Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/0bb1abc2-ef03-3ce9-9b09-07d8ffee2131.roa
File:                     0bb1abc2-ef03-3ce9-9b09-07d8ffee2131.roa (raw, json)
Hash identifier:          yNptM1OyS4eomJz3D5RYbPP2C1dg7/41+lU5I5x+Dok=
Subject key identifier:   08:A3:21:A1:EC:13:0C:43:9A:0B:45:F2:DB:31:18:F6:3D:9D:2B:B7
Certificate issuer:       /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
Certificate serial:       010D0C9F4328584975B54B7BD1E3062995EFFF80
Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/0bb1abc2-ef03-3ce9-9b09-07d8ffee2131.roa
Signing time:             Tue 08 Apr 2025 16:48:41 +0000
ROA not before:           Tue 08 Apr 2025 16:48:41 +0000
ROA not after:            Mon 07 Jul 2025 16:48:41 +0000
asID:                     7950
IP address blocks:        142.87.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:b5:4b:7b:d1:e3:06:29:95:ef:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06
        Validity
            Not Before: Apr  8 16:48:41 2025 GMT
            Not After : Jul  7 16:48:41 2025 GMT
        Subject: CN=5b2cbc61-a873-4186-98e4-46d8d7b97881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:17:a0:7c:2d:1d:fc:ea:d1:b4:ee:f9:71:
                    2f:52:23:8b:02:64:2e:9a:34:4c:3e:bf:97:2a:89:
                    e1:ca:af:1d:a8:80:da:8d:65:77:c0:7c:7e:40:a3:
                    4d:ae:7a:41:9d:03:78:06:e4:0c:61:3e:79:7c:38:
                    74:e1:1e:6c:1e:9d:3a:3b:46:d0:cf:43:31:66:e0:
                    d7:40:04:15:f6:e2:05:e6:e4:5a:e0:76:61:f7:1e:
                    0d:a3:bf:d3:39:d1:20:82:c5:cf:98:30:c1:57:65:
                    56:18:f9:80:18:59:f3:b4:56:ca:21:7b:05:fd:5d:
                    0d:b3:e9:b6:d3:c8:12:78:cb:08:cd:ef:09:db:d5:
                    6f:91:37:5a:08:11:1f:e4:a7:8a:e1:f9:2b:6f:11:
                    cd:d1:2d:d0:8a:26:1e:0b:6d:fe:0c:4b:33:6d:77:
                    3e:33:d1:bd:28:c7:96:0e:22:43:98:de:69:98:45:
                    3e:7e:5b:bb:8e:31:7d:61:ee:92:bd:12:d6:b2:d3:
                    1c:41:39:92:e6:aa:1d:d7:bc:06:0c:72:9c:7b:fe:
                    a8:f3:78:84:76:65:76:b2:8d:2d:1c:f4:31:50:e4:
                    4c:69:5e:77:3c:b1:df:0c:bd:c8:51:f4:35:21:3b:
                    03:9c:09:be:36:7f:4c:36:e8:22:68:60:5d:78:48:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:21:A1:EC:13:0C:43:9A:0B:45:F2:DB:31:18:F6:3D:9D:2B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/0bb1abc2-ef03-3ce9-9b09-07d8ffee2131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl

            X509v3 Authority Key Identifier:
                keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.87.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:02:47:ee:f4:1a:ad:b6:e4:24:a0:dd:89:4f:8b:ac:a5:
         91:0d:3d:da:1b:ab:34:1a:0b:34:3c:a1:28:1d:34:73:8a:e8:
         e3:23:dc:c4:d5:eb:39:0f:0c:02:2d:e5:3f:31:74:cb:5c:8f:
         c0:54:9a:24:f5:11:3b:7e:86:e7:4f:b3:1f:92:ea:02:a0:40:
         a4:37:70:2f:a2:ae:73:a8:42:31:b5:f9:c9:0e:64:aa:b9:a8:
         7a:d5:5c:35:2d:93:59:89:94:e7:5c:86:4e:9e:25:4a:fa:9f:
         89:bd:3a:c3:43:0c:f1:91:28:8e:c9:92:73:1f:c7:46:62:5a:
         b8:22:ae:c4:77:7f:ba:8a:c5:71:37:38:0d:a0:74:ec:3a:35:
         08:4e:d6:88:68:8b:dd:bb:43:69:92:49:5d:37:31:62:32:bb:
         74:88:8f:b0:a0:2a:37:31:0c:08:7d:18:61:17:4c:1c:ce:80:
         25:2d:f0:3a:10:f3:44:01:3c:ee:e2:4c:23:7f:49:07:1a:cc:
         d3:fd:f8:c6:0c:b9:c7:25:e5:4c:9c:db:2e:e3:f5:ee:85:86:
         62:05:24:e1:b6:1d:2c:07:e7:01:3c:1e:c7:41:51:39:16:8c:
         44:0d:ee:e8:61:7a:52:62:7f:a8:1c:ed:33:d4:ea:ca:3c:5f:
         12:2d:ce:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:48 2025 by rpki-client