Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa
File:                     6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa (raw, json)
Hash identifier:          XpJEhZJQpCxJJ3Eu6MSHBJvKxUqX2MNM29NXOtKz268=
Subject key identifier:   E3:F3:4D:DB:A5:F0:13:8F:EE:CB:9C:75:A5:21:5E:B8:AA:AC:71:4D
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F432858492E13BC087D91A79070185B00
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     15395
IP address blocks:        142.54.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bc:08:7d:91:a7:90:70:18:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=cc2b2068-9c34-492d-9fff-0520fc5a7ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:b4:04:74:ee:c2:cd:ee:f5:53:29:8d:ba:
                    a8:5b:dd:2d:33:b5:85:00:9c:2e:17:29:7a:a7:0a:
                    d8:dd:e8:57:32:99:8f:3e:bf:88:1d:43:6f:e9:74:
                    57:f7:93:22:7b:26:e6:d0:2a:70:f3:c5:ff:af:d3:
                    41:79:3d:9f:94:f3:65:a4:dc:48:ed:23:ea:ea:ae:
                    da:6a:34:4e:c1:51:71:f6:96:b5:46:01:5a:b6:2a:
                    e2:ae:f1:46:9f:c5:5a:6e:0e:3f:1a:37:37:c6:cb:
                    be:1c:e4:4d:d1:1c:4c:9f:c6:89:f3:06:4b:74:a1:
                    a9:9b:0b:9c:59:e5:f2:09:2d:a5:05:57:95:a9:fe:
                    0a:8d:0f:3e:a2:a8:e3:f8:7e:20:8d:7c:1b:7b:7b:
                    80:42:c0:45:9c:aa:d6:6a:9b:8a:84:33:70:74:40:
                    60:1d:0a:77:56:9c:0a:67:cc:26:9a:7d:66:db:06:
                    c2:34:7d:d0:a2:ad:60:51:73:06:47:f8:f9:ab:04:
                    75:9d:0b:3a:f4:d7:de:23:ca:73:79:22:3b:1e:38:
                    c0:a8:9f:26:48:46:90:ca:62:3e:3d:f0:ad:d5:dd:
                    e3:88:03:e3:bf:3c:45:36:34:c9:96:41:aa:3a:ea:
                    6a:ea:58:36:f9:97:5b:fb:b3:e2:b8:52:71:01:dd:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F3:4D:DB:A5:F0:13:8F:EE:CB:9C:75:A5:21:5E:B8:AA:AC:71:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:10:1a:92:51:65:43:9b:ae:c6:48:62:05:c7:7c:08:92:a9:
         be:50:7c:36:a3:3d:9f:a6:69:0b:33:a8:68:94:bc:94:bf:a7:
         b4:55:ae:c5:0c:83:1d:10:85:09:30:b6:da:8a:5a:38:31:72:
         45:f9:35:01:ca:a8:e4:6d:e1:d2:15:82:7d:4e:b0:c1:97:10:
         70:15:05:c6:b2:8e:f2:50:09:e5:39:37:a4:b1:02:09:9c:cd:
         4e:48:10:c0:ff:5c:35:74:09:56:4f:c1:fa:e1:ea:8e:48:dc:
         85:46:52:d0:3b:a0:f5:b5:1f:e8:be:76:dd:c4:ed:d4:cb:e2:
         e9:c7:ef:27:54:fc:51:04:06:15:24:44:39:b4:4a:fa:31:2e:
         f7:23:46:a1:2f:51:f1:4b:d0:b9:05:76:ad:42:a1:1f:76:4c:
         70:43:b5:77:34:a9:e0:1d:bb:a8:f5:73:ce:40:dc:07:37:6e:
         0c:f7:de:60:2c:f5:79:65:99:ad:b9:6b:ec:1e:ef:6e:5c:a7:
         a1:0d:9e:9a:af:e5:e5:59:c3:be:04:3c:e1:3f:db:59:8a:9e:
         3b:e3:28:d5:a6:37:13:a3:31:b9:a0:58:90:31:68:f7:19:2c:
         06:19:66:14:0c:9a:a9:b5:1e:3a:58:1a:d9:2b:44:77:8b:87:
         cc:d5:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:20 2025 by rpki-client