Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa
File:                     0efae3e3-b805-3b9c-b88f-b01ecc529439.roa (raw, json)
Hash identifier:          pyosHipek67itfzhuhVuaQ6p3HRhsucboR6tQE9R2+Y=
Subject key identifier:   EB:3B:27:E4:AD:15:E1:8C:85:97:95:18:93:2F:DE:CD:B2:D9:B6:24
Certificate issuer:       /CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
Certificate serial:       010D0C9F4328584AC01643605D2E74707F422580
Authority key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     12129
IP address blocks:        141.195.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:43:60:5d:2e:74:70:7f:42:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=07f350c7-7a36-4b48-b20a-767b40f796af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:17:a6:aa:65:42:30:59:0d:08:54:16:be:
                    6b:2d:7a:72:e2:cc:69:31:0f:45:70:6f:b5:60:f8:
                    e8:21:af:5c:cd:8c:6e:45:b6:3e:d6:a5:ce:9c:51:
                    ae:ab:07:d5:30:ea:f0:8c:6f:c1:5d:e8:62:1b:bf:
                    f4:8c:43:ab:ab:be:59:8c:72:04:67:7c:47:76:f8:
                    f8:af:dc:cf:27:12:71:bf:ab:fc:8d:45:4f:76:6b:
                    7f:bd:f5:bc:48:9b:b0:fc:cd:0b:d4:ea:29:b2:e5:
                    77:dc:05:57:0c:9e:5c:60:b9:5c:dd:e7:eb:23:da:
                    c3:9e:aa:ab:3c:47:8c:a0:01:d9:35:07:e9:e2:e0:
                    d5:9b:8b:88:80:83:3e:28:38:59:72:3d:40:9e:f0:
                    ba:13:83:4f:ee:bb:9f:11:1a:e1:09:72:c0:3b:d4:
                    bf:21:73:77:c6:d5:b4:0a:98:6c:9a:62:b7:ea:4c:
                    f9:0a:5e:7b:53:a5:29:20:af:81:42:de:26:b7:3d:
                    af:c1:c7:03:a8:1a:ab:05:be:d6:87:47:cc:2d:b6:
                    7f:d9:b7:b8:6d:1e:1c:72:17:2e:37:e0:d2:be:5d:
                    f6:6a:61:78:88:de:fc:33:14:55:93:9e:7a:0a:44:
                    15:b8:99:b7:83:23:05:66:80:42:96:78:2b:8d:49:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:27:E4:AD:15:E1:8C:85:97:95:18:93:2F:DE:CD:B2:D9:B6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/0efae3e3-b805-3b9c-b88f-b01ecc529439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl

            X509v3 Authority Key Identifier:
                keyid:0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:8f:f7:9d:19:cc:df:1c:02:42:89:7a:ae:af:8e:99:b5:
         99:d6:f4:b8:b3:a3:10:6a:4c:c1:e5:94:f0:50:30:d1:df:22:
         cf:79:c6:6f:b8:54:fb:53:af:71:04:9e:19:e4:df:aa:c2:8f:
         b1:d2:4d:e1:46:fb:a6:6f:f6:26:53:dd:9c:87:a5:f7:b4:ea:
         83:f6:67:63:f1:85:de:e8:6e:98:73:e7:e9:36:9c:cb:56:48:
         1b:df:7d:04:dc:20:2e:e3:a8:5d:99:45:c6:21:da:d9:1f:f0:
         ba:58:47:93:0d:87:1b:8a:0c:21:a5:ca:1d:e5:26:42:7b:4c:
         d5:8d:10:a4:9a:f2:8b:8f:1e:c3:30:cf:b3:62:24:89:c7:bc:
         d0:00:71:1a:e4:08:8c:e8:e8:4d:25:83:05:93:5b:34:56:67:
         1b:76:74:cc:78:40:a0:e6:02:6f:59:ab:45:30:d9:d6:e5:8c:
         b4:a9:10:2d:c4:97:ff:26:46:e8:c6:bb:6e:6b:02:25:a9:34:
         56:82:24:15:98:96:03:f6:4c:d4:6b:1a:28:8f:9e:9b:bd:c0:
         c7:b3:b9:bd:03:ba:54:f4:3e:c7:9d:d0:10:40:7a:b2:88:67:
         65:4a:2d:12:4c:a7:57:28:a3:85:e1:21:6e:ee:32:0b:56:86:
         c2:61:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:40 2025 by rpki-client