Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa
File:                     ef8708ad-3d66-3e70-a91d-773c52885e52.roa (raw, json)
Hash identifier:          UDfUiqEy/hzPxK/qMg0I1mtBIduxacNiRPuBop1RHwg=
Subject key identifier:   44:C7:BE:DC:09:B0:39:8D:26:53:A5:00:FF:58:30:B9:10:71:FC:7E
Certificate issuer:       /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial:       010D0C9F4328584A0C0568B56921AF039D10AC40
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     32121
IP address blocks:        142.152.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:68:b5:69:21:af:03:9d:10:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fa2b655d-0292-44d8-bfb3-96ff67923898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:18:15:0e:35:c9:10:df:94:8e:5e:b4:5a:
                    a4:4a:6d:d7:6d:8d:5f:c0:8c:2a:04:9f:6d:08:d0:
                    9c:f0:cd:ca:e6:b7:d5:33:4e:6a:a1:42:19:35:54:
                    0b:14:ca:ce:d9:5d:96:c3:27:94:27:59:d0:ef:45:
                    0e:37:47:83:88:82:ab:07:0e:91:38:6a:fe:e6:7f:
                    49:48:a1:a6:63:d4:1b:85:da:e8:75:f9:8b:66:f2:
                    0d:29:4b:94:91:8c:d3:a4:5e:7e:80:f2:9e:2e:ae:
                    9a:b1:de:80:2c:18:10:b7:4a:e7:08:7d:33:ff:e7:
                    ed:9c:b3:4c:60:5e:fe:4f:d1:89:bc:6f:e1:76:26:
                    1f:27:26:37:cf:dc:78:83:5b:1b:42:4f:fd:b6:c3:
                    6b:55:e9:3e:92:a5:97:2b:5c:45:56:bb:48:c0:43:
                    5d:ac:eb:60:30:e1:fd:7c:9f:30:1f:b2:ab:87:8b:
                    d4:59:d4:ca:8c:21:03:5e:d8:3f:0d:7c:17:e3:83:
                    a9:7b:f4:ef:d2:18:0e:ff:5b:4f:b7:95:8f:d4:61:
                    a6:0b:73:7b:96:3c:17:2a:46:72:4d:70:7c:4a:37:
                    41:51:9e:a0:72:19:e4:61:b3:6e:2a:7b:bc:01:d8:
                    e3:4d:c4:fc:ca:cc:48:ba:d4:f8:99:81:fc:7c:49:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:BE:DC:09:B0:39:8D:26:53:A5:00:FF:58:30:B9:10:71:FC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl

            X509v3 Authority Key Identifier:
                keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.152.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:82:00:66:30:be:13:c8:26:a0:7e:2f:a9:f6:2b:94:86:cc:
         ce:75:f0:11:0b:45:71:f6:ba:98:aa:e0:67:eb:46:43:79:8a:
         80:92:26:a4:66:ab:85:21:61:db:02:c1:df:5b:05:e7:80:79:
         a4:9f:c6:3b:ef:56:e6:8a:43:bf:5f:a4:f8:20:33:1b:1f:60:
         3d:b3:15:1a:60:34:b3:7a:e5:eb:32:39:cc:88:0a:d5:2e:dd:
         1e:63:c5:51:89:d0:4a:6c:33:03:86:59:fe:57:d7:e4:48:d7:
         d0:71:02:76:d2:82:70:da:a9:62:3c:b7:64:bf:fb:97:03:44:
         c2:c6:e1:d7:22:d4:80:a4:b4:a6:3c:7a:d7:50:fd:57:25:fd:
         e6:bb:38:ee:5b:37:98:1d:82:a1:1c:be:66:87:4e:9d:98:dd:
         b7:73:43:46:86:8a:ca:31:73:5a:87:97:db:b6:1a:ba:39:24:
         b8:9b:fb:08:c8:e9:db:92:03:94:8d:bc:d5:d5:85:ab:96:4e:
         56:fb:7c:9a:44:7f:67:2c:40:b9:0d:aa:7f:c7:45:73:78:f2:
         e6:5e:9a:13:28:5e:39:c5:cb:1d:49:96:37:ab:a4:ae:24:4b:
         21:bb:5a:9f:85:93:ea:b4:52:92:14:1e:be:b4:bd:9f:1d:7a:
         15:71:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:08:21 2025 by rpki-client