Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41b99fa1-4dc4-3009-aae9-40969972ca8d.roa
File:                     41b99fa1-4dc4-3009-aae9-40969972ca8d.roa (raw, json)
Hash identifier:          4RiGTqGD1VgQ621NKMqwu/9I5KkV2jcuSeVXYCCNEPw=
Subject key identifier:   61:6E:46:84:8A:80:8A:58:43:0F:82:3C:B7:36:38:6D:05:B0:FD:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E22547C6FC7BC31A175B5A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41b99fa1-4dc4-3009-aae9-40969972ca8d.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.155.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:47:c6:fc:7b:c3:1a:17:5b:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=141c3ecc-4081-4aa2-8998-8b2084a4f836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:26:f0:7e:6f:55:c8:3b:e3:af:9a:e3:11:
                    31:1f:a1:6b:33:90:62:5a:f0:1e:e1:9d:86:25:b9:
                    40:07:f2:51:03:b7:0b:8e:05:14:f3:25:6f:ce:ee:
                    33:15:80:d2:a8:f8:7f:9a:35:19:d4:06:82:c0:66:
                    ed:70:f0:bd:fa:f8:12:28:16:28:80:6f:1b:35:d7:
                    bf:46:71:87:a6:d1:69:33:a0:52:f8:4c:c3:f2:89:
                    bb:a8:a2:a1:d2:5a:fa:46:62:99:3b:46:00:8d:12:
                    17:79:fd:5c:cd:3a:e3:4b:dc:a9:0e:c9:35:39:c2:
                    62:61:e4:f7:eb:db:ee:91:f4:6c:3b:25:7d:03:77:
                    eb:5d:f2:54:ef:87:15:07:7e:0b:50:0f:54:50:07:
                    0c:7b:04:ea:e4:4e:4c:2b:9b:c3:2e:65:88:f0:68:
                    c6:a9:7f:36:43:a1:d7:a5:2e:1d:90:c2:0c:cd:cd:
                    45:c6:13:58:ed:54:2d:58:9c:2a:98:54:05:9d:23:
                    cc:23:dd:2c:4b:ca:c3:2d:59:63:78:73:f5:ad:ef:
                    17:da:5f:05:00:60:c6:39:9c:e4:c2:d9:16:b4:10:
                    ee:cc:27:75:f3:06:63:90:35:94:6a:1e:f4:67:74:
                    2e:4c:f9:9e:37:0c:dd:7c:cc:2c:a9:93:22:0f:1b:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:46:84:8A:80:8A:58:43:0F:82:3C:B7:36:38:6D:05:B0:FD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41b99fa1-4dc4-3009-aae9-40969972ca8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:26:74:9b:a6:19:db:40:1d:19:5e:33:5d:6e:22:35:2b:
         dd:c9:55:88:e8:3d:43:da:c5:c2:71:5b:14:61:5d:c0:21:0d:
         01:9e:9d:24:5e:a8:4b:39:2f:34:3e:b9:5e:d6:73:8b:ee:0f:
         e9:42:23:be:bf:0d:6a:60:54:46:e0:5f:67:e8:6e:f0:72:90:
         d7:b5:b3:c2:5f:23:30:f0:ea:7c:e3:6d:d6:2b:86:fc:b7:32:
         89:0d:c4:65:16:70:27:eb:62:28:a6:7e:2b:6b:2b:e2:be:5a:
         50:61:2e:5f:29:a4:bc:f2:e0:4e:4e:6f:31:62:88:a3:d0:f7:
         e6:1c:59:64:5b:1d:f3:f9:bd:c2:7f:78:a1:cd:51:bd:58:eb:
         81:05:87:ea:3f:99:76:99:8e:6d:a1:a5:31:4e:73:a7:50:67:
         a1:eb:97:20:a3:73:f8:f7:39:d5:83:a2:2d:59:6c:9f:12:b0:
         ee:ab:f4:e2:da:01:b6:8d:67:73:48:6d:b5:9a:e0:4e:32:a9:
         5f:2d:4b:b0:0d:bc:fc:ce:df:14:54:4c:0f:ca:6a:b7:c9:15:
         c0:50:40:4a:a7:0c:1d:9a:c7:31:5b:7c:da:f5:51:4e:48:64:
         2d:80:15:82:6c:24:e2:71:35:17:07:55:a5:1a:41:87:a9:d5:
         b1:0d:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:27:43 2025 by rpki-client