Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
File:                     91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (raw, json)
Hash identifier:          0RrDOsQiNVcZXZfo4VAq6o7cvwSiY+V752Sgc++StDM=
Subject key identifier:   20:92:64:B3:04:74:9F:27:9A:53:A8:B4:43:42:26:C3:D7:AC:C6:9E
Certificate issuer:       /CN=f3280fa0-3649-4902-978e-e7711edc5a33
Certificate serial:       010D0C9F43285849BF3F62B023AAAD548BE0EA40
Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20473
IP address blocks:        141.195.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:62:b0:23:aa:ad:54:8b:e0:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=825380bd-c560-467c-97d8-7b6a61e13b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:b7:c0:bd:dd:be:81:f5:87:f8:4f:f4:81:
                    c1:2b:38:a8:dc:6b:ab:5d:06:33:4a:84:c2:99:28:
                    3c:1d:94:67:51:fc:40:a9:80:88:26:df:49:90:15:
                    83:1c:b3:5d:f5:d3:6c:ae:04:24:ab:7a:fd:76:bd:
                    8e:ef:b5:a9:e5:f0:e4:59:cf:fb:4d:e1:e6:bb:99:
                    98:47:fa:35:af:c7:3f:65:a7:39:43:69:c1:d6:bb:
                    9a:c5:72:94:b4:c6:91:6c:8c:60:75:4a:d2:33:ca:
                    ec:fe:2e:d8:09:d7:ff:f6:1f:25:3f:8e:e9:29:de:
                    0b:96:08:1c:cf:38:a6:2e:7b:c5:fe:5d:f1:14:2d:
                    8c:5d:2d:55:fd:13:ba:cc:8c:f5:25:47:cf:6a:ea:
                    41:cb:f5:a4:12:d7:32:26:93:14:bf:f6:f3:48:04:
                    ec:e7:33:6d:c8:47:02:fd:21:57:fc:92:65:fb:8a:
                    af:d8:88:c8:06:c0:8c:d9:f6:0e:c6:e7:87:8f:f5:
                    e8:ee:84:4e:13:48:7a:c6:4b:2d:4e:a3:75:da:66:
                    c7:33:9d:a6:e4:9d:9f:81:77:96:c8:9f:3b:68:ca:
                    d9:3d:74:77:0d:d5:3e:c3:89:c1:38:c1:cc:0c:ff:
                    f5:89:e1:4b:99:14:7d:d8:2b:9d:60:91:4b:03:9d:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:64:B3:04:74:9F:27:9A:53:A8:B4:43:42:26:C3:D7:AC:C6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/91a7be32-bce2-39d0-bcf0-6b212251eea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl

            X509v3 Authority Key Identifier:
                keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:41:1d:37:8d:d9:47:55:99:cd:65:e6:ff:32:20:07:70:25:
         75:32:a0:2b:90:86:01:81:8c:5d:f5:79:e8:a9:39:5b:d5:d6:
         d3:e8:f0:9a:bf:9c:e1:c2:53:38:fe:22:c1:0c:74:a4:44:a0:
         16:01:a4:3b:38:ef:79:58:6b:16:e7:cc:2e:99:33:eb:4a:7f:
         e0:b8:a3:b3:6d:3e:21:80:26:26:41:13:7b:af:88:e4:b4:46:
         49:f9:3c:c8:02:6f:f2:02:e5:0c:c1:e4:83:39:24:b2:83:52:
         21:b1:06:d0:c3:af:18:20:f6:be:1d:81:04:4b:80:67:48:ff:
         2b:c1:60:80:09:b4:e1:93:c8:bb:b2:44:98:22:43:a5:f5:aa:
         80:3d:c7:d8:4e:34:21:33:3c:ed:e6:07:f1:a8:ed:00:80:fc:
         6e:9b:44:ae:e6:0e:15:7d:7e:e1:07:bd:94:fa:90:6f:46:a8:
         e0:2f:a0:23:ee:b3:21:59:24:96:93:a3:4e:8f:34:f1:6f:6a:
         88:14:ca:10:be:71:82:04:47:d9:9d:14:97:4f:a0:48:f6:1d:
         92:4f:97:2f:0e:93:16:0e:97:ad:25:ce:d9:39:75:5f:98:08:
         42:3b:0a:19:e2:9b:2e:31:25:72:52:0b:61:9d:a1:0c:5e:a3:
         07:64:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:08:15 2025 by rpki-client