:ed:96:c4:da:c6:12:cd:2e:e2:9f:80:45:0c:
         e6:17:89:87:70:1f:20:9e:84:6d:04:e9:36:39:d4:dc:9d:37:
         93:7f:75:3d:be:c4:ae:41:81:b0:cd:35:2f:46:06:27:9b:ed:
         f1:cb:76:b3:aa:c9:37:d1:e4:23:f9:d0:4a:aa:00:3b:df:b6:
         f5:fe:f1:08:5f:17:2f:6e:18:c1:e3:2c:48:ec:bf:27:33:ff:
         a0:02:1d:38:1d:49:70:67:28:22:fc:91:a4:78:94:74:64:95:
         d1:43:bf:c7:a8:cc:26:81:b5:3b:39:91:98:cd:5a:43:c0:4b:
         b3:3b:3c:e3:7b:5a:0a:d9:a5:09:31:bb:13:1b:32:84:76:f4:
         0f:82:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:19:09 2025 by rpki-client