Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/3fbdd7b4-f790-3a1d-b254-a41d3eebbf4e.roa
File:                     3fbdd7b4-f790-3a1d-b254-a41d3eebbf4e.roa (raw, json)
Hash identifier:          TxyktQ17+Y5amUqANhjadhaHH+kJ500MKa4e8YmE3lE=
Subject key identifier:   CB:B2:31:6B:96:0B:2F:71:83:C0:23:8F:48:75:2C:4F:9D:AE:93:0D
Certificate issuer:       /CN=b5c1b03f-0c18-4c5e-9e0c-8d07ed940807
Certificate serial:       010D0C9F432858496CE44C568626DF9D7E11C940
Authority key identifier: 1F:38:C4:3C:32:0E:2F:46:43:14:E2:FE:1C:83:57:5B:5A:3D:DF:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/3fbdd7b4-f790-3a1d-b254-a41d3eebbf4e.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     32212
IP address blocks:        141.193.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4c:56:86:26:df:9d:7e:11:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c1b03f-0c18-4c5e-9e0c-8d07ed940807
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=efc3a5be-1fbf-4d86-a7c5-45e11f8084bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:a1:fd:70:91:e7:6d:c7:3c:3e:37:e7:17:
                    c7:d7:83:14:ea:97:5e:29:fe:12:45:a6:0e:36:34:
                    9c:ff:60:77:84:d3:db:bb:34:cb:8c:70:31:63:a7:
                    d9:b8:4c:0a:c7:a3:21:ff:0b:c5:99:ad:ea:78:fc:
                    27:ad:72:fb:99:46:3e:70:0c:bd:c2:bc:19:c4:11:
                    52:cd:97:a9:62:02:e5:24:30:36:e9:a5:68:8d:b4:
                    01:74:32:fa:8e:3b:04:6d:e0:88:a5:ae:00:80:d0:
                    e0:21:33:3b:1e:f6:64:2a:aa:cf:6e:25:9e:8a:cd:
                    23:1b:88:a1:1e:69:39:82:7f:f7:86:bf:2b:58:63:
                    86:84:f9:cf:fa:46:44:e0:45:ab:d2:ad:72:cd:d5:
                    eb:94:13:f1:9c:d5:05:89:ba:43:10:ab:73:3d:08:
                    9b:4c:db:e3:5f:ec:a6:e1:09:f5:ad:ca:38:c1:cb:
                    17:31:c7:9a:db:a5:73:50:ce:42:ae:4d:f4:56:43:
                    c7:5e:52:1c:4a:0c:f7:dc:e3:fe:07:7c:5f:0a:39:
                    e8:dd:64:8c:75:bb:76:63:a3:f4:bb:fd:2a:99:28:
                    aa:eb:ae:f1:b3:25:89:a5:83:52:8b:2e:49:45:79:
                    ca:e6:64:86:c0:95:67:46:ae:fa:4a:a3:70:24:10:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:31:6B:96:0B:2F:71:83:C0:23:8F:48:75:2C:4F:9D:AE:93:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/3fbdd7b4-f790-3a1d-b254-a41d3eebbf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.crl

            X509v3 Authority Key Identifier:
                keyid:1F:38:C4:3C:32:0E:2F:46:43:14:E2:FE:1C:83:57:5B:5A:3D:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5c1b03f-0c18-4c5e-9e0c-8d07ed940807.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:b9:59:93:ef:04:5a:aa:88:71:c6:4c:b8:7c:6d:71:39:
         b2:bb:87:62:e5:1d:6c:83:f8:b3:03:cf:d3:e3:72:81:46:6e:
         ea:0a:46:48:4d:75:21:bf:ea:0c:86:73:59:d8:c4:95:2d:9d:
         36:6f:32:53:b7:bf:04:56:3c:92:34:a9:79:61:11:c0:8d:3c:
         ae:69:b8:50:51:b4:dd:87:54:6e:86:3b:c0:fd:da:5f:19:d7:
         47:0f:5c:f3:b3:fa:91:d9:33:56:d6:22:91:f7:fa:1d:d0:ff:
         7f:f5:e1:d0:20:23:0d:99:21:4a:21:ad:30:ad:7e:ad:af:03:
         a6:e6:10:6a:4f:cc:06:d6:11:2c:e0:41:b3:6b:ca:62:bf:73:
         07:96:34:0c:86:96:7c:b6:9e:2f:b9:34:e9:3d:3c:9c:05:9f:
         ce:37:f6:78:78:1a:9e:6c:14:51:6b:c8:d2:e7:7f:0a:c1:93:
         25:86:cf:03:48:29:50:ae:4b:4d:c5:42:5b:39:05:c0:90:41:
         f0:23:fb:30:99:0d:59:ac:7e:0f:67:23:31:6f:42:8c:e5:94:
         9a:30:1d:d9:62:00:ba:88:a5:e3:61:20:e9:b0:6c:55:1d:0f:
         71:39:1d:fa:2c:59:ff:af:4d:47:c5:06:6b:10:f2:3c:a9:5d:
         c7:54:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:02 2025 by rpki-client