Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
File:                     1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa (raw, json)
Hash identifier:          IwiqQnrx1MgAcgExY0LQ9WhfVXJHzI4KNoR6PfvST3k=
Subject key identifier:   F8:11:CB:1D:AC:48:26:38:B6:6C:DF:71:58:78:E2:B6:04:96:D1:CD
Certificate issuer:       /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial:       010D0C9F4328584A71EB3C9038413F70ED61A100
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     8075
IP address blocks:        142.147.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3c:90:38:41:3f:70:ed:61:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=6069e2e3-b0b7-47f7-8945-cd67f20aee0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:06:32:16:63:5f:cc:f3:09:16:34:0e:54:
                    a5:db:23:57:1e:65:33:bb:16:2a:3e:28:3d:7b:bc:
                    8c:24:8f:9b:77:29:78:7d:03:a6:c9:d5:d1:21:d0:
                    7e:57:95:e4:bc:4c:b1:67:20:97:02:a3:b3:5d:49:
                    71:d7:80:e7:03:b1:d7:c9:8a:c6:9f:a9:91:a9:63:
                    41:ec:e1:09:ed:a3:09:99:87:14:d8:93:a5:85:92:
                    b8:66:98:79:54:93:09:bd:a7:25:d2:b9:b9:e4:07:
                    04:2d:69:47:14:40:12:5a:31:5d:6a:fa:b8:fd:08:
                    41:19:9f:19:11:c5:cd:d6:2b:3a:16:83:b6:81:e9:
                    f4:ed:38:0b:96:23:d7:b7:aa:55:24:3b:e9:e3:2e:
                    ba:bc:1f:56:e5:51:e3:a0:a1:61:ef:e0:8c:21:e7:
                    3b:04:d4:6c:fa:22:26:4d:3f:94:63:fd:c1:3e:15:
                    b6:b4:39:c1:41:ce:b3:09:1e:67:0a:3f:51:17:88:
                    5c:d1:a5:c2:3c:ce:78:12:a9:a3:fb:8a:3c:89:a8:
                    13:8a:f6:36:45:89:0d:0c:f9:a7:dd:ce:a7:18:68:
                    f3:12:1b:2b:fc:22:da:d5:06:98:16:3a:2a:7c:3e:
                    cd:b2:6e:51:a0:11:8e:1a:de:78:16:c3:0f:13:11:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:CB:1D:AC:48:26:38:B6:6C:DF:71:58:78:E2:B6:04:96:D1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl

            X509v3 Authority Key Identifier:
                keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:d3:7f:42:cf:81:9a:68:db:8e:b5:19:52:ea:4c:e6:2f:
         2e:08:e9:48:c9:3a:17:9d:cc:92:60:b3:5c:0f:24:52:57:55:
         40:3a:86:d0:b3:51:87:14:6b:35:d1:ea:26:51:41:f6:18:01:
         a6:8b:46:a3:73:79:47:18:7a:ee:c0:66:dd:dc:18:cb:55:7a:
         1f:9c:5c:44:af:94:de:d0:b1:1e:30:48:a9:9e:24:00:db:09:
         55:cd:4b:9e:56:0b:e9:63:56:7d:ee:e6:57:9d:95:5c:a5:45:
         19:c7:ff:e5:e0:5e:9a:d1:b0:6c:95:2e:e7:d1:0e:33:39:44:
         01:a2:80:60:2b:7d:05:ac:37:3c:47:37:8a:9d:bb:f1:e3:4f:
         f7:29:2e:11:8b:dd:83:02:bc:2c:55:d2:f8:6b:24:62:57:ec:
         ec:77:b8:98:d2:8f:6f:dc:37:e1:59:5c:7e:6b:20:8e:43:f4:
         47:19:29:c8:a8:6e:9d:27:b7:59:a4:d7:9f:10:70:3b:ce:88:
         4d:ba:40:98:38:54:3d:45:ca:66:63:0f:99:b0:08:9e:e5:99:
         2f:78:96:7d:fa:63:62:40:3a:b1:c0:fb:b9:ab:50:7f:28:69:
         24:30:c0:39:8f:fa:c2:6e:46:b8:f1:f5:43:b2:66:23:62:07:
         bb:c2:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:38:01 2025 by rpki-client