Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa
File:                     f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa (raw, json)
Hash identifier:          1gKmz1krT9VqYKensaPebTYtPPBwQy5bH4gQ5PnADUY=
Subject key identifier:   5E:80:BB:35:78:AE:12:34:BE:C7:3A:76:B8:9A:7E:E4:15:85:5B:62
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F4328584A23C0030D1B06753614BE0000
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        149.112.32.0/24 maxlen: 24
                          2001:504:118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:03:0d:1b:06:75:36:14:be:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=c2467fe4-93d4-4148-9833-51b908b0a866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:a5:48:03:1b:43:f1:17:3d:ed:bc:d5:b2:
                    f4:61:6e:e9:8c:4a:10:4b:17:3c:23:6f:b5:bd:29:
                    dc:34:49:46:d8:43:96:f4:c4:20:26:96:86:ad:cf:
                    8d:09:45:f1:de:c1:bc:be:a5:87:d1:23:0a:98:7d:
                    bf:0c:d4:98:6f:d1:78:05:a5:24:17:c3:7e:d9:ea:
                    d5:a7:1a:53:d8:76:dd:5e:11:d3:6e:50:13:14:d9:
                    df:b6:6d:c6:93:5e:32:20:25:49:ab:e7:fc:4e:0d:
                    a8:1d:ac:17:9f:26:01:b9:6b:e5:04:df:0d:b9:51:
                    47:46:3a:2c:54:41:dc:8e:3d:1b:a8:f7:8a:04:8b:
                    c3:ac:9b:27:e6:ac:b8:a3:5e:56:2e:e3:d7:2c:49:
                    77:81:e1:e7:f3:1f:a1:55:c4:39:6e:aa:83:7a:69:
                    5c:90:83:c5:86:84:4b:ae:fa:e6:68:d8:c0:21:9d:
                    0f:7e:fb:2d:10:ac:c8:50:6b:a6:c1:d7:8d:87:e9:
                    00:5e:45:f2:b3:74:ab:ed:21:02:e2:e5:12:e5:95:
                    00:f9:b4:60:16:88:ee:80:e6:32:a4:82:06:48:0c:
                    61:14:ac:40:b7:94:bf:b5:65:41:37:38:d8:35:ca:
                    74:04:b1:81:aa:a5:c4:72:50:43:a0:df:84:3b:c3:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:80:BB:35:78:AE:12:34:BE:C7:3A:76:B8:9A:7E:E4:15:85:5B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.32.0/24
                IPv6:
                  2001:504:118::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:26:94:03:76:15:12:63:d5:44:f7:bb:e1:b9:59:ba:2f:
         0e:6e:af:e7:32:8c:0c:f7:8f:57:b9:88:02:f4:46:b7:44:62:
         ca:53:6c:ea:c1:11:82:a7:7a:57:79:e5:79:fa:ae:90:db:a3:
         b7:b1:b0:8e:10:a6:2a:a6:b7:76:cc:3a:21:7c:1d:33:45:66:
         70:9e:e9:2f:34:b0:df:34:bf:00:ce:e3:f2:a0:1b:2d:70:93:
         e7:f3:dc:b1:11:8a:c9:d0:f0:24:2c:6c:29:f0:e7:b4:43:19:
         f0:5d:d2:09:a6:18:a8:98:86:f0:29:7b:68:a1:9d:7c:a1:02:
         93:1f:9b:c4:a7:56:43:87:6a:1d:2e:45:98:2c:4d:0d:5d:20:
         0b:f9:15:8a:fd:0b:35:d1:01:4c:0a:8c:26:55:9d:41:92:9e:
         73:14:a7:b9:29:33:f2:31:2f:ba:dd:68:b6:ac:cd:82:36:3d:
         d5:e4:3f:6e:3f:c8:2f:37:47:c0:a9:d8:52:b5:b5:53:eb:0f:
         65:7c:2a:d7:d3:7d:12:f6:04:c4:22:c9:8a:02:d1:f8:64:04:
         49:af:99:3b:96:e8:0b:5f:1b:b8:f6:ae:6e:70:98:32:3f:44:
         56:d4:fc:88:03:fb:99:d7:f1:df:a1:4e:35:05:e2:d3:f2:92:
         be:25:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:07:36 2025 by rpki-client