Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4a651e72-8f32-328d-b620-a379e6a4d587.roa
File:                     4a651e72-8f32-328d-b620-a379e6a4d587.roa (raw, json)
Hash identifier:          Qrbo70PiH8oTAu4+kwIWRR8lakdGYgudQPlpxvTer5w=
Subject key identifier:   FE:4F:2F:5C:09:F7:89:BF:4C:ED:34:04:39:8F:FC:CE:81:94:24:47
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F43285849A089D06D22A84061125D7E00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4a651e72-8f32-328d-b620-a379e6a4d587.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     13760
IP address blocks:        142.190.100.0/23 maxlen: 24
                          142.190.102.0/23 maxlen: 24
                          142.190.104.0/23 maxlen: 24
                          142.190.106.0/23 maxlen: 24
                          142.190.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d0:6d:22:a8:40:61:12:5d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=4016d020-a91d-4641-b052-6fc3daa08ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:7f:bd:4f:12:60:f5:04:73:f5:52:21:43:
                    a6:30:49:14:8e:a9:6d:6a:a0:9a:97:c3:07:33:99:
                    da:54:1d:90:94:a7:7a:b4:53:29:20:4c:10:c7:77:
                    e7:58:31:eb:99:14:1b:4b:80:a7:ed:11:b6:3f:5c:
                    38:c5:13:62:1a:54:bf:a2:3e:d6:7a:d9:0f:9a:8d:
                    44:fd:de:c9:96:64:7e:31:8a:6d:17:9a:02:94:8b:
                    b5:23:1b:ac:c6:de:0d:83:22:d5:6a:bd:18:28:fa:
                    b7:4e:1b:40:e4:8d:1e:de:1d:99:49:f5:10:71:03:
                    74:18:74:ee:2b:2f:86:c1:a2:30:19:97:f3:38:f0:
                    19:17:8a:66:95:80:8b:db:11:82:f5:f9:27:92:8d:
                    c0:c1:79:df:80:cc:06:9d:33:22:cf:ee:e1:fd:fc:
                    fb:6a:f6:3f:f0:34:14:4c:cd:03:55:91:67:8d:b4:
                    c4:29:47:5f:e7:3b:73:76:85:07:1b:64:94:b0:fa:
                    79:d0:89:5a:38:a2:89:0f:86:1e:45:9a:dc:4e:2f:
                    5b:ba:fa:32:a3:22:46:ef:d7:2b:6b:80:94:61:fa:
                    1e:bf:0c:1f:e0:4f:ac:77:58:6d:a6:70:f8:8e:30:
                    14:4a:5f:09:f2:65:9b:23:0b:7a:ea:02:c3:e1:97:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4F:2F:5C:09:F7:89:BF:4C:ED:34:04:39:8F:FC:CE:81:94:24:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4a651e72-8f32-328d-b620-a379e6a4d587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.100.0-142.190.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4a:5d:e6:79:3f:bc:af:8a:d8:88:dc:64:8a:89:45:c2:3a:
         80:13:e1:18:4a:36:74:28:bb:45:29:72:64:4e:75:04:26:50:
         55:03:97:51:f3:44:47:ee:8a:29:1d:d0:78:e6:25:2b:1d:13:
         af:29:e8:66:94:28:4a:df:a3:a0:63:a7:23:94:f5:9d:ca:db:
         29:27:b4:0e:14:34:04:d9:90:1a:5d:5c:64:62:3d:b3:41:0c:
         fe:ac:88:a5:89:3f:fe:a4:dc:98:63:f8:d0:b9:f0:92:0a:07:
         a2:54:32:da:1d:b2:e4:fc:c7:bd:f2:e5:85:ed:af:ef:84:f8:
         b2:ba:51:3a:39:6d:5a:65:c2:1b:20:36:83:cf:b8:97:22:f7:
         83:92:f8:08:fe:ac:b3:b0:04:23:40:1f:dd:ec:0b:46:ed:09:
         1a:9f:1b:3f:47:b6:59:0c:b4:25:47:01:ea:1e:1a:64:4e:32:
         c9:27:9e:b9:8b:c6:d0:cf:73:18:86:19:b6:a8:ff:24:9f:79:
         05:76:97:ef:d7:27:7c:3c:01:10:af:ff:57:23:cb:3e:f1:0c:
         09:a1:78:12:f5:72:e7:51:1e:27:14:e9:7d:d2:e0:1d:aa:a6:
         2c:8e:69:3d:0a:33:75:bf:04:7d:b2:77:b7:af:58:38:3a:88:
         28:ef:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:48 2025 by rpki-client