Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa
File:                     897cd219-2596-36ba-b119-1a7d373e60a6.roa (raw, json)
Hash identifier:          tGtNG1PHF7prJXda2FNVwfT0HhkGrEZfFMvPJ1pNgYw=
Subject key identifier:   FE:86:41:34:AE:15:C7:59:29:91:CE:06:73:35:ED:08:A0:4C:83:C2
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858494733EA393BE8F91D622D2F00
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     400384
IP address blocks:        140.235.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ea:39:3b:e8:f9:1d:62:2d:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=4b494639-4d7d-4f2a-837b-76018da7fb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b2:c2:f8:5b:0f:8c:68:ce:7f:dc:56:2e:89:
                    dd:9d:af:6f:5a:38:43:ce:cd:a8:1c:c8:67:32:ec:
                    af:b1:b7:ff:7f:c1:7f:9c:7f:e0:31:ff:7a:9e:12:
                    b8:1a:a1:1b:2d:8d:4d:60:fc:5d:e6:27:9c:80:66:
                    11:bc:13:03:67:41:bf:d6:3c:c7:d2:78:79:b1:27:
                    f0:7f:dd:31:2c:f7:6a:7a:ca:b8:2d:9d:2e:18:12:
                    55:e0:85:37:09:01:72:bc:b7:8f:1f:6c:a0:d6:e2:
                    1e:07:13:ea:9a:b6:c0:0d:c5:73:c2:12:a1:54:4d:
                    d1:2b:c6:f3:a8:55:c8:8a:58:37:71:cb:19:de:88:
                    84:8d:22:a2:8d:a8:ab:70:1f:a5:88:35:7e:7f:a5:
                    37:83:4f:38:c0:13:64:22:75:c6:6e:d9:61:e4:2c:
                    f9:0c:dc:dd:6e:52:b6:18:59:26:3c:46:da:b6:6b:
                    a4:2b:ae:55:30:0e:1e:7d:1a:99:91:40:12:6a:64:
                    d9:26:b1:c5:69:3d:3e:32:a4:56:cb:d3:fd:8a:9a:
                    6a:42:27:71:80:6a:ae:ec:9f:28:32:e2:4b:78:e7:
                    63:ab:ed:90:f7:64:fd:36:15:b9:d4:52:f5:54:1a:
                    44:77:b6:46:b6:62:69:96:39:da:b5:dc:13:58:bb:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:41:34:AE:15:C7:59:29:91:CE:06:73:35:ED:08:A0:4C:83:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/897cd219-2596-36ba-b119-1a7d373e60a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:4a:01:e4:c8:d6:3d:3c:1e:6b:f7:8c:3b:77:71:03:d2:
         b5:03:8d:84:dc:43:61:95:31:15:f7:47:76:ca:89:bf:d9:86:
         c9:eb:ed:12:6b:9e:6d:6b:ee:3d:fe:9f:7c:19:1a:ec:c1:49:
         a8:dd:d0:44:8c:e3:5c:8f:7e:26:42:c6:63:11:a0:68:2b:e2:
         b6:18:4c:20:c6:b9:64:25:38:bf:45:5e:c7:cb:79:87:79:4f:
         19:a6:b1:f8:46:bd:0c:4f:e2:64:c2:1e:e8:bb:63:92:3f:76:
         fb:be:64:f5:a8:44:6b:76:e6:70:ba:67:d5:86:b8:29:77:8a:
         6a:8a:6b:2b:03:23:5d:61:e0:dd:19:03:4f:5a:38:a4:0a:8a:
         fe:fd:3b:7e:d2:b9:2e:97:c1:eb:81:a2:03:26:41:7b:8d:80:
         43:b7:ef:c6:43:e3:12:fc:9a:3f:bd:be:f4:ed:7f:1c:1f:3e:
         ab:b9:ec:c5:df:8b:d0:9c:c4:38:2e:b8:c8:9c:aa:af:3b:44:
         d7:ad:97:83:07:f8:be:5b:11:14:e3:51:e5:fa:5f:c0:32:86:
         7c:11:65:4c:24:2b:96:b0:ee:09:d4:4f:6f:4b:e3:0f:dd:6f:
         2d:b2:42:1a:5c:50:b8:2a:f5:cb:75:f3:2b:ed:f1:39:04:7e:
         0e:08:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:12 2025 by rpki-client