Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa
File:                     0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa (raw, json)
Hash identifier:          k+vqFB2Pp2lE5szMTKC2k+kGArxbBW5yeEM9sz4OfRg=
Subject key identifier:   84:A9:41:58:F9:88:3F:C4:4F:84:5D:6D:51:4D:0D:DB:EE:07:9E:56
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C2442014F53E84273B08E70
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     4476
IP address blocks:        142.231.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:42:01:4f:53:e8:42:73:b0:8e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=85c19ad2-a07e-437f-a912-034233f1e056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:4b:73:83:01:3e:ee:e8:c5:c7:01:5b:06:
                    ef:0d:23:75:3d:74:e6:dd:8a:ed:51:8c:7e:a7:8b:
                    c3:5c:f3:81:97:b6:18:1b:8d:89:b0:53:1b:a9:9e:
                    fb:61:62:5f:9d:19:b8:1f:fa:28:a2:84:4e:e4:12:
                    83:61:7d:c9:86:39:95:e4:c0:90:a4:9d:dc:72:f7:
                    98:bc:8f:e1:ac:6d:3c:73:78:40:f8:0d:4f:1a:a7:
                    91:ec:ac:f5:ab:c2:74:7e:95:74:bc:f9:92:8b:73:
                    39:48:2d:ed:96:0c:72:50:5c:e2:c2:10:3e:c2:98:
                    02:22:30:74:0d:43:d7:8c:64:07:f5:50:47:e0:7d:
                    76:e1:e3:8d:0d:48:89:31:4e:a9:56:b2:8a:8b:9d:
                    d7:5f:e0:87:23:96:b6:1e:d2:4b:7a:59:93:ac:b3:
                    f7:ca:c3:33:6b:59:92:04:e8:bb:03:50:3b:88:27:
                    12:07:71:1c:5a:0f:62:50:bf:27:35:d8:ad:74:2a:
                    e4:ce:07:cd:34:86:0d:7f:bf:77:06:81:e6:86:eb:
                    55:47:1c:71:c1:6c:26:4a:48:b7:60:59:2b:b0:b5:
                    b9:7b:cb:39:14:68:ec:39:3c:68:78:e3:67:2f:d1:
                    09:f6:8a:aa:8a:11:d8:23:2d:a6:00:9c:78:f4:15:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A9:41:58:F9:88:3F:C4:4F:84:5D:6D:51:4D:0D:DB:EE:07:9E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0cd76e20-8ff8-364c-ab66-2f7b20274c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:ea:27:63:60:18:8b:bb:5f:68:b8:02:98:ba:ff:a0:09:
         0a:75:f9:6a:76:87:8d:27:9d:38:31:4d:eb:22:76:41:56:25:
         32:bb:94:cb:4f:81:31:b9:46:94:8f:28:36:cb:9e:69:bf:7b:
         d8:6a:cf:ab:e8:d4:84:1f:dc:ed:e7:95:00:43:40:31:36:ff:
         16:fd:d0:68:ea:5c:b1:d4:9e:74:64:39:44:12:91:05:7e:e3:
         18:7a:8e:19:85:1a:5a:20:a7:38:b9:bd:54:a5:58:87:9e:c8:
         eb:91:ce:86:60:06:e4:1f:e7:55:fa:6c:8a:84:ef:14:f8:d9:
         6f:9b:2f:f7:b1:3b:03:69:c9:17:e3:08:b1:a4:2f:86:f9:af:
         3b:82:c8:4a:93:13:5e:67:e4:a6:78:63:fb:fa:90:89:05:ad:
         a3:ac:bf:02:b4:e8:c9:17:b0:0f:3b:a1:cc:55:7c:89:ca:27:
         28:04:9b:e3:d4:a2:3c:1b:c7:2e:1f:4b:d6:84:4e:22:c9:38:
         7c:47:57:1a:03:fe:9a:e5:92:73:a3:a4:8f:19:24:24:56:0f:
         0e:35:aa:90:0b:7e:4e:09:97:b1:9a:dd:b3:4c:13:47:40:1b:
         09:63:8b:60:23:b0:2f:cc:3e:b5:61:c1:cd:00:d9:9c:10:b4:
         82:89:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:29 2025 by rpki-client