Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
File:                     f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa (raw, json)
Hash identifier:          Jv6zIHBgxcO9nlCMQKS1gv8tz/m0z9NcKcw2dschUbc=
Subject key identifier:   C3:FC:56:14:95:B2:DA:9C:87:E3:88:6B:B3:01:FD:96:5B:B6:AA:BA
Certificate issuer:       /CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
Certificate serial:       010D0C9F4328584A348025BEA4DEE19E24282300
Authority key identifier: 67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     40007
IP address blocks:        141.109.0.0/18 maxlen: 24
                          141.109.96.0/19 maxlen: 24
                          141.109.176.0/21 maxlen: 24
                          141.109.184.0/23 maxlen: 24
                          141.109.186.0/23 maxlen: 24
                          141.109.188.0/22 maxlen: 24
                          141.109.192.0/19 maxlen: 24
                          141.109.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:25:be:a4:de:e1:9e:24:28:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cfe74c-db75-4446-81fd-1ad10a601f2b
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=cd59c81f-a372-442a-b124-2ed74ba21547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:86:b5:67:63:bd:f9:b6:6e:0d:81:61:97:
                    cc:5a:ea:7b:18:9d:d4:4f:de:cd:ae:a3:ba:1e:f6:
                    6a:42:3f:77:91:18:87:f1:85:5b:65:74:ce:b7:87:
                    b6:a3:c1:a5:cf:90:85:b8:d9:94:be:0e:7c:93:1b:
                    56:93:bc:4e:30:5b:08:de:29:c0:36:82:85:d7:29:
                    86:ea:14:34:32:d6:71:dd:6b:57:b0:ac:37:ca:94:
                    11:02:bf:96:4a:c0:75:dc:d4:72:c9:ea:71:06:78:
                    8d:12:ec:e8:a5:ab:f3:18:d0:e7:4a:6e:f4:15:72:
                    a3:e1:94:9f:a1:18:d5:1f:ef:90:d7:51:74:20:7c:
                    f5:46:62:2e:1d:00:53:3c:cb:9b:7f:f5:a8:35:95:
                    1d:9d:41:77:9f:be:95:80:0e:bd:df:b4:6e:eb:13:
                    42:35:73:67:05:a5:78:a4:2e:3c:a0:6d:ea:04:48:
                    37:1c:fa:db:6d:98:3b:20:51:04:90:59:0a:a2:56:
                    63:21:d3:cb:f7:aa:b3:b6:39:a8:a2:e4:c4:d0:a0:
                    a5:c3:7e:37:0e:ac:48:14:a7:8e:d1:21:c5:df:8c:
                    3b:1a:4d:7d:46:8d:ad:1c:22:95:fc:27:89:ee:03:
                    68:12:b1:69:f3:37:e8:1f:41:a2:6f:1e:c3:2a:72:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:56:14:95:B2:DA:9C:87:E3:88:6B:B3:01:FD:96:5B:B6:AA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/f361a84e-2742-3bd4-aa97-1effc6bf5c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b/b7cfe74c-db75-4446-81fd-1ad10a601f2b.crl

            X509v3 Authority Key Identifier:
                keyid:67:5E:41:7C:EF:8E:A0:EA:50:E7:89:9C:51:02:B4:D9:07:96:08:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7cfe74c-db75-4446-81fd-1ad10a601f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.109.0.0/18
                  141.109.96.0/19
                  141.109.176.0-141.109.231.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:10:62:9f:fb:4d:0f:cd:10:f1:48:30:73:2c:02:29:a0:39:
         31:dc:7d:0b:2d:de:34:d9:27:4f:b4:fb:6c:53:6e:cc:b4:7d:
         c7:0f:34:a2:49:23:fe:f1:bc:9d:b7:7d:8d:ce:90:71:ae:49:
         51:92:23:b7:20:e9:f2:b9:4f:bd:83:2b:ec:f2:c6:68:ca:83:
         6d:9b:25:34:ca:98:6b:65:5e:fb:03:57:19:a8:34:69:19:dc:
         c4:23:f0:3a:f0:31:ce:7c:71:e4:be:06:ce:7a:3f:09:96:ca:
         4d:bb:b7:6a:d5:97:e2:8e:fa:cf:8b:ea:80:48:1b:57:a4:62:
         0a:3a:f6:82:33:c0:1b:b4:68:9e:3b:e8:92:af:12:1a:77:a2:
         7b:ed:16:d8:06:c2:20:26:b7:bf:6b:8c:87:98:40:e4:f3:c6:
         bb:56:f5:e8:a7:f7:d9:42:e9:06:2b:a2:47:09:3a:7c:09:a1:
         1c:a4:2b:40:23:5d:d3:cb:b7:5b:7d:3b:45:48:db:d4:50:a8:
         63:c2:ec:99:cf:38:9b:3f:1f:0f:e2:61:91:b2:34:5b:61:3f:
         c0:74:59:f1:0f:37:2e:d1:0c:d7:b1:d3:48:5d:0f:2f:0b:9f:
         39:87:6c:98:3e:ad:19:c2:22:9d:9a:e6:88:2e:17:e0:98:7f:
         f3:19:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:25:23 2025 by rpki-client