Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa
File:                     e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa (raw, json)
Hash identifier:          g99xXGDzAfr1Ad0+AK7Egb2yvheP91IiBxa3Hx60aCI=
Subject key identifier:   C4:42:2A:3B:C1:F1:09:F5:51:33:82:93:05:EC:54:E9:96:DD:16:22
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A374AD61F0A0DCC8C51E2CF00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     2914
IP address blocks:        140.228.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d6:1f:0a:0d:cc:8c:51:e2:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=cd6349d5-d713-4e2b-ae74-c601ff811501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:de:d9:7b:c6:c1:8c:22:15:56:a2:bd:12:
                    5a:e9:39:1d:06:ee:3c:8f:17:b8:ce:bc:5f:c2:a8:
                    d1:be:5d:37:cb:79:46:19:57:a6:1c:7c:07:14:01:
                    ef:d3:f9:d4:38:da:16:3d:3e:e8:30:39:e6:32:62:
                    b0:b4:49:9e:a8:2e:76:9f:43:be:87:c6:04:0b:73:
                    25:7e:1f:ad:fc:3a:2b:3f:7b:1b:e4:6f:8b:35:3f:
                    c0:3d:7e:72:f8:8d:1c:bf:2a:74:9b:11:1a:b8:56:
                    11:cc:2b:51:3c:4b:b4:81:fd:7a:24:eb:de:b8:58:
                    f9:b9:00:ab:3a:a4:0a:4c:63:2b:40:62:6a:65:e0:
                    6b:b3:14:dd:f9:a2:d5:18:12:93:2f:b8:82:82:9b:
                    d1:69:dc:7b:dd:af:09:02:67:39:da:af:7c:ea:af:
                    b5:55:ca:c0:3e:d7:51:24:ad:ad:8d:88:9c:a3:1b:
                    4d:5a:28:4a:7c:cb:f9:4d:6f:a1:a4:d6:53:24:8f:
                    f5:c1:85:d6:24:ba:83:4b:e4:37:66:02:a2:f8:40:
                    67:b7:f5:71:00:1d:34:66:b7:92:ab:5c:97:b9:0d:
                    43:68:36:36:58:00:0f:14:ab:7e:64:1f:5f:8f:20:
                    a0:bc:3d:74:76:06:cb:b4:5e:c2:a4:32:33:a2:4d:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:2A:3B:C1:F1:09:F5:51:33:82:93:05:EC:54:E9:96:DD:16:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:f7:0c:80:33:da:94:85:23:c2:f3:07:fd:a4:02:1e:3b:
         21:b0:24:30:ab:41:28:f8:66:cf:46:10:ce:81:27:b1:ef:a2:
         14:88:17:90:2b:ce:3a:c2:54:03:24:e0:b9:08:9f:46:ba:f4:
         cb:32:50:65:d4:de:23:6f:ee:d8:f0:47:a8:5a:ce:2a:59:f4:
         71:96:af:e6:a9:f1:35:1c:e4:da:a4:11:d0:e3:81:0a:b0:65:
         4e:14:94:6c:3a:ea:c3:6a:8a:4d:14:ca:b4:8c:1c:95:be:42:
         f1:49:93:a9:28:0b:51:c3:9a:fb:78:62:1f:4e:58:df:79:f3:
         30:cf:59:55:4e:a5:a0:cf:06:a1:d5:a3:a5:ae:92:0a:6d:4e:
         16:1a:ae:7a:76:2c:8e:4d:a1:88:c3:fc:48:db:50:5e:be:fb:
         fd:26:36:ff:25:12:b8:c5:67:71:71:a3:c0:11:86:97:6d:51:
         60:1e:93:81:40:a7:27:e6:50:cc:d3:81:85:37:08:50:c6:2f:
         3c:48:cb:3c:61:19:1a:52:c8:2f:a0:4f:80:c4:23:0a:fa:31:
         c6:51:54:45:61:7b:56:06:2e:9a:41:07:8b:bc:9c:af:ed:89:
         f9:28:82:cd:cc:f1:86:d9:ad:9b:6a:f3:26:bb:d3:37:f1:d7:
         21:f5:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:21:36 2025 by rpki-client