Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa
File:                     04b2404f-71b7-3876-8428-f27437f41261.roa (raw, json)
Hash identifier:          hF+DG9Se2Bqjj/YZ0FNN/eRzk+D6AIxAi+P5Jq8/Y6Q=
Subject key identifier:   F9:A0:E9:72:74:A0:2C:A4:E3:10:43:D2:18:C4:52:84:85:12:83:3B
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584A189543F231D099FEDD2325A0
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        142.0.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:43:f2:31:d0:99:fe:dd:23:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=ef282188-a30a-4aeb-b457-464610b51d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:de:84:f5:38:ac:34:6e:24:89:d5:4b:67:
                    84:19:cd:b5:c7:2a:90:52:aa:3b:6a:b9:a3:4c:f2:
                    be:74:06:0f:ed:da:dd:30:b7:89:d4:2e:c1:62:ac:
                    8e:0f:4c:9a:2a:d9:f6:f7:95:62:eb:0f:39:51:bd:
                    54:b5:54:7c:38:6d:7d:2c:9b:9f:ff:83:4c:97:11:
                    a9:43:d8:4b:fd:44:61:97:a4:5a:44:ef:f5:3a:e4:
                    a1:47:95:c9:b4:4c:69:9b:71:a4:66:e9:96:63:71:
                    e9:5a:b9:17:fd:f0:63:21:56:19:4f:d4:a1:fa:1f:
                    47:f0:ab:6f:1a:75:62:bb:ba:7d:59:02:ae:68:c1:
                    86:f2:71:31:7f:fe:bf:7f:09:68:01:bd:ce:ff:6e:
                    df:69:3b:e2:87:ea:4e:75:38:a3:aa:f3:ba:ef:6a:
                    a0:4c:70:d7:4c:38:28:2b:b1:da:27:ed:42:3e:a2:
                    9b:40:ae:0b:97:c3:59:3c:0a:08:a2:d2:f8:87:48:
                    c5:18:f7:c3:17:19:cb:38:ca:95:c0:b9:85:90:eb:
                    df:15:df:3e:44:e8:de:1b:f6:79:0e:f2:83:8a:80:
                    0e:6c:6e:4c:23:38:61:96:14:5f:63:f0:57:4f:dc:
                    55:86:5c:65:80:c5:ca:55:82:a4:b1:f4:f6:2a:4b:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:E9:72:74:A0:2C:A4:E3:10:43:D2:18:C4:52:84:85:12:83:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:90:b0:19:d9:dd:c9:6d:3b:0e:5a:00:95:47:72:a4:7a:3c:
         80:de:32:ff:19:aa:fd:76:83:22:1a:ec:c5:d2:4f:92:b3:45:
         69:05:49:a2:34:d4:ce:25:da:f6:2b:f2:3a:3c:f3:dc:1d:d9:
         b5:76:88:a3:d7:a7:5d:64:44:6c:54:e9:98:63:96:63:c9:f5:
         5c:92:d7:51:8e:41:bc:7f:ed:0c:9a:70:5d:11:0d:0e:cc:48:
         90:61:49:05:bb:b3:19:5e:cc:41:79:3b:e1:a4:a7:40:b1:38:
         a0:3a:10:96:ba:e4:18:93:0b:4f:07:4a:09:46:a5:9a:fb:7b:
         72:02:3e:6e:a4:62:b7:5f:7e:23:e9:b4:0d:6c:c0:ff:6f:e2:
         d2:ef:bd:b4:d0:eb:3f:d7:1b:18:ad:12:13:c4:8d:ad:a3:be:
         65:af:31:ba:c7:7c:90:69:a8:ba:e9:5c:5a:80:0d:7b:2a:87:
         3c:96:93:52:1d:ef:15:2e:3a:b3:a4:df:d9:d3:68:bd:28:41:
         f6:75:f1:a1:54:b6:d6:02:b2:7e:84:fa:ca:ee:16:77:05:48:
         7a:ba:c2:86:c5:a0:c2:51:67:ee:73:54:44:9d:09:4d:e5:dd:
         09:16:91:42:aa:15:e1:dc:63:aa:23:c0:3f:e5:f7:10:3c:1a:
         80:a7:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:45 2025 by rpki-client