Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
File:                     0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa (raw, json)
Hash identifier:          9j6CEmeBCKi6rEQil5I4YhrwwuVdAxfKp1Az5w9fKLk=
Subject key identifier:   E5:D6:B6:1B:B6:40:53:68:E1:85:63:47:1A:29:5C:93:D2:6C:A1:52
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F432858491D71831D5DDF7275080C9580
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        142.214.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:83:1d:5d:df:72:75:08:0c:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=7063e778-d476-4f4e-8d6f-d718250f1b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:e7:7e:c9:8f:49:f3:a9:5b:a2:d5:f6:07:
                    12:d0:26:de:92:5c:8c:14:80:88:df:18:42:f0:60:
                    9c:01:2f:2a:be:a7:80:37:df:58:4c:1b:d3:a2:27:
                    9f:61:6b:df:fd:4c:bd:1e:7c:cc:86:66:50:dd:1c:
                    8d:c5:6f:fd:6c:49:81:4d:e3:4f:ef:1f:15:fd:53:
                    e4:e2:0f:4d:3e:00:85:76:af:a6:60:24:4f:69:34:
                    44:bc:8a:87:d1:c7:28:3c:9b:1f:78:5f:15:5d:d6:
                    ce:49:59:1b:3f:a3:78:3b:c8:85:47:e9:9f:43:17:
                    34:21:f9:09:63:01:58:d3:0c:2a:75:17:cf:6a:bc:
                    6a:11:18:3e:6a:a3:f5:25:63:cd:0f:fb:54:f3:52:
                    c0:3e:db:58:1d:cd:23:24:5e:05:66:f4:12:44:d0:
                    3d:fe:54:13:54:ec:a0:50:34:2e:56:e7:5f:68:2e:
                    86:6b:27:24:c6:46:a8:62:8f:c5:90:05:74:fc:f0:
                    4a:ec:c5:fc:78:f5:6c:48:bb:76:a6:87:ce:0d:57:
                    f5:33:59:9a:c3:93:a8:e4:4f:ad:f3:34:e7:4e:2d:
                    81:ba:9b:fc:93:d0:61:80:06:22:62:01:b5:99:0e:
                    26:c1:c1:ab:14:a7:53:ce:be:3f:6a:7f:dd:86:f8:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:B6:1B:B6:40:53:68:E1:85:63:47:1A:29:5C:93:D2:6C:A1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:dd:40:cb:b1:e0:72:69:ac:92:47:5b:4c:fa:da:27:fd:
         01:9f:6d:c8:7d:68:ef:1c:91:70:ef:e8:b2:57:36:e0:50:28:
         c7:42:b3:cf:f1:dc:18:1c:61:b2:51:c3:6a:0e:21:6a:da:c9:
         02:d6:1d:d5:80:b3:53:2a:0e:f8:01:ba:5b:3e:f9:f1:6f:47:
         e8:ae:aa:56:e8:fd:64:70:9c:dd:80:2d:15:4d:05:b7:ef:b3:
         77:58:11:74:eb:9d:5e:76:21:a7:e3:d5:32:51:56:03:96:1b:
         95:90:b1:ca:80:b0:a1:6a:be:ad:df:db:e7:0a:86:7e:7a:a5:
         ec:f3:25:db:de:1f:9b:71:b5:53:8a:95:d2:59:e5:fc:f4:9d:
         2e:50:59:3a:53:dc:6b:06:bb:7b:02:05:d7:32:f1:72:4e:4b:
         00:e5:2c:5c:d4:ba:91:d5:71:ba:de:69:4c:2e:20:93:7d:06:
         7c:32:7e:6e:32:07:05:20:de:a0:72:d1:82:66:f2:f8:06:8e:
         e3:99:2f:c9:7c:d5:b1:a9:c1:3b:3f:15:b0:98:04:d1:98:d0:
         e2:61:da:c2:a2:ce:d6:24:a6:3b:89:5b:51:35:e3:42:d4:b7:
         1c:44:bb:1d:84:8d:50:24:a4:2a:a5:73:74:31:a7:0e:74:f0:
         df:75:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:13 2025 by rpki-client