Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa
File:                     c7104701-4f2e-3aea-861b-63f63faf668f.roa (raw, json)
Hash identifier:          IWUm+3ab7nsNpyI5DXzH6fVDUhBoSwxVS4bwujohB68=
Subject key identifier:   AD:EE:AA:13:A3:53:F1:A2:28:60:9B:19:6C:A8:CD:DB:AC:AC:6B:8C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849B9A9FED75290F75BEFF2DD80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     272122
IP address blocks:        140.174.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fe:d7:52:90:f7:5b:ef:f2:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=c6111df3-4f0a-444d-b744-490e9cd17322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:45:4c:72:29:e6:28:11:bc:d4:49:ec:a3:
                    91:3d:2d:38:49:ce:0d:ea:ab:70:72:6d:b8:87:02:
                    92:d9:10:dd:6e:3a:9a:82:f6:22:80:83:8e:11:8c:
                    e6:a6:5c:6d:0f:fa:ac:be:f8:92:4b:7d:10:b2:7a:
                    27:26:d6:f5:6c:8f:81:5c:b1:bf:fc:2f:5e:04:a1:
                    10:38:12:78:07:00:cf:41:07:1b:f3:84:45:44:f7:
                    22:4b:90:67:27:07:a0:a1:b5:2d:1f:a5:d6:48:9d:
                    f4:02:99:39:08:4e:74:b2:ce:49:51:5c:72:a6:a6:
                    9e:f3:b7:b8:ba:44:bd:a0:21:72:58:4e:cf:6f:f4:
                    0b:8d:c8:0f:ee:ac:d5:8b:97:6e:38:52:73:9d:3d:
                    94:c3:d3:b5:80:e0:e0:18:8a:00:cb:dc:e4:fa:32:
                    cb:47:e1:b6:38:35:59:b0:e2:0d:04:11:04:ea:3a:
                    cf:09:b5:bb:21:64:be:5f:0a:32:85:0b:56:03:1f:
                    d1:50:ab:ac:52:53:0b:42:64:76:8e:ef:1c:ff:44:
                    50:2f:ee:99:e1:ba:22:34:45:fa:f3:bb:8c:46:78:
                    4b:99:17:42:f9:5a:dc:ab:b3:e1:de:f6:3d:ee:a4:
                    31:0b:9d:17:b0:df:e2:84:5a:1e:80:b1:7d:e5:41:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EE:AA:13:A3:53:F1:A2:28:60:9B:19:6C:A8:CD:DB:AC:AC:6B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e8:e2:96:2b:11:ad:18:49:84:67:55:d4:24:b1:3a:75:c3:
         96:b8:ae:f3:17:72:92:3e:f6:44:59:e8:50:1a:53:ce:f2:58:
         bc:a4:2e:c7:3f:9d:37:14:5b:f5:e8:fa:3a:99:0a:e5:36:32:
         2e:24:7d:a9:a3:78:fd:4e:b6:ce:db:07:0c:2e:ca:06:02:fa:
         7a:5f:4b:cd:c5:ac:d2:2e:aa:a5:e9:4e:29:cc:f2:46:8e:c6:
         f8:05:d0:2e:18:a6:6b:53:67:46:b1:45:11:e1:5e:bf:b1:a7:
         db:99:1d:ec:51:89:10:2e:07:80:de:68:f4:3d:c0:fb:46:22:
         a3:94:b6:5f:22:6a:bd:51:b2:6c:82:0e:43:12:89:ee:a2:a7:
         20:0f:38:a7:af:dd:d7:f7:79:00:5b:92:0f:6f:97:a2:35:74:
         e9:7f:2a:4b:1c:6d:a3:88:bb:b8:3e:b0:5e:79:58:b8:51:a6:
         94:ca:0e:d1:dc:44:5b:53:8e:b6:aa:2c:e6:51:5a:44:57:ec:
         63:f6:da:9c:47:78:3a:8e:e0:93:be:9f:4d:e3:de:ba:2b:e8:
         2a:03:8e:73:0f:ae:a6:ac:61:7d:54:31:ba:73:e8:6c:fb:8b:
         92:70:f2:4f:24:6d:10:68:97:13:6a:e3:08:7f:3c:db:1c:82:
         96:18:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:21 2025 by rpki-client