Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
File:                     de28b314-abdf-3f3f-813f-4e0deac66bff.roa (raw, json)
Hash identifier:          lwpox57uO2GcFWn7EXK9H8D8tDxOo55GAVPBzu5aRcU=
Subject key identifier:   94:5F:39:1E:33:AC:F8:E1:FE:17:2B:C5:32:F5:DD:1A:89:A8:91:3B
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584A331AE7F3769C767039F8A200
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396292
IP address blocks:        142.54.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e7:f3:76:9c:76:70:39:f8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=2966657b-e2bd-4c53-87a3-4398e09e06a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:df:6c:ca:52:7e:5d:4f:37:1e:17:14:b8:
                    90:0a:f1:f9:05:60:c8:d7:8d:69:1a:d1:2a:12:0b:
                    da:3e:0e:fe:c6:ec:e4:ee:a2:17:dc:0e:13:1a:77:
                    18:8a:2f:7e:8e:0f:ee:3a:e4:32:69:33:87:96:60:
                    3d:1d:09:15:49:27:29:ce:d3:81:27:97:b2:a5:58:
                    f6:fc:08:0f:e2:45:00:e0:1a:71:45:40:3d:0b:37:
                    ba:6f:63:04:9f:3b:c5:13:47:9e:30:e7:d3:af:71:
                    3d:38:70:4d:22:10:de:96:7b:62:49:c4:ec:74:b0:
                    cf:aa:0e:6a:f6:d6:a7:e7:19:41:83:f1:0a:e2:a2:
                    dd:bc:75:30:24:cc:21:3b:fa:f6:bb:7e:f1:34:93:
                    85:a5:26:a6:66:10:f9:ab:4e:ac:33:e4:e9:0a:9e:
                    87:9c:45:4c:22:17:b5:8e:dd:01:fc:cf:ca:01:6c:
                    3d:b1:6b:a2:8f:21:15:e9:6e:2d:58:e9:8c:42:f9:
                    f2:fc:a4:9f:81:b4:60:89:dd:87:95:7a:a5:c9:d2:
                    e3:46:a8:e8:95:db:ba:21:14:bf:c4:6a:fe:5e:42:
                    6a:ec:e7:4c:b3:31:7d:21:8f:30:77:40:2e:7d:e8:
                    65:91:dd:80:ba:4d:d4:b7:c8:27:11:4d:6e:8a:69:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:39:1E:33:AC:F8:E1:FE:17:2B:C5:32:F5:DD:1A:89:A8:91:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:fb:b0:fa:ba:ec:a5:a1:b2:70:33:c9:1f:75:ce:72:4a:
         03:4c:ce:67:bc:d7:12:d1:42:fd:88:2f:b1:6c:31:de:32:82:
         b9:e2:e8:18:83:08:ae:7e:97:4a:58:86:78:5e:d8:cf:39:29:
         5f:e1:2c:21:fe:eb:65:2a:c6:24:89:4a:37:a1:53:cb:bf:cc:
         29:cb:31:78:75:47:59:bd:fc:28:9e:79:46:16:e2:49:e4:2c:
         da:20:3d:ef:5f:cf:5c:bc:c7:2a:56:bb:e7:23:02:26:42:f5:
         a2:39:e0:50:27:7c:2c:30:aa:8d:d1:73:db:c6:ff:47:1f:d9:
         59:0a:a8:8b:19:c2:47:60:14:69:15:dc:ea:52:da:b7:d9:74:
         24:87:2f:e3:eb:f1:ee:63:c7:c1:64:26:a9:52:6a:e8:c0:7c:
         d2:32:15:e3:7e:dc:4c:d0:d3:f7:7f:8a:c2:86:e4:e9:d8:aa:
         da:24:b8:96:88:c1:4d:31:f8:30:5a:9d:16:b4:eb:16:f6:43:
         62:27:d1:b6:50:00:f5:cb:c5:81:df:b8:9e:21:85:0f:fe:a1:
         b0:96:48:8b:45:91:c9:db:ab:2d:84:61:07:94:b7:2b:f8:a9:
         51:a8:ea:20:86:67:91:fe:0e:c6:c7:4d:e5:2a:6e:24:de:4d:
         8c:e1:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:36:53 2025 by rpki-client