Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4cef8557-1ac0-3893-bc6c-e197e0706196.roa
File:                     4cef8557-1ac0-3893-bc6c-e197e0706196.roa (raw, json)
Hash identifier:          Dj0GhZEVBADNqzdp1R3Glz1NV1e/636F5jP448lZ5Mc=
Subject key identifier:   AA:C6:59:31:31:69:20:E5:7F:21:97:4C:62:EE:AF:46:D7:76:54:3A
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858495ABEE05C5C8ABCABE6DBC500
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4cef8557-1ac0-3893-bc6c-e197e0706196.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        141.140.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e0:5c:5c:8a:bc:ab:e6:db:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=9388388c-2c72-4d44-900a-da7e4a7e1f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:cd:49:db:b6:ad:8d:65:3f:1f:40:f1:07:
                    3b:b9:bf:43:ba:72:03:4d:1a:3e:17:01:61:b7:69:
                    7e:4e:33:bc:94:5c:aa:4a:97:b6:6e:f5:fe:46:64:
                    64:1c:29:bc:8a:c2:9d:b1:b8:4f:43:91:f3:c5:84:
                    00:a2:ec:01:52:9d:6a:8d:58:8b:ed:93:c5:95:48:
                    39:9a:a7:e4:50:c1:4d:10:46:e6:05:52:73:ac:b3:
                    63:0c:43:3f:25:b9:fb:a0:bb:4e:10:2c:82:00:62:
                    ea:0e:31:ec:79:aa:d9:49:c5:ad:15:c1:e3:e7:00:
                    a9:86:cd:de:02:50:d8:58:a6:30:8d:35:ec:57:33:
                    08:61:41:24:83:79:83:0c:49:c0:77:f8:ec:ad:83:
                    d8:f5:9e:ea:61:18:0c:6a:a3:c2:26:57:1b:13:19:
                    fa:e9:d8:c3:0a:b4:1d:fd:a1:d2:f1:00:62:9a:df:
                    dd:1b:d1:31:b5:5b:fb:c4:16:95:cc:e2:49:fb:37:
                    32:73:0c:94:c2:5c:f8:cc:8d:e2:98:3f:31:e7:ff:
                    b6:87:90:85:82:f0:12:bf:65:64:a2:6f:4f:53:c3:
                    b3:99:16:5c:0d:2c:6b:5e:35:08:82:1f:df:3a:2a:
                    92:9c:e0:a9:58:62:fb:37:ab:7d:a3:57:96:b5:ab:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:59:31:31:69:20:E5:7F:21:97:4C:62:EE:AF:46:D7:76:54:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4cef8557-1ac0-3893-bc6c-e197e0706196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:39:f0:7d:5e:01:63:8d:fd:96:57:20:90:93:4d:21:e2:08:
         4f:bc:2a:96:e9:97:d3:0d:a4:0a:2e:75:56:4f:6a:f6:95:50:
         94:2c:84:5e:f7:c8:52:6d:a1:7b:ce:b5:08:4f:94:ab:d6:9a:
         d0:ab:c9:c8:a9:40:7d:c3:ac:af:7d:37:5d:38:62:4a:b8:ff:
         34:b9:ec:fc:10:83:8c:0d:af:a6:49:90:ae:c6:75:9b:c3:be:
         81:bc:5b:f5:c3:8e:70:6d:b2:35:12:0f:c4:c4:a5:d1:75:3e:
         9e:60:4d:87:af:ab:4c:8b:1c:62:6f:4f:8a:c7:a9:cd:f4:53:
         2b:e1:64:92:9c:09:6c:1e:fd:f9:06:e7:ae:b4:61:53:42:97:
         65:b7:2c:c3:3e:d9:55:cd:ee:4d:f2:de:54:21:86:3d:6a:0b:
         7e:3f:70:3c:a9:da:b4:b6:0b:cb:14:d5:c7:6b:fc:b6:8d:68:
         58:c8:9f:93:11:5a:a6:07:03:24:c8:62:41:be:0c:80:1f:5f:
         cf:a6:d4:c3:46:06:b1:5a:39:cb:c3:79:54:38:f5:3d:3b:b9:
         f4:cc:d8:62:ae:08:f9:f4:a8:47:55:bd:17:27:78:4b:e0:ef:
         fb:0d:ab:96:cf:de:0c:81:68:53:35:5f:7c:b0:a6:d0:15:73:
         e8:5b:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:00 2025 by rpki-client