Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa
File:                     AS142036.roa (raw, json)
Hash identifier:          MxcNKjC901l3kEd7E51o6gPYiF6GILlKx02PpHFYDoY=
Subject key identifier:   EE:CE:01:31:80:50:19:BB:F1:8E:F0:FC:6E:31:C8:DE:98:17:C4:58
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       3CA6D439C83150BF4A41D583119A0619CB8B2215
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa
Signing time:             Wed 05 Mar 2025 00:02:03 +0000
ROA not before:           Tue 04 Mar 2025 23:57:03 +0000
ROA not after:            Wed 04 Mar 2026 00:02:03 +0000
asID:                     142036
IP address blocks:        66.225.228.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.51.0/24 maxlen: 24
                          205.234.170.0/24 maxlen: 24
                          205.234.200.0/24 maxlen: 24
                          205.234.201.0/24 maxlen: 24
                          205.234.232.0/24 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          205.234.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a6:d4:39:c8:31:50:bf:4a:41:d5:83:11:9a:06:19:cb:8b:22:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Mar  4 23:57:03 2025 GMT
            Not After : Mar  4 00:02:03 2026 GMT
        Subject: CN=EECE0131805019BBF18EF0FC6E31C8DE9817C458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:3c:ee:10:2b:83:f4:47:b0:3d:12:4f:dd:
                    13:96:aa:3c:67:eb:7b:8b:b5:dc:30:ee:b4:13:d7:
                    7e:50:c0:c3:af:bc:fd:97:54:6d:d5:50:e9:08:08:
                    3f:1a:fe:23:b4:09:4f:f8:4c:b4:74:e1:36:0f:36:
                    da:ec:e4:83:b6:c4:6a:5a:3c:b5:41:9b:87:06:84:
                    ab:c1:8d:2b:42:76:96:9f:69:92:2e:dc:64:0d:3c:
                    2f:97:a3:3b:27:8a:49:d2:55:f6:1e:62:87:1d:a2:
                    0f:e4:6c:c9:c0:0a:ed:62:f5:21:ee:28:2e:12:a0:
                    a4:0c:c4:00:ff:bc:46:73:ac:d3:ee:ba:8f:99:85:
                    9f:38:50:f8:c7:4a:8f:86:f5:b4:24:31:f5:ef:61:
                    cb:a8:44:3a:94:86:b7:e4:a0:76:06:53:33:3d:f2:
                    d6:38:ce:d8:b4:0b:0d:12:e9:b8:79:b2:2a:f1:c8:
                    fb:ea:30:b5:5e:f2:38:42:61:c7:56:31:0d:22:91:
                    ba:1a:93:c9:e8:58:db:35:46:56:47:cf:87:62:e0:
                    59:05:b7:39:ca:3a:6b:7b:da:e8:40:d5:1f:96:a0:
                    db:a7:ea:72:0e:59:05:4d:e9:82:97:cb:30:41:19:
                    ac:0f:fc:a0:ef:ff:08:07:bb:58:e8:c2:f2:8f:24:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:01:31:80:50:19:BB:F1:8E:F0:FC:6E:31:C8:DE:98:17:C4:58
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS142036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.228.0/24
                  75.102.49.0/24
                  75.102.51.0/24
                  205.234.170.0/24
                  205.234.200.0/23
                  205.234.232.0/24
                  205.234.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:8a:ab:54:ea:81:93:68:e6:5f:05:73:83:80:24:83:5a:
         25:69:e4:0b:b1:3a:29:37:df:a5:0a:24:47:ca:8d:5f:2f:ef:
         83:17:f9:a2:c4:7a:79:54:ed:1b:22:66:6b:c1:36:b4:f0:89:
         64:a6:9f:be:33:96:53:c7:5c:a7:00:06:69:21:a3:ae:dc:ad:
         8b:3c:e6:d8:77:fa:90:d5:03:38:0d:db:1b:5f:3a:00:f7:96:
         be:7f:10:e5:eb:52:64:8b:00:91:e2:fc:63:15:15:ad:45:12:
         d2:e3:84:eb:05:5b:fb:e4:17:1d:76:0b:0f:0b:32:9f:e4:e9:
         75:fb:3d:2b:70:c8:2a:97:52:82:d4:02:5d:93:16:05:dc:56:
         8e:a2:ee:0b:39:8e:ed:7d:28:e7:e3:07:60:e0:54:ff:9d:0d:
         f9:28:31:37:19:59:ac:aa:62:55:4b:c1:d4:eb:11:b4:72:6b:
         19:c8:ef:c9:38:32:c6:7f:d2:55:4b:2c:d6:50:62:62:de:aa:
         2f:a8:95:d1:2b:48:e8:85:a4:b3:36:db:81:89:c7:9a:65:7d:
         f2:27:b7:2a:71:fe:73:06:6e:0a:a3:64:41:6c:5f:f2:1e:06:
         85:2e:c8:4e:23:a4:12:9e:cb:01:ea:aa:41:6e:af:45:ce:1f:
         65:4b:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:14 2025 by rpki-client