Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/0d63d769-22b5-3d86-8b50-75eb6962ac2c.roa
File:                     0d63d769-22b5-3d86-8b50-75eb6962ac2c.roa (raw, json)
Hash identifier:          jj5dcUn+TQevYV1UyzPnSWpP+RW7m7sqXV5PCSeEuz0=
Subject key identifier:   D0:2F:81:27:5A:BF:A9:5C:47:32:19:49:51:D5:96:14:91:A4:9E:9E
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584A4C3B0FB890D4A3F1195EF780
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/0d63d769-22b5-3d86-8b50-75eb6962ac2c.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     12097
IP address blocks:        24.140.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0f:b8:90:d4:a3:f1:19:5e:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=18b3fb0c-8373-4c1b-828d-4ba5ba235791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:a7:24:88:dd:f3:e3:f3:eb:81:90:82:6f:
                    a5:29:65:12:76:8d:b0:48:c7:a5:a1:72:e5:12:1f:
                    94:78:29:d0:11:95:7e:65:1e:b4:92:62:32:a8:33:
                    8e:fe:9b:4b:be:43:6e:84:7c:a2:bd:55:a7:84:cb:
                    83:84:7b:a3:de:10:f7:f1:77:45:d0:63:8a:36:16:
                    40:e7:3f:80:37:ef:e0:34:69:c0:9a:08:39:dc:60:
                    09:18:f6:31:a1:1c:33:c9:a0:d5:ec:37:b8:54:bd:
                    40:30:a3:80:fd:72:28:c8:99:d0:48:b5:26:42:6a:
                    bb:26:af:38:99:07:f0:88:ef:69:a4:ba:0d:34:a3:
                    a1:54:2f:dd:f7:c6:4e:9c:93:2a:21:ef:b8:6a:c1:
                    04:35:35:8b:cb:a7:6e:ad:9b:41:de:aa:08:3f:51:
                    ba:90:fb:07:08:4a:d9:51:bc:50:a3:e1:ce:c0:4f:
                    d6:5a:a9:8e:a0:2b:1b:da:29:d6:fd:4c:56:ff:d8:
                    c1:5a:4d:b2:f1:29:68:7c:85:9c:d5:80:0c:1c:7c:
                    a6:10:d4:3b:d7:01:cb:52:aa:5e:9f:98:ac:ea:5f:
                    7f:38:d7:5d:12:80:6a:52:2f:ff:bb:51:c2:47:96:
                    95:2b:87:94:80:19:09:e1:ef:71:ac:f0:cc:c0:90:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2F:81:27:5A:BF:A9:5C:47:32:19:49:51:D5:96:14:91:A4:9E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/0d63d769-22b5-3d86-8b50-75eb6962ac2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:03:c3:98:44:96:00:ab:30:ea:8c:4a:fd:c3:b1:41:ba:
         b9:48:2e:75:35:12:6d:8c:12:0c:0e:2a:a3:8d:69:49:9f:e6:
         5a:c3:3a:09:ed:60:89:ad:a8:db:8e:70:c8:5f:24:7e:60:6f:
         7a:dc:20:25:0f:76:80:a5:f2:47:79:66:fd:87:03:19:82:3f:
         e7:cf:99:67:0d:e1:ec:56:48:e6:dd:83:38:74:37:2a:9c:72:
         c9:8a:7b:b3:82:39:a5:4c:8a:0e:0c:e4:75:5d:16:3b:b3:c2:
         9b:6b:7f:95:96:6e:74:2c:ad:11:89:fb:2e:1d:0f:1e:e5:df:
         f2:2c:79:60:3c:7f:28:44:e3:93:c7:48:bd:75:45:19:9e:cb:
         30:7e:f8:a2:12:7e:c1:ec:50:13:a7:dd:b8:2a:26:a9:73:25:
         4e:a4:a0:da:c1:22:d7:48:39:31:b4:80:c7:99:fe:32:21:4f:
         04:2d:f2:f3:81:37:ee:c4:c2:7a:11:85:db:a7:34:65:47:ef:
         96:7b:43:f3:0c:18:8d:a3:b2:63:c4:91:07:ff:ac:e3:64:10:
         19:79:b8:ac:e9:38:54:dd:03:5c:71:37:29:b0:47:7b:e3:86:
         a5:b3:c7:5e:37:26:c5:54:7c:4c:5e:df:d5:6c:52:de:6c:5f:
         b2:da:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:31:47 2025 by rpki-client