Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa
File:                     4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json)
Hash identifier:          WUs+Lsld1mYZSnm8ifeWrEhugaqPuymjSQ+U0nu1ETw=
Subject key identifier:   5E:B9:ED:EE:F3:7E:4C:E8:69:F6:87:9E:C9:E4:88:79:DF:3C:A6:79
Certificate issuer:       /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
Certificate serial:       010D0C9F43285849E22535EEB8923C58BA8C1F00
Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     0
IP address blocks:        149.112.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:35:ee:b8:92:3c:58:ba:8c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=7ea1f4b7-956f-4e1e-a55f-1e2d52faa3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:90:04:fa:2d:d7:ad:1f:fa:c7:36:c6:14:
                    00:65:56:18:02:9e:c1:16:ef:56:ff:e6:33:ad:c6:
                    a4:53:4b:53:09:3c:49:da:4e:9d:8a:c4:5c:ac:e4:
                    5d:ee:c6:bf:47:3b:a9:b3:b0:6e:ed:18:23:89:40:
                    10:69:99:24:06:c5:ac:2f:cc:49:0c:3d:8c:14:c8:
                    24:43:50:fe:ff:97:b3:b3:c5:c3:80:27:8f:56:04:
                    55:f6:94:00:d5:83:66:ee:3e:5e:d8:d4:2e:0e:80:
                    bf:f0:af:24:ff:9c:07:e3:3b:8c:d9:1c:de:a9:be:
                    3a:4f:7d:c9:4f:01:64:e4:a5:12:35:b1:d9:60:49:
                    12:94:da:62:43:23:57:3b:8d:e7:b3:42:16:df:2f:
                    7d:fa:19:fe:91:ba:44:54:e3:90:c6:95:cd:2b:ea:
                    23:94:28:5b:25:44:bb:02:d2:53:bb:fe:d9:f0:15:
                    38:9f:c0:e7:82:74:23:ad:cb:40:dd:96:2c:1f:14:
                    5f:7f:ab:4d:4b:6c:ac:82:d8:76:da:46:a4:0c:d5:
                    7c:65:bc:bb:14:ae:84:ef:47:54:3f:cf:24:cc:36:
                    ca:4f:1a:e5:9a:b8:3d:7f:1c:64:a6:92:11:b3:f1:
                    c9:4c:0f:29:a8:ef:89:8d:75:a4:98:ad:b8:69:9a:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:ED:EE:F3:7E:4C:E8:69:F6:87:9E:C9:E4:88:79:DF:3C:A6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl

            X509v3 Authority Key Identifier:
                keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:0d:73:9c:ef:2d:56:6b:39:3d:d1:6d:84:aa:fa:af:da:
         fd:63:6b:4f:2f:d9:26:8c:4d:bb:17:ad:41:42:4c:26:a5:44:
         3b:1b:ab:e9:68:ab:e2:5b:48:6a:f0:7f:89:c3:46:1e:eb:80:
         94:2d:7f:6c:95:ad:38:05:d9:c3:19:3b:8c:65:86:30:27:d8:
         78:36:70:3c:e9:b4:7b:06:f2:64:8b:ad:4c:53:6d:74:c0:b9:
         13:91:bf:b5:7a:07:84:5d:48:d7:15:1b:69:c3:7a:b6:89:f5:
         43:26:cb:b9:f1:59:2a:97:e2:9d:9c:87:61:74:d2:9b:e5:8e:
         cd:33:4a:f9:27:8f:7f:0e:4e:b4:79:70:13:37:b3:16:30:dc:
         20:47:3d:4b:3d:99:36:25:0b:ae:d2:87:95:96:64:41:48:3c:
         52:39:79:fb:e6:fe:0a:43:58:3f:0b:85:ad:7b:27:25:db:0a:
         e3:54:2e:d9:a9:52:01:95:b6:2e:f2:bf:88:77:8f:ca:46:57:
         df:af:15:70:32:f7:68:8a:89:d7:ff:29:0c:04:41:63:db:ae:
         9f:b7:18:38:1b:fe:fc:8a:dd:0e:fd:c3:69:c4:67:98:80:8c:
         26:56:82:5a:93:1e:44:65:ed:71:87:8e:13:75:bb:94:b1:96:
         3d:9d:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:09:40 2025 by rpki-client