Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
File:                     8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa (raw, json)
Hash identifier:          cQAdLnQKRiTJ3SNjCIXuUny7mpVPi+YsE/30AbKWI/0=
Subject key identifier:   52:EA:6E:DD:92:64:99:88:AF:8C:13:3C:18:8B:8F:AF:D4:1C:32:5B
Certificate issuer:       /CN=fb17e7fe-b629-4f60-b002-5a63654202da
Certificate serial:       010D0C9F4328584902EC2AB2719A168EA3139780
Authority key identifier: 9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        142.147.14.0/24 maxlen: 24
                          162.247.96.0/21 maxlen: 21
                          162.251.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2a:b2:71:9a:16:8e:a3:13:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb17e7fe-b629-4f60-b002-5a63654202da
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=3bf8efd9-de1f-4961-a239-455451c88a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:42:70:52:cb:48:f7:51:b2:84:35:e6:88:
                    77:a7:1c:d7:4b:d6:24:05:e5:d9:e2:cf:c0:97:83:
                    7e:70:a4:ac:a9:a6:ce:af:42:c2:c5:31:e0:c2:c5:
                    f6:ac:55:f3:58:a6:84:53:f0:e3:1e:e6:4c:81:85:
                    ba:50:4e:cc:a7:50:28:20:37:3e:61:2f:a1:59:da:
                    06:79:0b:1e:ec:cd:6c:db:71:06:c8:7f:98:86:79:
                    c6:63:18:9d:84:5b:1f:1f:b0:7c:a7:3b:1b:6c:57:
                    87:f3:b0:f9:52:27:aa:67:b7:b6:85:f0:59:43:6b:
                    27:83:8a:a0:75:65:7c:df:08:e5:64:06:dc:85:c9:
                    60:56:3a:d0:7e:e1:da:da:a4:41:d6:77:9a:1b:e4:
                    aa:74:f1:63:6f:28:c3:ba:29:64:9b:25:6c:d1:6e:
                    d4:ea:b7:80:34:0a:44:01:fc:0f:a0:0e:83:ad:5f:
                    86:4d:72:2e:8b:3a:19:92:aa:26:2b:72:ae:46:ad:
                    5c:db:98:19:22:52:06:b4:96:d1:ad:27:bd:86:7d:
                    08:b0:3d:ca:6b:d6:16:78:14:af:6e:70:1b:19:3b:
                    cd:26:40:70:76:53:b8:a1:c1:72:87:7b:29:d4:8e:
                    5d:d5:2c:43:7c:fa:55:41:9d:6a:db:f7:2d:85:af:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:6E:DD:92:64:99:88:AF:8C:13:3C:18:8B:8F:AF:D4:1C:32:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl

            X509v3 Authority Key Identifier:
                keyid:9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.14.0/24
                  162.247.96.0/21
                  162.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7f:c8:a4:57:b2:93:f8:bf:23:b8:27:c7:2d:99:2b:1f:a9:
         da:44:2f:d5:64:25:a9:7f:25:4b:44:d2:52:04:f6:d1:bd:33:
         5b:ff:71:64:5c:ea:b1:1e:80:d9:45:97:46:eb:7e:3a:98:1c:
         2b:1d:af:ac:f2:3f:3c:18:82:5b:02:c8:92:5e:e0:89:0f:45:
         c9:bb:55:b0:17:3d:6c:92:18:de:df:b1:bd:2b:56:3f:d2:c6:
         dd:d7:56:aa:ff:62:e1:78:5b:0f:e2:70:08:7c:9b:12:53:be:
         ba:34:11:53:14:91:b3:32:79:c5:a7:8e:6f:92:84:d0:ad:ef:
         42:12:a3:fc:7c:aa:40:93:0b:43:df:8b:6d:82:0f:5a:23:ce:
         73:98:88:1b:49:0f:19:ce:e2:4d:b6:0c:cc:a3:05:57:a5:86:
         c1:66:52:80:81:c2:14:4d:db:c4:97:bf:cc:1f:08:b9:80:19:
         69:24:1a:0d:88:54:47:a3:06:39:92:27:2c:1f:59:3c:90:af:
         0f:df:21:cd:c5:ff:50:07:95:cf:36:f9:09:c2:1a:f1:fc:a4:
         e5:11:12:88:9d:39:fa:11:d6:d2:23:97:d3:aa:c5:00:ba:3a:
         e7:12:f3:77:e4:0e:48:b3:fc:20:ef:bc:93:d5:ce:8f:f0:97:
         8e:79:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:19 2025 by rpki-client