Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
File:                     d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa (raw, json)
Hash identifier:          N5ETCdLsLSzdXb6F2MK+l7+Tq0QVAmYWU5F7OAUBW7g=
Subject key identifier:   28:DE:5B:1F:4E:A7:35:49:D9:07:AF:70:DB:E7:03:69:E1:EB:97:51
Certificate issuer:       /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial:       010D0C9F4328584976A990FED1321562B0FEBE80
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     14702
IP address blocks:        141.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:90:fe:d1:32:15:62:b0:fe:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=1e78289a-8284-4cff-9b1b-d462fceca1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:8b:64:79:7d:9f:38:9f:72:a7:ec:de:ed:
                    b8:7f:42:98:a2:bd:8e:dc:b7:c9:03:95:91:12:d6:
                    a3:3c:ea:9a:d5:01:7b:69:a3:3e:0b:89:05:20:32:
                    63:9c:a1:d7:20:8a:6b:55:b1:a3:1d:4c:ba:ae:17:
                    8c:60:e4:d2:2e:b7:fd:8e:e3:aa:04:e8:ca:9d:24:
                    e8:01:80:e1:10:d9:a1:df:fd:4a:70:25:e8:f3:4d:
                    9d:60:dd:dc:33:2d:26:82:ed:bd:a6:1d:37:ac:ba:
                    31:8d:b5:75:cd:ed:a4:96:af:d6:c9:56:a1:7a:62:
                    96:ca:52:e5:1a:d8:87:03:1b:ee:07:8c:e2:42:ce:
                    27:d2:e7:ab:42:d3:e5:53:8c:d4:2a:ee:36:69:93:
                    78:ed:96:86:9f:61:c9:bc:c2:62:e4:0a:b5:bf:52:
                    61:7c:44:70:26:c3:71:bf:15:07:cc:23:c5:10:f9:
                    a2:dd:6c:96:ed:8f:11:8a:47:07:c9:41:6c:f3:a5:
                    94:fa:30:d3:5e:ad:d2:00:96:f3:03:7e:1f:06:52:
                    84:38:39:fd:d4:82:f0:07:94:d2:af:60:6a:29:c7:
                    94:cb:fe:31:83:28:b9:1e:0d:28:c1:f6:93:68:41:
                    7f:e5:90:e5:df:42:80:68:53:01:cb:1b:d1:b9:d7:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:5B:1F:4E:A7:35:49:D9:07:AF:70:DB:E7:03:69:E1:EB:97:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:44:7a:99:25:fb:68:16:e4:77:92:ad:57:40:24:b3:95:97:
         a4:6d:51:e2:2e:86:6c:ab:b0:d9:ce:f1:ab:07:2f:a0:c1:79:
         f5:77:6a:28:01:26:65:4c:18:98:52:8b:27:36:0c:a6:bf:af:
         fc:8d:54:c0:2a:41:6f:5b:55:0e:70:d6:c6:ed:4f:c6:d6:d0:
         ae:a3:1b:a5:39:3f:ee:8e:45:5b:2e:81:7f:a2:93:2b:23:7d:
         34:b6:fc:7b:18:e7:e6:1d:2c:5d:0a:84:d3:a1:40:1f:8c:7b:
         8b:bc:9f:fb:88:ea:a8:9c:fe:e1:07:40:7e:03:29:4a:87:9a:
         9b:d8:c1:35:85:a6:91:28:6d:0e:a4:63:63:47:0d:d3:89:32:
         d0:89:14:d1:1b:e9:9e:e4:78:55:a3:24:ea:0c:a2:53:52:42:
         e0:f5:dd:11:7c:c0:36:ff:1c:bd:f3:25:56:4b:16:f8:24:61:
         2b:e3:0c:f8:c3:72:99:45:94:7e:23:74:91:a7:e5:bc:aa:5b:
         16:05:90:62:3a:11:8f:e0:35:f3:63:a1:95:2d:9e:3b:99:9a:
         58:6c:72:2f:dd:f3:91:8f:14:17:15:aa:51:00:20:bd:f0:bf:
         da:ce:62:ea:fa:63:aa:cd:ab:f7:e6:03:3c:fb:ac:29:5f:3f:
         ce:d3:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:31:42 2025 by rpki-client