Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
File:                     b4f0d40c-cad4-3a54-befa-79bac5244c89.roa (raw, json)
Hash identifier:          jQax62OWvVJdSiBsW0T+R/LRxtHBWwmRruFov7RFe5s=
Subject key identifier:   3E:9B:88:23:73:81:EA:DD:26:2E:43:37:69:22:64:04:A7:58:EA:B4
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584A3E459F1BC5E0CC76C07652DC
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     4181
IP address blocks:        134.140.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:9f:1b:c5:e0:cc:76:c0:76:52:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=4af42c40-2f4e-4f22-a359-394b4710cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:fc:39:23:af:62:37:a7:a8:28:03:08:ae:
                    2e:91:4d:41:9f:cf:7a:12:54:3d:68:1a:3b:ed:16:
                    96:86:27:40:e3:a2:e7:79:ab:ac:db:60:d0:07:d6:
                    09:4c:17:f0:c7:a4:43:c6:c2:60:3a:98:fe:12:44:
                    14:91:1c:cd:36:3a:98:61:cf:10:fe:52:ea:16:bf:
                    86:01:e0:7f:f7:5a:ef:fa:d9:26:45:e3:0f:a7:4a:
                    f1:4e:e7:ca:ac:5d:22:84:35:2d:7b:17:23:fc:64:
                    36:67:d6:d5:7d:70:ca:a9:c2:f5:02:b2:76:90:c3:
                    e8:b7:9c:73:e6:9e:4b:c9:84:b2:39:c3:07:29:49:
                    de:83:be:54:a7:88:4b:97:12:4a:c7:e1:dc:1c:14:
                    ea:8f:e4:6e:59:cf:8b:ef:31:a4:fd:ef:23:c9:eb:
                    0c:f3:d5:0e:85:4a:1c:32:e2:1a:c6:07:48:b9:2d:
                    d5:58:70:25:14:7e:48:1b:b8:87:40:af:2c:fe:40:
                    3d:49:1a:39:63:c2:49:47:90:fd:83:0b:91:80:57:
                    e5:2c:ed:a7:bf:72:62:4f:bd:cc:38:23:d9:e3:e2:
                    f3:74:1c:ad:85:d5:1a:fa:d8:31:94:f5:84:fb:83:
                    aa:8c:05:f5:1e:c0:22:f1:03:7d:b0:bb:f0:e1:91:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:88:23:73:81:EA:DD:26:2E:43:37:69:22:64:04:A7:58:EA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:1d:dd:3e:80:3d:85:dc:22:e7:c2:09:3c:a2:48:fb:03:dc:
         2f:5d:07:32:7d:fb:2b:ba:5b:ab:5f:e9:6d:4f:2f:93:fb:cf:
         f0:17:15:1e:88:ef:84:83:92:8d:43:f5:25:ad:9a:fb:82:1a:
         3c:49:65:dd:18:35:0f:15:16:25:6e:46:b7:0f:62:5c:05:89:
         b7:9c:36:3c:e1:74:ad:fc:75:5b:84:2e:e7:42:57:ce:32:76:
         d7:43:95:31:24:8d:56:0d:3c:6d:8a:31:b4:79:d1:61:13:9b:
         5a:11:46:35:7e:7f:23:3d:b6:9b:d0:1c:2d:75:86:91:6e:a8:
         41:33:59:d6:19:6d:a2:1e:40:1b:3e:46:ed:6c:72:33:89:15:
         ee:53:62:9b:df:90:27:e0:ce:61:ef:a4:7a:50:d6:e0:77:76:
         09:42:5b:26:e2:76:49:4e:9e:72:e5:87:20:9d:bd:36:1d:c9:
         42:56:39:c0:78:94:f4:9f:58:93:37:0a:e5:40:d9:7f:38:e7:
         7e:34:32:44:49:b3:04:96:fe:2b:e3:0b:39:13:f6:98:5f:70:
         d2:88:52:f4:be:83:64:c4:2a:dd:e5:75:04:55:10:f3:1e:77:
         d4:4e:d7:1b:ce:f5:aa:89:7d:25:02:47:f0:92:bd:bb:eb:66:
         bc:f5:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:18:18 2025 by rpki-client