Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          y8glZeV7esBmgu5eG6SCYpPzjFtN99lnu9AKXDelrmc=
Subject key identifier:   FA:88:15:77:E3:EF:EC:5B:40:BF:D7:AA:D5:93:80:C9:47:8F:F9:38
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F43285848DEA1157041F4C2022C1AE160
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     16509
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:15:70:41:f4:c2:02:2c:1a:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=41fabee8-4588-4a4c-b979-199f3e73f333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:11:45:8b:46:42:bc:7f:ae:0c:43:ee:bd:
                    ae:43:3f:a5:5b:e5:66:1f:3b:94:0d:54:17:1e:0a:
                    69:1a:94:7c:e8:c2:c6:4b:59:77:c4:bc:8f:db:3b:
                    55:6b:e4:3c:3c:e9:c0:96:bf:c8:17:9d:f3:58:41:
                    dc:4e:0f:5e:87:f3:ce:ff:06:bc:c1:ec:70:ee:59:
                    f1:16:20:96:ad:ec:5f:76:13:a3:69:bc:a4:80:aa:
                    20:7a:a2:26:27:ab:28:f3:4c:b7:00:20:67:57:d0:
                    9d:7e:1a:55:bc:8a:0b:52:66:5a:73:6b:45:27:5b:
                    31:52:b8:b0:cd:aa:3b:d9:3e:d4:6c:e0:f1:81:e1:
                    37:bc:ae:d9:cc:55:70:fa:c0:6e:ce:ee:ec:1a:52:
                    1e:21:12:73:28:1f:c0:b2:d8:25:33:b9:18:c7:86:
                    ac:3c:a3:9a:79:e8:01:f2:8b:8b:4c:24:14:da:45:
                    1c:c9:1c:a4:40:6b:e5:f0:22:24:ef:e4:34:4b:93:
                    71:02:7e:b2:1e:dc:1d:bf:65:f5:3c:0d:ee:6b:75:
                    85:f5:4c:ae:48:72:09:ad:12:87:f1:1b:c9:d7:12:
                    2b:72:2a:e8:d0:d1:82:b1:22:26:f8:5b:ba:60:14:
                    7d:e0:23:2f:30:09:01:c4:05:e4:87:64:49:21:54:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:15:77:E3:EF:EC:5B:40:BF:D7:AA:D5:93:80:C9:47:8F:F9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:34:cb:b2:f7:1b:0c:3e:f6:39:32:34:2a:fa:a1:8e:0c:
         0b:7d:39:6d:95:1c:92:24:51:7d:57:44:a5:b3:7e:53:a0:a6:
         6d:1a:3b:a1:06:f3:56:51:43:4f:c8:6e:e6:1c:6f:bb:b5:63:
         16:f5:16:36:6d:ae:f7:6d:41:d7:d7:fb:98:e1:c3:95:fa:e8:
         62:f9:0a:64:e5:ba:b9:04:46:c2:ac:72:92:ca:28:5b:a4:60:
         51:b1:b0:e4:4a:b0:8c:8a:c3:8a:bd:36:a3:41:a6:d5:85:42:
         f4:d6:66:48:83:0e:cb:a3:e6:fd:40:67:32:97:c0:51:cb:49:
         df:12:3a:66:50:fc:fa:02:af:2d:ee:b6:32:38:3d:00:58:8b:
         21:b7:61:cc:a5:08:86:7b:c4:df:44:33:21:99:c8:62:f5:6b:
         5c:65:cf:63:c4:25:55:06:0f:ab:3c:07:9a:3e:0e:02:2a:0c:
         df:60:10:6f:2a:73:65:b7:81:54:ba:f2:9f:38:4a:d7:85:77:
         8a:50:7a:95:09:5f:0d:54:95:14:b6:e1:04:60:f3:2c:6d:14:
         13:63:a2:5e:21:f9:50:d1:f0:9f:ed:d5:00:e4:36:08:28:95:
         c7:43:11:9e:a6:18:f0:98:f6:64:20:38:b0:dc:92:72:68:dd:
         eb:1d:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:56 2025 by rpki-client