Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa
File:                     234fe58b-199e-3247-b983-9ce4a12667f6.roa (raw, json)
Hash identifier:          cUkVTxfgff/NokhMiM8Ezxc7/PDCeHjPYeyYz70XLks=
Subject key identifier:   30:15:95:26:35:A5:76:D3:4D:80:69:49:D6:B0:60:21:0E:2C:DB:28
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849DC8FA9FDBAD6E3ADCE7F686C
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        142.147.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:a9:fd:ba:d6:e3:ad:ce:7f:68:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=16a4a21a-1cce-4182-96d1-e4b3e64e94f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:3b:8f:ad:c2:aa:27:1d:61:ab:f5:00:cf:
                    c8:28:6f:09:3a:1f:4b:6f:c0:58:b7:6a:5a:8a:0c:
                    48:9e:1e:c1:a6:bc:70:14:24:8c:fb:56:23:b6:a5:
                    c3:52:60:3e:0a:ee:a3:79:69:7a:a0:ca:53:fd:28:
                    47:5c:ef:69:1c:94:80:51:78:95:df:d8:e4:ee:62:
                    47:64:3d:a1:d8:99:43:f5:ce:e7:87:1f:62:2e:af:
                    49:b4:da:5f:fc:9d:88:be:6d:eb:64:aa:43:27:90:
                    b0:00:3f:3b:b2:cb:98:24:83:a5:99:e5:72:10:26:
                    1f:33:dd:2e:c1:9a:2d:52:0a:c6:aa:4b:f0:4f:e5:
                    8f:a1:8e:e1:f2:71:7e:36:86:68:d2:b4:ce:3b:9a:
                    66:b5:8f:5a:dc:19:c9:5a:5b:28:fa:4d:3e:e4:63:
                    c6:a8:96:66:6a:e1:00:62:16:4d:3c:74:b1:ae:50:
                    d0:8d:f1:23:83:d5:7f:a8:41:e7:62:3e:5f:97:fe:
                    27:4e:4e:1d:95:8e:4f:60:48:fd:a4:c6:d1:4e:ef:
                    71:71:f0:1a:1f:d9:76:97:48:10:5f:1e:50:7c:11:
                    25:7c:7c:e1:fd:76:99:f8:e3:ef:f0:58:27:86:3a:
                    e0:e8:a3:7b:54:20:d9:ec:fc:6d:8f:24:43:3c:0b:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:95:26:35:A5:76:D3:4D:80:69:49:D6:B0:60:21:0E:2C:DB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:1d:19:a8:63:84:5e:86:05:17:93:4b:d7:c5:b3:aa:83:
         99:92:6f:7f:73:2a:c5:28:76:f1:b7:23:1a:4f:29:a7:63:5c:
         be:37:fd:ed:38:42:7c:34:34:a3:95:f2:29:58:5c:63:8d:bc:
         83:88:08:17:76:a9:c4:0f:18:b9:6c:aa:1a:6b:76:b8:6d:73:
         99:32:aa:54:8a:05:67:16:df:a1:7d:c5:fe:9a:68:60:af:14:
         e6:06:bf:65:89:47:84:2e:db:0e:81:2b:30:27:d6:0d:ba:11:
         45:51:9e:5b:12:c6:f0:24:9f:24:53:89:31:d0:96:41:fa:f2:
         2f:7c:cc:34:fd:40:d1:23:e5:6c:32:af:66:1b:ee:7f:af:4a:
         02:e3:b5:9e:65:60:bc:86:cd:f8:d1:b7:f1:f3:d4:ca:46:d8:
         1f:5f:70:0a:4e:b8:b8:aa:2e:b8:43:c0:34:02:ad:ee:b3:72:
         ba:70:57:c8:67:15:b9:42:cd:f1:dc:a8:aa:de:24:6f:7f:3d:
         6d:45:2b:17:60:87:9e:63:10:f6:ef:77:65:9c:62:0e:db:d9:
         81:5f:fe:10:23:5c:36:fa:fb:c4:22:4e:80:a8:d7:c8:45:eb:
         64:d2:56:32:ea:db:03:a0:13:7b:a9:e6:7b:b1:ce:12:21:00:
         73:b2:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:24:55 2025 by rpki-client