Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
File:                     7927bc7e-536c-3911-98e6-461025c15152.roa (raw, json)
Hash identifier:          xpL8HBJhq346jpokVOsPDrv03szcrQbuLb1UZ4n4kMI=
Subject key identifier:   6C:68:16:BE:C2:4D:57:8A:7A:DC:10:C0:BF:61:C7:C9:66:36:66:0F
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F43285848F22C68961806BD1578476200
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     14499
IP address blocks:        142.192.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:68:96:18:06:bd:15:78:47:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=95d87a63-efd4-4841-8bcc-be5b8266d032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:14:7e:c7:eb:cc:fa:93:ac:15:a6:00:54:
                    00:c9:16:ce:2a:aa:61:be:80:4f:01:87:0f:2a:fc:
                    a6:15:6a:91:66:be:46:ff:e4:22:a5:d9:a2:14:ed:
                    24:44:8a:da:f4:09:0d:5f:d3:97:72:82:39:e0:b7:
                    f1:6b:66:e8:17:64:b1:37:43:56:0d:e1:cd:91:77:
                    06:de:12:05:49:a9:e6:0b:1e:9e:60:da:c5:87:84:
                    8c:33:3b:04:0d:7f:f0:26:7e:a6:10:0d:ad:1f:55:
                    e3:e7:68:03:53:24:c9:18:b8:7f:11:49:02:63:17:
                    51:ea:4b:5a:5d:f2:91:bd:68:ae:66:4c:85:f8:f0:
                    88:01:80:9a:b5:e8:40:26:1e:59:32:48:07:3d:3d:
                    20:9f:a2:84:40:f7:4b:3a:e5:f1:a3:46:19:f9:6e:
                    a6:57:46:60:93:4a:6e:c7:f5:34:0f:53:3d:97:24:
                    b8:e2:29:99:56:11:34:fe:c1:a2:a4:48:78:4a:f8:
                    e9:62:69:51:78:66:79:26:99:50:e5:30:cd:d9:f3:
                    82:c1:30:dd:e2:ed:4e:db:3d:ff:56:3f:d1:71:e0:
                    aa:72:95:25:30:25:b4:43:f8:0c:e4:38:d3:33:28:
                    4b:d6:52:5d:e2:14:01:f8:31:77:b3:e2:95:dc:ae:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:16:BE:C2:4D:57:8A:7A:DC:10:C0:BF:61:C7:C9:66:36:66:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/7927bc7e-536c-3911-98e6-461025c15152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:16:41:7f:9c:b5:36:66:1f:fc:b6:d9:b7:bc:61:14:a6:
         3f:31:d6:a9:db:18:04:a6:21:68:17:9a:a3:b3:9c:ff:82:11:
         b5:0f:c5:08:6c:cb:e6:cb:38:64:46:ec:ff:6b:43:83:6a:74:
         11:6e:17:9f:7a:16:6a:e3:2f:78:35:a6:46:b0:05:87:bf:27:
         b8:c6:68:d2:7d:97:f5:66:67:4f:3e:bf:ed:f3:e4:35:47:45:
         07:c1:16:08:f7:ba:f8:3d:c0:11:29:b8:07:a9:ef:2a:49:9a:
         8d:29:f1:1a:a1:f6:47:70:a2:dc:69:e8:22:4f:b4:89:1a:0a:
         57:64:7c:ad:04:c5:08:73:48:94:db:9a:11:8e:b5:77:a5:fe:
         e2:cd:05:f5:1b:46:a7:1f:60:a7:c0:a2:cb:d5:cc:d4:50:1c:
         fc:b5:89:70:07:24:c4:78:c4:8e:5e:56:96:6f:71:c6:e5:f5:
         c7:82:ef:d7:7f:25:17:28:27:94:c1:8c:7e:8c:dd:50:73:30:
         27:a6:82:c7:3a:7c:65:a9:f9:60:f4:87:5a:ef:66:7b:b6:05:
         e9:e0:23:4b:e3:3d:71:e9:95:ab:a4:74:84:2f:a9:88:ae:6c:
         04:59:f5:c6:39:17:d1:8a:77:03:ff:85:78:cd:8c:7e:b1:7a:
         bf:5a:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:16 2025 by rpki-client