Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d418023b-6a61-3c5a-9f0d-0c70559e5df3.roa
File:                     d418023b-6a61-3c5a-9f0d-0c70559e5df3.roa (raw, json)
Hash identifier:          VJIryKHcMdaQsem6meVX99jjr0L+I0fCUrXBhiHv6rw=
Subject key identifier:   B0:75:25:CE:48:DF:37:C1:7D:A3:65:36:B7:3F:39:97:61:38:96:56
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849B149F5A335900870595B2D80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d418023b-6a61-3c5a-9f0d-0c70559e5df3.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     62610
IP address blocks:        107.151.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f5:a3:35:90:08:70:59:5b:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=59c29d68-7cf6-415f-a9e3-6efd1cada92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:e1:7b:b8:a4:aa:62:b2:b4:21:df:83:2c:
                    e1:41:cb:1b:f5:84:6a:bd:51:3d:dd:72:4e:6f:86:
                    80:83:62:2f:d9:96:0c:8b:69:d4:f6:87:cf:43:b9:
                    57:3d:b9:cf:ad:9a:a5:92:87:99:55:88:39:e9:9a:
                    ab:68:ab:ab:d7:4a:fe:01:cf:a6:de:2a:ea:47:f6:
                    f8:ee:a2:05:21:41:04:63:fd:19:3a:70:dd:4e:73:
                    f0:a9:f0:42:b8:71:2b:38:3e:d2:49:cb:61:bd:bc:
                    2a:35:e3:73:6b:18:6e:4a:f2:5a:ad:73:04:30:3d:
                    62:f6:9d:99:7c:f3:5b:f9:83:98:00:88:cd:5c:b9:
                    bf:80:7e:b6:57:6f:1d:d2:dc:6f:2b:75:dc:61:d4:
                    14:d3:d3:4d:ec:cd:09:7b:62:95:3a:98:bd:4d:a0:
                    84:4c:7e:8b:b2:e3:97:a3:67:e3:84:b3:6c:e3:5f:
                    31:40:f3:b3:30:87:ac:b3:23:a7:84:ad:48:9d:7c:
                    0a:fd:cd:90:1d:1d:3b:80:88:22:33:62:6e:06:56:
                    0c:24:1e:fd:81:ae:ba:25:a4:f4:74:70:48:1c:0b:
                    e2:54:6d:96:56:cd:1b:4e:ee:14:d0:f2:db:69:e3:
                    de:5b:ac:fe:9c:c0:9e:83:c7:60:d0:f1:0c:b4:4d:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:75:25:CE:48:DF:37:C1:7D:A3:65:36:B7:3F:39:97:61:38:96:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d418023b-6a61-3c5a-9f0d-0c70559e5df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:36:8d:37:1d:f1:9e:03:bd:9f:d3:7c:04:cf:02:a5:25:
         b6:c3:82:01:f1:88:cf:8d:a4:34:26:de:63:e3:a2:fd:1c:0c:
         a1:00:87:87:37:ae:59:49:bc:d6:0a:d2:40:f8:4e:0a:74:97:
         79:ec:28:ab:39:7d:c6:1b:33:6f:1b:67:89:96:29:f1:1e:a0:
         eb:5c:6c:a1:5a:d9:9e:ad:61:c3:f6:17:fc:f2:23:ac:74:59:
         64:f2:e9:57:71:6d:0b:5e:23:0b:02:c7:0d:1b:58:ab:fb:d1:
         89:5c:c2:80:a2:7a:51:4d:24:d2:33:e5:ee:04:b3:68:c4:de:
         53:98:23:9f:42:36:11:ff:ac:ee:54:e6:a5:c0:75:f2:13:51:
         f5:ee:bb:f9:70:73:75:fe:cd:cf:c7:75:87:06:fb:9d:1a:ca:
         37:3e:d5:58:5d:90:03:fd:b7:a7:6b:58:c5:95:07:a2:51:c4:
         71:08:f5:c8:d7:30:f7:2a:cb:1a:1d:19:a9:5c:a2:38:93:c8:
         96:09:c0:6a:56:74:83:f2:92:20:40:03:4a:07:99:54:74:bf:
         8d:ed:ba:29:99:78:2b:9a:0b:95:c6:04:6b:e6:e5:05:50:dd:
         20:5d:d9:54:cb:13:7b:4b:5f:fa:88:5d:d9:0d:fd:3a:a9:d0:
         74:b2:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:32:55 2025 by rpki-client