Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
File:                     b4f0d40c-cad4-3a54-befa-79bac5244c89.roa (raw, json)
Hash identifier:          ZPMeO0dtQ/VTv9b/Xm2w45KAZFPSjg3iVtYEJwP+9Oo=
Subject key identifier:   1C:FA:34:DC:4F:C9:EA:CF:4A:A3:CD:87:85:91:00:CA:EC:C2:09:B4
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858495EEEDCF77C4C6D3407E9F180
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     4181
IP address blocks:        134.140.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:dc:f7:7c:4c:6d:34:07:e9:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=384ad154-0cb5-45a9-894d-719b09df5576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:2f:90:aa:ec:9a:ee:00:5a:ad:07:90:1e:
                    b0:e6:8f:88:e5:f6:30:db:6d:8f:f7:3e:45:ae:d3:
                    51:d5:ed:9c:64:51:88:54:fe:07:2e:7b:fb:6b:f6:
                    c1:e8:c3:7f:aa:20:63:87:bc:ba:be:0a:8a:52:2a:
                    9f:13:8f:9e:9d:b7:a3:55:ea:ee:ef:3b:69:d2:e2:
                    05:e0:40:38:70:15:c1:13:fc:22:eb:c8:2e:ff:7e:
                    8d:ff:d0:dc:38:77:5c:3b:03:13:60:b4:2b:48:e9:
                    9c:4f:69:f2:1c:7d:27:26:13:7c:17:a7:48:c6:25:
                    b0:2b:fa:4b:db:4e:1c:72:ec:2f:9a:46:64:8e:a3:
                    f1:b6:bb:f6:3e:89:37:7c:87:e1:bb:cb:c0:a7:4e:
                    de:53:de:56:db:8b:2c:3c:fe:2f:b5:37:34:42:f3:
                    d0:77:90:79:ae:25:cb:a0:4b:3b:93:be:5a:40:bb:
                    76:33:28:60:1e:36:9f:cb:a4:a5:13:06:72:b4:1d:
                    3f:a2:c4:94:a3:21:5c:90:a7:8a:30:d9:53:4e:32:
                    87:53:cb:ab:04:52:d0:24:a4:9f:5d:1e:b7:16:3a:
                    16:f6:32:ad:25:f4:c6:a2:a1:bc:4c:04:36:72:71:
                    aa:68:9f:1e:90:81:a8:15:a0:a7:ee:eb:29:61:b6:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FA:34:DC:4F:C9:EA:CF:4A:A3:CD:87:85:91:00:CA:EC:C2:09:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:79:11:19:78:9e:af:b6:0f:12:95:97:5e:ef:4c:91:c3:
         56:5e:a6:66:4a:93:77:1a:c1:5d:70:71:e4:67:e7:78:16:52:
         45:10:33:35:fb:3f:a4:40:c4:05:bf:17:d5:dc:99:2d:cd:23:
         1c:4e:a4:fc:03:18:da:99:91:6e:4c:65:25:96:5f:dd:7c:39:
         24:42:41:05:37:14:c7:ce:6e:96:93:ed:aa:ee:bb:53:91:fb:
         95:24:78:e4:98:79:cb:a1:88:ea:b5:b4:a7:78:06:ee:fa:18:
         22:3f:1f:1d:e0:3f:88:e3:d6:4d:b7:6c:77:35:75:2e:ab:da:
         2f:38:85:9f:c7:b2:a4:61:91:60:1a:c0:2a:52:b4:24:b4:44:
         21:a5:73:5c:8e:c7:ac:06:79:f6:85:f5:36:9a:7f:fe:ba:d3:
         31:ef:b0:73:90:3c:56:1c:2f:d5:9e:10:10:fc:d8:11:bc:3d:
         a1:4f:58:42:80:dc:2f:36:64:b7:73:9a:d6:7a:cb:84:28:03:
         38:29:47:cd:a5:f5:bc:9d:84:e4:39:d2:5b:55:bd:2b:ee:75:
         f3:1e:50:23:60:5a:99:23:44:cc:2c:0c:37:1b:25:50:85:d6:
         de:dd:45:09:34:ea:3c:85:fa:82:68:bb:b0:ae:0b:cc:24:a9:
         6f:55:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:29 2025 by rpki-client