Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
File:                     78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json)
Hash identifier:          t/WrsGNdRdPhlLNmDbly7NxYu63ctFq5E276+3rSYQk=
Subject key identifier:   FD:C2:56:B3:F8:92:DE:34:EB:41:32:D8:E7:07:B4:E2:75:DF:21:79
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584A9B64729E90C25BFB5091B480
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     2914
IP address blocks:        142.147.128.0/18 maxlen: 23
                          142.147.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:64:72:9e:90:c2:5b:fb:50:91:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=3d4146dd-e2df-4e6b-ac6c-636a374565e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:61:95:7f:c9:af:66:d6:5c:90:ca:a9:1d:
                    4e:48:8d:a5:60:25:55:f7:fb:6d:56:0e:1a:62:60:
                    2a:06:18:fb:d8:45:81:b2:86:d1:3d:3e:f1:2a:84:
                    01:fa:24:13:08:d3:0c:9d:68:8b:6f:e6:79:43:cd:
                    38:c4:ca:2b:c2:4d:ea:5d:7e:12:4d:4b:b8:60:83:
                    c6:5e:d2:e0:ed:3c:2a:81:f4:d3:b5:00:cc:e0:89:
                    f7:06:48:56:0b:d1:e4:da:48:9f:7b:a9:da:f9:13:
                    cc:e6:53:76:d8:a3:b7:bb:2f:02:ae:54:2a:78:32:
                    d7:69:4e:e4:62:1a:da:23:ab:a3:e5:66:f0:a2:b3:
                    fb:a8:02:96:82:a8:b3:49:35:da:27:f3:d9:e8:46:
                    a0:3d:ee:af:49:c6:4a:e2:28:15:4f:a4:2a:91:39:
                    b3:91:37:03:6b:ec:ac:d8:39:03:08:03:6e:ec:17:
                    d1:88:a3:45:7a:d5:62:f5:5d:23:69:bc:66:7c:8c:
                    12:6e:62:46:24:32:ec:59:19:34:de:d9:83:45:a0:
                    32:8f:8d:a8:8e:89:f5:b4:b9:23:eb:76:8f:80:12:
                    94:aa:2f:59:02:62:e3:d4:15:b0:d1:73:80:08:b4:
                    37:7e:2b:c9:50:57:5c:eb:02:b3:a2:18:18:49:44:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:56:B3:F8:92:DE:34:EB:41:32:D8:E7:07:B4:E2:75:DF:21:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.128.0/18
                  142.147.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:77:d6:8b:a8:07:06:e4:1d:06:fe:96:f7:34:d4:38:90:b6:
         f3:26:c7:26:be:d0:0a:8f:31:30:67:59:36:fb:e1:cc:83:74:
         10:30:45:b9:89:e8:a0:ec:b5:b1:96:82:05:2b:77:38:a0:1c:
         d2:2b:04:f0:15:1a:5a:d2:20:47:4c:35:66:e6:3c:ba:4a:85:
         cf:76:92:3f:0f:f3:bd:ab:66:fc:75:73:10:c2:c4:0b:7e:2f:
         2c:6e:8a:f2:92:e8:3a:64:74:fb:87:72:3a:b7:eb:2a:bc:10:
         77:e2:8d:26:ed:6f:a1:28:35:2f:99:37:f5:b4:d2:76:37:79:
         41:01:33:fa:9f:fb:1b:42:94:bc:65:ca:64:b2:fe:1a:e6:6e:
         44:3e:97:a2:52:62:72:81:0f:73:3c:3a:bb:bf:89:d9:51:d4:
         76:db:81:5f:a3:7f:45:47:c5:f6:08:2e:3a:1a:2e:da:a6:32:
         6a:94:44:94:0b:f5:b4:68:4e:d7:91:c6:9e:d2:5c:32:a5:8f:
         f3:8f:c9:16:12:22:53:1e:f7:64:e1:25:5e:f1:94:91:88:98:
         21:7d:99:29:13:c9:c9:94:76:f6:96:d2:68:29:27:df:51:13:
         76:71:2b:56:57:32:cc:72:51:71:59:dc:78:a6:88:b4:1a:1c:
         9c:16:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:57:36 2025 by rpki-client