Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa
File:                     a4f7b679-d229-389d-aefc-7051497b88db.roa (raw, json)
Hash identifier:          kCX6jtWL37MI3p8N8qbfVe6KnVUiMjaf4Z10QgaGF4c=
Subject key identifier:   06:A1:4E:E9:EC:F4:A7:5B:0D:50:8C:B2:B7:27:D5:6A:A2:34:9B:32
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C2441F33F1E444940023C80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     4476
IP address blocks:        142.231.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:41:f3:3f:1e:44:49:40:02:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=4123d818-db79-42a7-9a0e-65ba934803bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:ac:ac:04:cb:58:15:e4:4d:d1:c5:74:38:
                    51:31:a5:48:89:5e:79:0e:0b:ba:ba:0d:8d:26:8d:
                    73:9b:b9:90:ee:5a:3e:07:7a:30:15:d8:05:da:c1:
                    d9:2c:66:88:07:0a:56:f6:21:3e:ed:bc:4a:63:ed:
                    a8:13:7b:2c:7b:c8:40:75:fa:04:78:e8:5c:7c:5c:
                    0a:44:24:92:de:bd:30:9a:40:70:a2:9b:cc:df:9f:
                    70:6b:91:cd:52:e3:56:ef:39:cb:5b:f6:e9:e1:50:
                    4a:9a:0d:bb:82:ef:4e:68:88:8a:5c:84:52:1a:8a:
                    0c:c8:da:fc:bb:d2:81:a6:e5:1b:32:30:93:ac:b4:
                    48:b3:03:12:66:c2:60:ab:bc:6d:a8:5b:f8:86:6e:
                    0c:af:a6:4f:82:ae:12:dd:a7:19:73:f9:2e:56:1e:
                    03:9e:23:3d:f5:5b:50:f7:11:4b:38:4b:63:80:49:
                    a7:5f:97:98:66:06:45:1a:48:7e:b9:b6:45:48:64:
                    98:4f:22:13:4d:e0:24:ec:92:42:85:f1:94:3e:0c:
                    ce:d3:6e:35:e9:a3:99:7e:e3:ed:f7:72:e4:ec:1e:
                    bd:2f:90:6a:48:85:61:73:04:15:bd:0e:e5:4f:75:
                    56:af:7c:98:4e:19:a7:19:f6:9d:f0:1f:13:00:cd:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:4E:E9:EC:F4:A7:5B:0D:50:8C:B2:B7:27:D5:6A:A2:34:9B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:7a:bb:9c:ba:a3:de:67:03:82:9f:b3:65:05:b1:e3:4a:
         5d:00:0e:92:b9:17:96:df:53:6a:5d:21:dc:11:79:15:28:67:
         90:9b:14:77:f0:83:71:a6:3a:00:95:f9:8d:e2:e1:d2:dd:28:
         8f:54:ce:4c:47:91:e1:14:ee:5e:e7:6b:c4:2e:b2:9f:f1:a0:
         fc:9f:b5:f8:da:97:42:3e:58:01:b4:12:8f:d3:6e:1f:09:d9:
         90:fe:73:cf:92:0d:7b:4b:01:b8:33:d9:28:75:62:e2:fa:fe:
         14:6a:85:09:96:c6:c5:49:ef:98:e7:95:bc:7e:8c:a1:19:e7:
         ec:c0:0c:02:88:e8:82:32:4c:c5:b1:57:5e:2d:33:e0:58:27:
         ec:e1:60:bd:18:c5:f5:85:2f:0d:35:d0:dd:15:a1:7e:8d:de:
         10:32:15:e0:6a:0c:4f:55:25:63:c0:6f:3a:43:9d:81:a9:ab:
         88:30:38:eb:cf:18:ea:17:30:3e:b6:9d:37:8e:72:ad:d2:de:
         2b:25:a7:4e:75:78:39:5c:7f:b4:ae:fd:4a:6a:21:49:fa:bb:
         28:2a:5e:8b:ca:ae:32:05:65:a2:d0:7c:fc:83:20:20:8c:08:
         e4:35:09:d6:44:4d:36:0b:fc:2e:bb:a6:7e:a3:e7:b4:de:27:
         a2:f5:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:33 2025 by rpki-client