Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa
File:                     6fcc7d92-8595-368c-84db-26ab941ffc2f.roa (raw, json)
Hash identifier:          g5UmgoGIOnkzW4fA49Byk1z3zm6+ZW09bnb0j9Rqw1Q=
Subject key identifier:   D0:E3:06:CF:8F:64:C4:EB:0D:78:7A:08:B3:EE:EF:77:87:B7:0C:A4
Certificate issuer:       /CN=fd41a5ea-0768-429c-8541-83d829a5518c
Certificate serial:       010D0C9F43285849194190DE319E6DFFD13E4D90
Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     174
IP address blocks:        139.64.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:90:de:31:9e:6d:ff:d1:3e:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=94602683-844e-4f15-9c8f-3c53fc373a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:cf:5d:32:5a:73:3c:39:19:e0:b7:00:6a:
                    43:59:20:06:c8:8f:da:f4:c5:f8:73:6f:d5:dd:94:
                    75:cd:0d:cd:7b:e1:1f:9a:b7:f4:81:96:1e:6c:96:
                    c0:a4:f1:b4:ec:d1:71:56:48:cc:27:be:e3:be:0c:
                    8e:6d:24:ac:2e:22:15:08:26:f3:09:8c:11:4f:5c:
                    9c:03:c8:1f:10:6d:31:ab:fd:07:56:2e:94:7b:2a:
                    4b:9d:75:0c:5d:96:2e:ad:fe:cb:be:6e:b9:b2:9c:
                    f2:77:7a:0d:50:b2:46:fd:42:05:15:56:49:f4:23:
                    20:d0:4f:ef:2b:60:55:3a:e7:1b:12:22:16:e7:8f:
                    03:f4:44:8e:3a:a7:0b:45:0b:da:30:23:88:df:96:
                    74:1d:e2:d8:9f:10:81:db:fb:5a:c9:25:8c:60:e5:
                    af:c3:0b:8f:ec:26:b1:69:87:32:d8:81:e5:3b:18:
                    b6:3f:c1:e2:1d:83:05:14:55:af:f5:13:dd:6a:ee:
                    95:df:0f:67:3a:5a:85:a2:13:5b:99:99:74:9f:7d:
                    54:c3:68:3d:d4:d5:29:6f:a6:82:27:31:06:04:59:
                    7d:1d:21:b8:60:36:46:e0:71:23:30:d1:53:e5:2e:
                    0f:44:5a:4c:43:8b:ce:20:f9:dd:58:ae:6b:ba:ca:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:06:CF:8F:64:C4:EB:0D:78:7A:08:B3:EE:EF:77:87:B7:0C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl

            X509v3 Authority Key Identifier:
                keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:34:4a:86:9e:42:e8:f0:dc:55:37:ac:51:cc:81:b8:73:
         8c:88:e8:2c:a1:70:5e:19:b6:6e:dc:de:3c:4b:96:53:6c:16:
         8b:8f:d2:15:f0:77:8c:39:f3:1a:ec:67:ce:bf:c6:8d:7f:87:
         99:ee:49:b3:57:fd:47:eb:2c:f4:7a:ee:b1:d5:5b:82:37:2a:
         78:44:de:30:dc:cc:8c:f4:38:5c:7c:8a:ab:cc:92:ad:f6:bc:
         f6:2e:ae:09:dc:54:b8:5f:c1:c0:c5:cd:78:90:0a:19:fd:b7:
         82:9a:e1:58:74:6c:b8:c8:ec:23:c4:07:5a:5e:e9:f0:b7:e6:
         5b:f4:26:5d:d6:f0:3b:06:f8:a1:c5:c1:71:7d:ee:41:45:11:
         cb:39:a3:c1:e6:23:8f:b4:48:a0:a3:7f:73:30:f6:d0:33:53:
         69:16:ec:17:17:e8:6b:e3:4b:ec:7e:d8:ca:cf:79:8e:a4:28:
         c2:bc:97:26:a8:79:2d:d7:ce:b7:a4:c9:a5:7c:be:41:4c:8e:
         4a:68:e0:83:64:af:b1:ae:1f:80:e5:95:97:6b:b0:71:07:87:
         7c:a3:0b:bf:8c:2b:16:73:b4:7f:08:54:05:77:1a:67:61:db:
         e1:cf:43:ee:2e:49:4e:f3:d2:f5:a0:d0:93:0b:64:01:4d:ac:
         21:45:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:23:59 2025 by rpki-client