Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa
File:                     539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (raw, json)
Hash identifier:          mgpUAGDEtiTzIvCFFMyErwNUpAroVITV89H7xD1VH5Q=
Subject key identifier:   E3:79:9D:A0:15:77:13:51:AB:E0:31:C3:C3:CB:69:F1:B7:62:F4:15
Certificate issuer:       /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf
Certificate serial:       010D0C9F43285848A29B4A45E74630FD7D73F880
Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     22941
IP address blocks:        168.245.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:4a:45:e7:46:30:fd:7d:73:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=5cb45265-ca9d-42d4-95e1-f8f27dbdcda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:f6:4c:be:c4:cf:e7:a0:0a:27:f6:11:e6:
                    9a:c4:d8:1f:a9:33:f3:6e:a0:46:b4:8c:ae:f9:45:
                    93:26:b0:c8:ec:da:36:d4:8a:41:af:20:19:ac:c4:
                    67:aa:52:b9:3e:1e:79:2d:68:80:26:72:22:af:3b:
                    36:3d:16:36:d2:e0:96:59:7f:f9:8b:10:82:e4:3c:
                    0e:c4:39:11:e7:8c:3c:6f:ff:78:5a:cc:f5:da:04:
                    3b:22:d8:93:4d:33:77:6b:9c:51:ba:fa:f6:5f:f2:
                    5a:bd:6e:23:5f:3f:d7:d2:a9:92:26:bc:6a:20:54:
                    32:41:e8:87:3f:b1:28:57:52:50:0f:ba:8f:a2:b2:
                    51:77:f7:de:a5:f5:c7:8a:c4:b4:a9:9a:39:66:59:
                    57:1c:61:18:58:25:72:ef:ca:09:0b:37:6c:6d:e7:
                    6c:e6:d7:d4:f8:e3:78:9f:81:ab:3d:f9:97:42:d9:
                    a9:6b:08:ad:68:e4:22:50:16:38:84:1b:d1:b3:c8:
                    44:3e:cf:16:b7:48:11:7e:10:bc:29:16:94:43:b9:
                    c2:4f:ba:81:9f:df:09:91:91:41:d2:27:f4:49:9a:
                    9c:e1:55:90:58:52:d6:58:ea:31:7c:dd:3d:65:c8:
                    33:2d:bf:19:66:09:1d:91:b2:fa:ee:ea:1e:a3:58:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:9D:A0:15:77:13:51:AB:E0:31:C3:C3:CB:69:F1:B7:62:F4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl

            X509v3 Authority Key Identifier:
                keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:5b:85:8d:e5:37:4a:4b:71:8f:de:a8:89:35:ab:38:2f:f9:
         f9:dd:fb:80:5a:0e:9b:e4:5a:39:7c:7e:44:cc:1b:1b:47:60:
         b6:54:dc:c6:1b:d1:32:8e:26:f9:e4:6c:5f:4b:99:e5:e8:e5:
         c7:0a:b2:4c:0f:8d:de:2a:44:92:cf:95:4b:65:09:cf:62:8e:
         08:19:03:8e:71:9a:25:a3:3c:2d:2d:09:db:0d:0d:f2:3f:1b:
         1f:1b:78:b3:b1:ad:7c:88:37:b0:3d:0f:61:68:8f:c2:63:b8:
         93:f1:55:b4:30:c2:1f:02:7d:16:2d:ef:99:03:d0:e6:a8:9f:
         08:7e:46:2f:d1:df:cd:e6:e6:62:1c:9f:c0:b1:a6:08:7c:ad:
         ea:c8:de:15:56:ef:f5:dc:ec:1b:33:c7:b3:98:f7:b9:81:13:
         15:02:9f:f4:9b:d3:40:b4:6e:41:23:ee:00:d0:32:c1:be:4c:
         00:4a:f1:58:60:f6:26:0c:c4:14:1d:80:44:68:ff:30:8d:be:
         22:5c:5c:1d:bc:9c:21:30:a4:47:b1:0e:29:76:39:15:14:e8:
         6c:a3:66:23:94:7f:70:57:08:89:4d:fc:d9:29:e8:09:59:43:
         be:af:33:4b:c0:c9:26:98:7c:fd:86:2c:8c:9b:d2:58:27:4c:
         24:fa:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:18 2025 by rpki-client