Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
File:                     ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa (raw, json)
Hash identifier:          pcnKnYAfBwbu5EMUBVHmVpOpWBJMxwUwtYTwla1ga78=
Subject key identifier:   5C:31:DE:4A:CF:B2:BA:35:10:3F:21:0B:17:BE:BC:57:11:71:5D:04
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584A6AF094CA4D7C0C5B05671000
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     26658
IP address blocks:        142.202.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:94:ca:4d:7c:0c:5b:05:67:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=cedb828a-8644-4788-9d91-0b8cca0fd55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:1a:95:fc:f7:ec:f9:da:9b:66:22:1d:7d:
                    a4:bd:1b:95:92:b9:fa:e9:82:dc:4e:57:fc:95:6e:
                    be:77:bb:b1:5b:38:60:e1:71:19:3c:8b:41:e5:35:
                    ad:c7:e5:73:ef:42:5c:2b:b8:47:78:db:98:a2:43:
                    58:55:72:53:88:17:dc:2f:fa:98:c7:1f:cf:26:c6:
                    9c:7c:bd:bf:9a:e7:c7:02:64:b8:af:31:1e:68:73:
                    18:f2:1c:36:b3:a7:12:51:89:f0:31:a0:8f:c7:fb:
                    46:98:3a:ad:b1:d7:1b:bc:16:7a:9f:55:c1:07:0a:
                    d2:7b:2c:46:77:88:fe:80:f0:09:9b:26:1a:20:ae:
                    cd:77:89:38:d1:30:d5:51:98:e4:78:e8:80:83:a3:
                    9f:ed:06:98:f0:09:42:99:f5:4f:c0:2a:44:6e:c9:
                    19:d5:c6:7d:96:33:ea:8f:1b:1f:a6:ae:05:a5:ab:
                    44:4a:86:78:3a:96:51:74:a2:37:2c:c1:d1:86:55:
                    6c:95:01:af:0d:c0:61:9a:3d:4b:5b:91:88:00:20:
                    f8:2e:91:90:54:e0:e3:a5:dd:1b:2b:36:40:24:53:
                    55:23:17:b5:07:74:15:f2:c4:a0:2b:e4:3c:4d:ef:
                    ec:e7:af:44:43:d3:6a:32:8e:57:82:dc:30:1a:71:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:DE:4A:CF:B2:BA:35:10:3F:21:0B:17:BE:BC:57:11:71:5D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:d3:4a:9a:b0:25:88:08:56:a1:40:fe:f4:8d:40:4f:9c:
         7a:35:82:72:0e:98:e6:ab:53:71:13:28:28:4e:61:e1:db:66:
         80:71:4e:1f:66:c7:03:64:36:cf:a3:3d:b9:bb:de:13:a8:97:
         49:bc:42:58:97:e3:35:42:05:49:01:1e:f8:35:ec:79:da:e1:
         59:4c:20:4a:bd:cb:0c:6b:ef:b2:94:40:6c:a8:ea:8a:86:be:
         03:98:fd:50:9e:e6:f3:0a:7a:a4:97:47:de:42:b6:d3:f8:6c:
         74:9a:37:27:10:e0:eb:25:b0:b9:91:ba:1c:95:93:17:1f:06:
         67:bc:a9:d8:d1:8d:ce:86:67:3f:33:e3:22:73:63:97:8d:ca:
         32:87:2d:17:0c:31:75:1d:91:d8:e2:02:4d:c8:ce:1e:23:44:
         7c:56:41:b2:9c:9a:05:24:fe:aa:80:33:5e:75:e8:7d:2b:68:
         09:6c:e5:ad:79:81:96:04:c8:2d:e5:d5:4e:e2:fa:bd:ca:a4:
         1a:18:a1:88:58:f4:bb:2d:e8:ea:64:73:57:2a:4b:89:ba:cc:
         90:cf:33:cd:20:6a:59:85:94:5e:79:aa:a0:e9:00:17:94:47:
         6c:e6:57:45:43:82:b1:b5:ae:b6:a3:6c:51:c4:e7:2f:c7:67:
         4d:67:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:26:44 2025 by rpki-client