Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/8933752b-a088-30e6-a4ff-c220d1563136.roa
File:                     8933752b-a088-30e6-a4ff-c220d1563136.roa (raw, json)
Hash identifier:          HgT2KwF6jwpVmkIH/B7xNqAg1W7P6ysb0u4BpA9AjTA=
Subject key identifier:   67:18:6A:AD:83:34:44:49:39:F6:D4:31:13:8E:CB:63:60:97:F9:96
Certificate issuer:       /CN=898522c4-7c40-4c25-80fb-b226c0ea4497
Certificate serial:       010D0C9F43285849DA362CC7325DA4F967671400
Authority key identifier: 57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/8933752b-a088-30e6-a4ff-c220d1563136.roa
Signing time:             Wed 14 May 2025 16:49:12 +0000
ROA not before:           Wed 14 May 2025 16:49:12 +0000
ROA not after:            Tue 12 Aug 2025 16:49:12 +0000
asID:                     3128
IP address blocks:        141.233.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:da:36:2c:c7:32:5d:a4:f9:67:67:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=898522c4-7c40-4c25-80fb-b226c0ea4497
        Validity
            Not Before: May 14 16:49:12 2025 GMT
            Not After : Aug 12 16:49:12 2025 GMT
        Subject: CN=6a0e9789-7cd9-47f9-8b59-637ec35c5cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:d9:3c:5d:01:97:2d:dc:2a:df:b7:e5:97:
                    09:b1:65:aa:98:e1:f4:82:0b:6c:9d:af:8e:f2:0a:
                    77:d3:59:83:b7:6e:c0:25:24:f9:2c:9a:f8:cc:35:
                    d2:28:6a:77:79:d8:2b:35:68:98:a9:44:9d:71:0b:
                    2f:b6:b9:13:a7:cd:65:d2:60:0b:f8:34:a8:1e:1e:
                    7f:99:6b:c1:c9:3f:07:6b:8c:15:d8:b6:08:55:44:
                    67:c9:98:cb:6c:fa:7a:84:c5:8b:02:22:27:e9:41:
                    8e:58:94:f7:a4:c9:b9:3f:a2:8a:24:e6:ff:73:95:
                    70:83:4d:8c:e2:2c:89:b2:b0:4c:08:29:fc:8d:b2:
                    76:15:a8:6d:9c:42:6e:e2:5b:36:5d:c7:10:71:42:
                    3b:29:df:fc:da:14:34:81:32:29:28:67:fb:df:a1:
                    30:36:b2:af:09:f7:76:36:1e:13:d4:7c:c4:2e:c9:
                    99:de:55:41:5d:48:ec:22:1d:44:02:0f:4e:40:82:
                    d3:d9:d4:7f:ca:54:14:62:b0:51:d4:a2:24:ab:00:
                    ae:0e:8c:a8:95:95:76:e1:ac:c3:ad:c2:61:c5:02:
                    70:f7:c9:ae:20:4e:45:6d:ef:fc:18:5f:c9:85:93:
                    98:ec:c5:9d:50:b1:0f:85:e7:5d:86:7a:99:c1:81:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:6A:AD:83:34:44:49:39:F6:D4:31:13:8E:CB:63:60:97:F9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/8933752b-a088-30e6-a4ff-c220d1563136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497/898522c4-7c40-4c25-80fb-b226c0ea4497.crl

            X509v3 Authority Key Identifier:
                keyid:57:28:87:21:DA:0E:BB:07:30:55:9A:58:7F:62:EF:05:E6:96:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/898522c4-7c40-4c25-80fb-b226c0ea4497.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:04:7a:79:86:11:e3:11:40:76:47:c0:3d:04:83:ed:d6:9d:
         ce:9b:92:b7:88:25:6f:2f:47:ea:16:1b:e3:ee:56:2e:cd:c7:
         56:23:fe:80:86:90:3a:76:a2:ec:26:ab:83:a9:a0:8a:77:8a:
         54:7f:64:c6:99:c7:01:33:f6:65:46:b5:32:48:35:cd:2e:57:
         75:77:11:b1:af:13:55:8f:04:47:56:44:b8:ab:33:36:ad:c7:
         c7:97:c8:4f:d5:5a:0b:0a:42:c7:cd:ed:f8:ec:47:b8:96:66:
         90:44:97:03:83:71:e7:6c:b4:42:77:c5:ce:e8:0b:ba:e1:15:
         a7:f2:27:f1:bb:49:5f:bf:ca:e1:96:b4:7b:41:a3:b4:4a:cc:
         70:c1:0a:2c:f6:6a:ea:8a:86:0f:0f:e8:9a:01:98:cc:b6:4b:
         d1:9a:82:58:41:44:f0:46:ac:2e:47:02:cb:a5:05:66:c2:48:
         75:c8:d4:aa:c8:11:57:ad:fe:c7:24:d1:6b:b1:79:51:73:5e:
         a8:d5:6f:c4:96:5c:c2:cd:36:30:c3:84:3a:1a:91:9b:da:fe:
         37:09:40:00:d8:aa:3a:38:c6:54:b7:b1:84:b4:64:a5:a0:f6:
         a8:89:50:1f:a4:dc:8f:d7:83:29:71:c9:ee:57:c0:38:e8:41:
         74:6a:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:12 2025 by rpki-client