Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa
File:                     b055e2af-9402-3dc6-9892-eee3432b3b35.roa (raw, json)
Hash identifier:          fupWeX9GPqf+zfW2AvCW1LC0Bm9n0fhCReSZyGjxlIE=
Subject key identifier:   1E:26:88:85:D8:C0:FB:03:11:C2:08:AD:09:66:82:D9:00:A0:A3:59
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F432858498604691686614173BD50DFD8
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     27370
IP address blocks:        140.241.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:69:16:86:61:41:73:bd:50:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=b8178129-0e83-49c0-b6c6-0d781c52fb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:c7:c3:fe:a1:4d:bc:65:96:39:e7:60:d0:
                    d5:1b:68:c5:42:f8:14:60:4a:68:19:e7:4a:7a:9b:
                    e9:53:53:0c:f4:8b:2a:fb:be:8f:5d:75:cc:01:76:
                    2f:8f:98:3b:3d:86:e2:11:c8:9d:67:bd:2f:e8:dc:
                    ba:f7:b5:66:87:98:fa:a9:6c:ea:0b:87:fa:bf:c5:
                    82:ae:6b:c9:a5:cf:0c:c1:16:30:0b:8f:db:3b:f0:
                    b3:fa:5b:eb:a5:ec:9c:a5:4d:d9:85:a3:d9:b6:99:
                    51:7d:e6:d7:55:c1:58:61:f7:77:bd:a2:4a:03:a3:
                    f6:87:0c:c5:4f:37:b6:e6:fc:6e:98:9f:4a:ab:b7:
                    3f:c0:19:00:07:26:6e:6d:1a:6c:b6:5d:61:4c:c8:
                    3a:d7:29:ff:1d:c5:a0:6b:48:f1:d7:e2:10:94:d2:
                    a7:62:1d:88:fb:d6:e5:a7:9a:ee:0b:b7:fd:94:68:
                    92:0a:27:89:86:42:cc:01:49:7f:59:a5:22:8c:e0:
                    13:04:c5:5f:cb:fb:f9:ae:f0:f5:b5:3a:0c:73:78:
                    a5:c6:b6:7d:70:0d:c4:7f:c6:4c:05:a0:09:3b:1f:
                    3a:31:d0:6e:e1:70:05:c4:7a:23:69:2d:40:3f:9e:
                    b5:64:27:f2:5a:42:42:d9:d8:5c:a2:cd:b1:18:09:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:88:85:D8:C0:FB:03:11:C2:08:AD:09:66:82:D9:00:A0:A3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/b055e2af-9402-3dc6-9892-eee3432b3b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:5e:29:e6:06:33:b6:1f:44:c0:a2:de:d5:dc:f5:5b:dc:
         bc:fc:33:1b:8b:45:34:7f:83:10:53:cf:14:b8:23:6b:d9:cc:
         57:4a:74:30:07:b2:1e:b6:b8:ce:42:e5:23:ad:19:81:05:98:
         73:5c:2b:dd:a0:f9:eb:9e:4a:52:6f:01:16:49:36:72:31:52:
         cb:10:79:81:45:50:3c:63:dc:dd:b5:b8:6d:c8:72:27:c7:11:
         a1:e5:ec:4e:10:f9:94:cd:a2:f3:b4:77:36:8a:9c:de:62:de:
         69:b4:10:1c:00:91:54:99:98:0e:a2:93:e9:cb:eb:47:7e:2b:
         5a:01:b4:0d:b6:dc:8e:72:8a:4d:de:46:a7:51:06:0a:41:50:
         15:b0:88:d1:a1:0c:ea:12:c1:9c:71:f3:0d:1e:76:d4:9a:59:
         4e:5d:7b:a9:b4:fc:52:c8:dc:6a:12:84:d9:21:0a:5e:74:14:
         af:f9:2c:3b:12:61:71:79:01:59:71:fa:f1:75:7c:82:b9:ef:
         55:4c:7a:9e:ad:8c:e1:e3:7b:fd:37:07:8e:66:82:4b:28:75:
         96:fd:e9:b8:99:0d:a6:53:52:a3:f5:d9:bf:c5:eb:37:c4:d4:
         86:04:fd:8c:c0:5a:e9:e4:77:c6:26:03:4c:29:21:6a:3e:2b:
         58:e7:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:04:25 2025 by rpki-client