Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa
File:                     842ce387-8918-38c2-8a38-4d294a77d361.roa (raw, json)
Hash identifier:          uQ+R4d+Knz4BkclI6czoGeGOTJcldB6FeWhFxNNBHsM=
Subject key identifier:   16:CD:45:20:72:8A:5D:F3:9D:7A:A1:CC:45:E1:9C:31:38:81:CB:FA
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F43285849F715207B92923B265897D896
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     91
IP address blocks:        146.8.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:20:7b:92:92:3b:26:58:97:d8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=0412120d-d1b5-4114-9411-f9b55f1517fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:d8:51:b1:33:92:25:03:5a:53:f5:5a:76:
                    fc:af:9d:fb:bc:4d:d9:0a:13:01:8f:32:69:15:b2:
                    74:90:9d:da:e9:e7:36:c5:ee:bf:b8:a6:6a:ba:20:
                    4d:b6:82:b5:d4:d1:1e:34:a5:e5:21:4f:8b:aa:ec:
                    46:be:b5:c8:1b:48:df:6d:d9:e9:9d:95:21:5c:2f:
                    b5:f8:60:2e:30:44:40:6e:79:d7:0c:b8:31:df:4d:
                    4d:c7:36:9f:f2:7d:46:53:29:f8:5f:65:c0:e2:6b:
                    99:37:57:c9:15:46:f0:b5:88:92:73:45:a9:92:ef:
                    39:79:e4:9b:d3:cc:05:24:d3:55:13:16:07:51:05:
                    94:3e:9f:df:ec:4e:b4:4a:fd:d8:42:a8:96:63:63:
                    07:47:a7:08:2f:d1:8c:f2:0c:a2:e3:98:c3:b9:b8:
                    27:bb:8f:10:46:c7:94:b2:bc:11:eb:27:f1:d7:2d:
                    0b:e3:97:4a:da:d7:ee:30:72:34:9b:5a:c0:a3:9f:
                    67:3e:6a:bd:3e:08:73:42:a8:a1:b6:b6:94:59:96:
                    94:ac:0c:25:d8:52:57:48:6a:8d:a5:53:78:f0:c7:
                    b7:86:4d:fe:25:35:a8:4b:8a:24:4b:9e:8b:68:4f:
                    51:65:ff:e7:8a:fc:c9:cb:c6:fb:a2:77:d8:26:1c:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:45:20:72:8A:5D:F3:9D:7A:A1:CC:45:E1:9C:31:38:81:CB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/842ce387-8918-38c2-8a38-4d294a77d361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:dc:a6:9e:d8:2d:b4:8b:61:c0:6e:00:dc:49:6c:43:00:
         f6:d2:c1:c3:47:ef:a5:9f:03:d0:85:e3:f2:f4:26:79:63:03:
         66:b4:bf:a3:c8:68:70:c8:e5:6a:fc:fc:68:df:1e:87:29:22:
         2d:0b:da:49:d8:28:1f:ea:45:48:3d:7f:8c:77:dd:55:cf:44:
         ce:d4:f5:ef:94:37:f9:74:60:44:b4:fe:23:88:a2:45:11:58:
         73:ed:83:31:90:38:49:fd:a0:b1:e9:2b:ce:7d:66:b4:37:93:
         42:bc:c0:25:76:13:5a:37:90:18:cd:08:e5:2e:fb:32:5e:b2:
         12:b5:1f:bd:b1:dd:76:22:ba:d6:e6:1c:83:09:35:d7:2e:aa:
         2e:e2:e6:b2:6c:09:71:e2:dc:36:8d:99:a2:f5:30:34:51:3a:
         89:51:3c:f8:91:9e:6f:7b:00:3b:a8:04:69:08:8e:16:25:50:
         f4:f1:b1:fd:76:07:3b:91:d3:8e:d4:93:98:d3:43:c8:d1:2e:
         6d:f6:c0:be:25:23:f1:31:85:3a:94:c8:86:17:a6:24:1d:4b:
         59:07:75:e4:a1:86:ef:1d:f0:56:54:53:c5:4e:c0:d3:90:33:
         31:3a:0e:91:1e:a9:db:59:70:b6:6e:9f:cf:60:80:10:63:3a:
         2c:dc:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:57:16 2025 by rpki-client