Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa
File:                     efb1c58c-b164-3fe2-818b-0232b3886304.roa (raw, json)
Hash identifier:          VapCG5TfdnwAVO2cuZMfkEbwuBkkjBKmebwIdFdWaX4=
Subject key identifier:   6B:6C:3E:FB:54:EF:13:62:74:C1:28:F1:12:D1:D7:C2:F1:47:B8:AC
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F43285849C4D4BE6E545A118DD390F380
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        142.54.38.0/24 maxlen: 24
                          142.54.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:be:6e:54:5a:11:8d:d3:90:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=c83a4ac1-7d1d-452d-a199-a6cdbf1a3c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:28:8f:58:e0:ed:b0:4e:5a:d8:2b:70:43:
                    1b:51:a5:48:e8:e3:25:af:5f:93:fa:21:db:78:a7:
                    2a:7d:eb:c4:06:39:8f:25:98:8b:f4:a2:2d:80:61:
                    06:6b:2d:32:c5:d6:da:e2:f7:c0:c6:f0:2b:01:c7:
                    28:d9:81:d3:42:ce:ca:f3:17:5f:89:ca:30:f8:22:
                    46:79:8f:38:a8:6e:33:08:62:f7:72:39:0c:2d:6e:
                    04:d8:b0:b1:b9:76:cd:63:a9:ad:6e:6b:3b:b7:81:
                    bc:04:81:bd:f7:23:b2:2b:31:18:55:59:6b:b3:2f:
                    b0:24:6e:a4:fa:87:32:43:bc:2d:5f:9c:72:61:48:
                    95:47:a1:a2:db:cf:47:13:c7:cc:20:98:dc:e0:6e:
                    96:fa:97:74:f4:60:f6:6e:9f:c8:78:8f:8c:77:f0:
                    1b:16:e4:fb:8d:b9:a1:ec:00:ba:39:24:39:e9:58:
                    1b:84:98:02:d3:92:9e:7f:2b:c8:40:87:3d:67:82:
                    71:9e:a8:23:bf:89:03:5b:c2:53:90:8d:59:46:53:
                    66:19:e4:d8:3c:ab:44:28:63:96:a9:1b:57:ec:55:
                    7a:c0:5f:0d:ef:43:d7:33:87:aa:ea:5b:98:4e:1a:
                    9a:ad:f5:ed:b6:2b:05:43:21:a4:d8:06:33:07:91:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:3E:FB:54:EF:13:62:74:C1:28:F1:12:D1:D7:C2:F1:47:B8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/efb1c58c-b164-3fe2-818b-0232b3886304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:97:98:82:0b:b9:ff:ee:79:b5:e6:e8:a8:84:02:fd:13:
         90:9d:52:81:69:6b:01:d0:6c:37:0d:f5:74:0b:17:04:cf:e7:
         fd:00:2d:dd:e1:ff:44:fc:4e:d8:a6:c8:95:f6:fe:27:f3:a7:
         60:f7:be:55:7c:e7:c6:36:5f:62:da:e7:f9:bf:ef:6f:34:0c:
         0c:26:4f:64:f6:38:ad:ca:2a:c6:14:7f:ce:96:1b:1b:8a:0b:
         6a:75:d5:cf:fa:a7:74:85:95:a4:44:71:14:bd:37:0f:d1:79:
         dc:ad:7b:14:41:86:20:7a:66:ac:d9:cc:ad:08:87:5a:08:00:
         88:3d:92:03:28:36:9d:59:d4:11:70:ba:e7:49:f1:50:a7:2c:
         d5:8b:38:cf:57:ca:f5:f8:5d:07:2f:33:89:57:80:be:83:ad:
         2c:65:d2:a8:32:cb:0c:e8:b9:ec:69:f7:ea:54:39:be:bc:db:
         dc:21:9e:ac:36:76:6b:90:5b:2e:d7:fd:25:45:a4:d3:38:a4:
         65:cb:de:96:be:10:8f:00:71:f6:ed:36:cf:6d:4d:d2:6b:40:
         d0:f1:2d:c3:7b:6a:87:5b:19:08:65:8e:b1:08:bf:81:da:9e:
         ee:f7:07:bf:b7:7e:7d:2c:30:e8:39:5c:f6:6f:cf:be:87:3a:
         28:b5:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:14:07 2025 by rpki-client