Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa
File:                     0efae3e3-b805-3b9c-b88f-b01ecc529439.roa (raw, json)
Hash identifier:          QdCAtYHWgfs6nprwKUXlwBaSBXqA8pMLvFlWmWHUiSk=
Subject key identifier:   4A:E5:37:F3:81:42:E7:DB:CE:89:ED:C8:3F:FC:FC:E8:36:5C:E4:E4
Certificate issuer:       /CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
Certificate serial:       010D0C9F43285849DF5A7276B7860FBF42BB8640
Authority key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     12129
IP address blocks:        141.195.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:72:76:b7:86:0f:bf:42:bb:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=11caca13-ae0f-4280-813f-a988a47c2f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:b9:de:a5:0d:93:a7:96:32:ff:85:4d:d6:
                    86:09:5d:50:3e:bc:64:dd:14:9d:87:b2:e7:91:3d:
                    09:57:fd:68:58:7a:6c:22:03:80:88:05:85:4d:e6:
                    30:fb:a3:82:18:d6:fe:c1:c0:43:e7:91:27:96:a7:
                    64:5a:64:b8:2a:64:cd:30:eb:28:41:4f:f4:5b:dd:
                    54:ad:2b:1c:30:5b:49:63:15:e3:66:d0:ce:24:7a:
                    1e:5b:a4:1f:b1:93:07:5f:06:01:83:b5:e3:4b:25:
                    ad:e0:5c:9b:13:9b:9f:08:71:7b:7f:03:a2:43:df:
                    a0:5a:66:37:d7:82:f3:88:64:a6:55:e6:00:72:fb:
                    3c:95:b6:24:38:e7:d4:87:82:28:6e:e3:39:6a:2d:
                    98:5d:6b:be:cc:c3:d2:16:5b:11:b3:1a:36:4a:b3:
                    93:38:82:18:65:23:8f:a0:ca:94:7e:c3:35:c3:ab:
                    1c:b4:7b:47:8f:53:e9:8e:29:1f:b3:2d:63:8a:d3:
                    c9:56:ce:25:5a:54:d0:af:b8:f4:b4:80:3d:b3:44:
                    a2:f8:e5:8e:f8:fd:c5:d2:43:08:4d:da:fa:c0:2c:
                    5c:11:22:7b:1e:ff:20:c7:e0:e9:9b:86:56:d7:fa:
                    0f:cd:4f:ff:34:71:0a:46:59:2f:b4:0e:8f:b9:8d:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:37:F3:81:42:E7:DB:CE:89:ED:C8:3F:FC:FC:E8:36:5C:E4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl

            X509v3 Authority Key Identifier:
                keyid:0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:48:8a:74:51:0a:b5:97:da:79:e5:53:8b:95:7a:1f:60:
         1d:c2:7a:93:b3:f7:77:ef:cd:66:4e:c3:e1:02:37:41:28:c9:
         63:ea:ed:b3:a2:e0:07:89:1b:02:13:50:e2:a3:41:50:36:33:
         a6:1d:35:0c:3d:c2:f0:e7:dc:69:83:7d:a6:3b:22:91:4f:e1:
         9e:32:4c:29:da:4a:a4:1a:27:57:b6:d5:5f:67:c2:bb:7c:0d:
         58:c7:34:30:78:2e:bd:59:31:b1:06:dd:2d:62:73:d1:41:c0:
         14:8d:b5:eb:dc:7f:21:16:01:d3:1f:b6:86:95:58:f4:26:1c:
         35:14:68:de:2c:bd:27:ee:07:5c:85:a4:fb:c0:01:94:92:59:
         10:35:59:89:f9:12:62:e8:fc:89:b1:09:dd:33:66:fb:8b:ef:
         ce:87:30:47:07:d0:2e:1f:58:1c:67:cf:eb:ee:c7:61:07:7a:
         75:2a:70:16:75:1a:27:d9:08:1d:2a:e4:9e:e2:60:09:45:eb:
         3f:20:bc:77:42:34:fe:e0:d1:d7:d2:5e:69:34:5a:77:6c:e1:
         a6:29:50:7d:ee:4d:8a:db:01:96:e6:95:7e:8e:56:22:f1:ce:
         f4:f2:17:09:54:04:fd:d2:e9:b9:c9:0f:c3:ef:b3:8d:c9:26:
         9e:d4:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:16 2025 by rpki-client