Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
File:                     c13dba69-5578-3a01-b3d5-6497abf84b01.roa (raw, json)
Hash identifier:          VHtoIg/wGeFzmM4Nh3PaU1GY7+RHBhqNj5xkgcNI6cc=
Subject key identifier:   1D:83:CD:A3:13:E1:D9:4F:8C:9F:D2:74:00:C4:2F:92:A4:50:50:67
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F432858495ABEB16A0085D64526B32700
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     35847
IP address blocks:        139.94.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b1:6a:00:85:d6:45:26:b3:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=5b40141e-0e66-405a-b99f-6466e8ae0035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:ed:4e:a4:28:ce:30:71:31:b5:dc:cb:07:
                    33:09:54:58:0e:dc:b0:f4:ab:40:9e:69:bf:3b:08:
                    2b:2f:e0:1a:a2:d5:7c:47:16:9c:ac:12:ad:75:23:
                    b5:25:4a:ff:11:e2:27:e2:0b:c9:d4:c9:50:84:38:
                    ea:fe:86:1b:7a:7b:e3:d7:75:84:2f:1b:76:0f:0b:
                    3b:84:92:60:2a:b8:a3:f5:ed:7f:38:1e:0b:e4:32:
                    cd:7d:d2:e8:77:89:33:f9:70:80:a4:77:c0:83:a2:
                    67:7a:29:4e:04:8c:3e:bd:f3:27:9e:9d:e7:f1:81:
                    d6:29:32:bb:0f:58:53:5f:52:fc:07:71:ee:32:87:
                    ce:5e:8c:be:8d:c0:74:81:e1:fd:da:9d:a0:5a:10:
                    6c:3b:eb:4f:35:f3:82:c6:74:c1:d8:8e:29:79:78:
                    5c:6c:d4:98:f3:91:47:97:52:4d:8d:0b:02:17:ce:
                    df:bc:9e:49:cd:f9:c6:97:ee:03:73:f6:e7:0b:47:
                    5f:8b:fc:5c:0e:14:40:e9:c4:e0:5b:1e:87:79:2d:
                    2f:d8:6e:0e:bd:35:cf:c9:96:38:00:7e:56:f9:15:
                    b7:96:e6:a4:85:d9:cd:25:89:b7:7d:4a:de:b9:99:
                    ab:a5:f7:3d:d8:ef:ea:37:2c:b7:ea:ac:5c:45:e7:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:83:CD:A3:13:E1:D9:4F:8C:9F:D2:74:00:C4:2F:92:A4:50:50:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:05:ac:f5:8f:81:f2:47:0d:5a:51:b0:f2:33:3f:d2:8d:
         ef:b7:a5:29:53:56:69:a2:5d:3f:79:69:2d:95:bc:29:ff:dd:
         7b:bd:50:04:e5:cc:af:10:a0:02:f3:04:d9:44:ce:83:bc:46:
         a9:6b:28:46:db:77:d9:76:67:8d:ab:39:84:df:98:c0:67:89:
         52:26:c9:9e:16:e5:4a:ec:4d:de:5b:04:f2:51:39:b1:9a:06:
         43:3e:38:1f:44:81:77:62:fc:a9:36:a5:b0:2e:9d:23:a5:c3:
         2d:4e:14:b2:55:a2:04:34:ce:ca:8d:c2:f4:a9:a9:de:08:da:
         26:c2:97:ae:50:8f:c8:07:1f:82:21:6c:53:49:63:ed:0f:04:
         0c:96:d3:02:59:7b:c8:bc:74:5e:4e:c7:0d:81:da:c8:bd:92:
         33:7f:0f:0a:8d:e3:b1:aa:11:96:fb:1d:e9:f6:98:13:66:64:
         51:90:55:39:17:a7:89:1d:9c:6c:e0:19:0c:fd:90:44:14:eb:
         3d:5d:c5:8e:5e:58:04:28:24:ec:64:7b:ed:bf:3c:b0:1c:a2:
         f2:94:2e:2d:be:33:fc:36:97:52:ce:ee:95:3b:ff:38:d5:13:
         e6:2b:50:aa:0c:55:b5:f4:1d:11:46:fb:10:c7:22:b9:3b:a4:
         e7:05:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:38 2025 by rpki-client