Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
File:                     bfc668e6-2f3e-30a4-a410-a3e745688f64.roa (raw, json)
Hash identifier:          JFWTyQujwXcDtErmLKgVQChPoUAnUJonMLolp2YJf1w=
Subject key identifier:   22:92:D0:9A:C4:9D:35:C0:06:AD:3F:3F:39:CA:A2:5E:F9:C5:67:C3
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F43285849C4D4BDA283F6189FCCC5F000
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        142.54.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bd:a2:83:f6:18:9f:cc:c5:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=1a017c0b-8f8e-4c52-b4f3-7aadbd896c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:66:f6:b8:88:d5:bd:55:19:16:38:bd:d5:
                    15:2c:0b:db:05:25:1d:c0:83:86:47:b5:84:7c:31:
                    6b:3e:a0:9e:02:6c:e1:79:cf:ca:ef:ce:37:72:de:
                    df:1f:aa:21:47:4f:6c:ab:78:5e:f7:a0:5f:e4:fb:
                    37:69:bc:59:1c:e6:88:5b:93:7b:76:a8:8e:cc:b6:
                    b1:fc:21:af:20:a0:a1:ce:ef:fa:2b:04:83:eb:21:
                    7a:c5:61:71:cb:62:19:0f:2e:99:18:78:48:76:c7:
                    90:ed:4b:8f:ef:44:ed:30:c5:22:25:61:af:d5:af:
                    62:e4:4f:5e:9a:9f:27:4b:37:c4:32:44:a9:38:67:
                    b6:75:f7:52:58:3e:7a:a4:2d:58:39:ca:5d:47:56:
                    21:20:d8:3d:da:3e:bb:f8:e5:0d:2d:f5:4e:2e:cf:
                    86:8b:71:fa:93:87:1f:9c:4f:36:8a:94:48:6c:68:
                    a2:fe:48:2e:dd:b9:8d:c1:74:01:8f:06:2f:da:68:
                    6f:5a:bf:de:b9:3f:e6:4d:89:75:09:be:0c:34:f1:
                    a3:d7:ff:3c:1c:7d:a2:5f:85:ca:5a:45:3b:58:24:
                    5a:41:96:32:39:03:64:40:ba:af:76:65:c2:d6:c6:
                    c2:91:6a:0c:04:44:6a:44:2c:f1:b8:da:d2:3c:f5:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:D0:9A:C4:9D:35:C0:06:AD:3F:3F:39:CA:A2:5E:F9:C5:67:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/bfc668e6-2f3e-30a4-a410-a3e745688f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:57:0e:36:6d:9f:39:d5:9f:0d:25:75:e1:4b:a2:6d:ce:
         cd:a9:e1:3b:11:b6:f6:c3:d2:19:12:e2:39:3a:4f:ee:ce:78:
         bf:1a:a6:d0:01:f5:ba:e9:7e:36:24:c8:3b:42:75:93:1a:42:
         a7:d9:7e:04:a0:56:3a:b6:2d:9d:56:90:cf:c9:47:db:d5:f6:
         39:e8:cc:d4:17:0e:c7:c2:f6:ee:ab:a2:79:7f:92:dd:2c:e0:
         b9:65:69:4f:23:ff:cd:c4:bd:70:7d:21:b2:b6:59:04:41:c5:
         ea:7b:f6:9b:7a:89:dc:a0:7c:6b:d8:71:61:61:30:24:f1:1c:
         a3:28:65:10:b3:8d:1b:a4:98:f4:73:3e:07:6b:e4:63:d3:50:
         8c:1f:13:47:b1:c6:62:9b:89:56:a2:97:8e:0f:61:e8:08:87:
         30:80:fc:2f:3c:4c:92:76:22:d7:1d:0e:0d:df:ca:2d:4f:20:
         31:9e:8c:11:fa:8d:5b:0b:5b:3f:7b:17:3e:fb:26:b8:2f:a8:
         13:e6:a5:65:27:64:8b:7a:7b:e6:c0:c0:3a:dd:ea:62:67:e0:
         ea:ab:96:12:27:9a:db:bc:41:6e:c0:e8:50:44:bf:17:98:85:
         73:9b:00:ad:5d:91:31:8e:8d:71:e1:bf:e6:4f:e5:83:64:6d:
         25:0b:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:25:43 2025 by rpki-client