Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa
File:                     a8c305b3-f0d4-3040-a02d-ba315034a174.roa (raw, json)
Hash identifier:          wMz+hAxCPi6eK0na+xnGsupOvFZ5fnlOJp7IBLa0zIA=
Subject key identifier:   8A:CB:59:CD:AB:7D:E2:C4:00:80:E2:8E:CF:F4:B6:AC:16:FA:C3:95
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285848D0ABB4E12BC20D54019572D0
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     27370
IP address blocks:        140.241.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b4:e1:2b:c2:0d:54:01:95:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=4dccfedd-91c8-438e-9e3b-d959b13b5aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:60:b6:14:53:d6:c3:b2:c0:b2:26:7b:aa:
                    33:ae:43:a6:f4:11:f1:a7:41:ec:af:fa:41:c6:3e:
                    f6:7d:a0:31:26:60:71:75:7f:58:46:c2:62:cb:eb:
                    8e:e3:fa:5d:16:04:ab:c7:b6:e4:35:a3:c9:95:01:
                    79:34:63:78:c2:f9:f6:9e:35:01:8a:9c:39:18:72:
                    89:15:16:1d:99:a0:e3:5d:08:32:88:19:e5:ec:c8:
                    ae:e5:5a:d8:b8:a7:78:41:ea:15:81:1e:2f:7a:80:
                    d6:52:b3:47:40:a1:0a:c2:e8:5f:cf:8f:72:2e:eb:
                    0d:df:e4:f2:4d:5e:fa:de:8c:81:b3:ae:99:11:03:
                    33:bb:3f:2b:d5:c4:d3:f2:1d:af:be:ae:43:5d:cb:
                    cf:7a:24:19:da:81:e8:14:94:d7:1b:b1:6c:f3:ae:
                    2e:b8:ae:7d:8b:b7:a3:63:5d:04:51:53:15:df:cb:
                    5a:9e:90:30:fd:3d:0e:ec:44:e5:fa:54:c6:3c:40:
                    09:fc:cc:ab:56:ea:f5:97:db:40:7b:72:fb:d0:eb:
                    cd:f0:91:08:70:59:cd:ab:a3:a1:ee:f5:a5:03:38:
                    00:ce:ef:fd:c2:86:dd:a2:b9:4f:54:c3:57:09:15:
                    e6:eb:2e:87:5b:e4:70:a5:10:30:8f:3c:ca:b5:13:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:59:CD:AB:7D:E2:C4:00:80:E2:8E:CF:F4:B6:AC:16:FA:C3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:7e:f1:a4:9f:67:54:b5:24:bc:4d:75:4c:fd:90:ff:d4:83:
         b3:b0:17:ff:7f:0e:13:ef:52:30:51:c2:b9:2f:be:c5:1a:55:
         79:0f:d5:b2:0c:a1:80:6e:4a:36:a2:2a:fd:e6:a7:da:84:29:
         66:c5:2f:f7:94:e8:26:61:14:1a:cb:ba:d4:cd:3b:11:ae:dc:
         13:82:3b:56:64:37:76:a6:56:8f:28:8b:e1:c0:8b:9e:24:8a:
         47:cb:5b:00:5d:83:33:b1:06:d1:18:10:31:47:54:75:4f:68:
         ae:70:e9:a7:2f:9e:01:3e:93:a9:1e:51:eb:c7:66:fd:1f:01:
         ae:53:24:57:26:45:67:dc:7a:30:46:0e:0a:79:b6:7f:98:88:
         38:19:eb:9f:a0:c9:cd:8b:6b:3a:2e:45:69:b0:c8:18:be:a9:
         9e:75:dd:0c:b5:89:28:e8:5e:73:ef:ae:91:62:e1:04:1b:dd:
         f3:31:c3:bd:7f:2c:1a:91:88:73:b7:bb:38:8e:dc:d9:53:6f:
         04:f8:e4:f0:05:f3:32:47:23:d3:8a:03:44:e0:1b:ae:b2:f0:
         e4:33:bd:2e:0b:f4:00:d8:1f:79:3b:fb:06:cd:85:dd:f8:ab:
         a8:89:e2:59:c6:84:0e:bd:0a:96:ac:04:33:5a:ab:c6:6b:90:
         a5:22:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:11 2025 by rpki-client