Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
File:                     f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa (raw, json)
Hash identifier:          6zEqZNkcb4InGapBF2PNoY3BN0z0qloJoJWlRZFOxJ4=
Subject key identifier:   3E:2B:6D:88:07:02:23:2B:74:08:F4:FA:6A:20:7E:C6:86:5E:D7:05
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F43285849CBCF9908DE349D17CA45E080
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24
                          142.202.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:99:08:de:34:9d:17:ca:45:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=df4a8603-e9ac-4249-a41b-a85ebff3d086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:a0:11:bb:09:47:c9:3b:91:1f:1b:55:a0:
                    86:2b:c6:2b:1f:11:5e:ec:4e:b7:12:16:81:10:fe:
                    e0:a5:28:5f:2c:98:eb:11:e7:8a:90:7d:ea:96:c1:
                    a6:bc:6d:4b:df:04:31:59:75:fd:44:0e:4c:ed:f4:
                    f0:b9:2f:05:53:8f:68:45:c3:75:35:fd:03:81:f2:
                    dd:16:90:82:81:6e:03:93:9d:50:c9:dc:ef:c6:49:
                    dd:0f:d8:48:dd:cd:f7:32:24:87:dd:92:c2:c1:54:
                    26:ee:02:52:6f:72:55:63:a4:3e:cb:1a:89:75:0b:
                    aa:11:3b:a0:fa:18:b8:21:1d:61:43:9c:38:d5:da:
                    df:72:e1:82:46:36:a3:76:a4:d1:3c:a1:88:88:f1:
                    7a:a2:c3:4f:de:8b:69:c1:50:77:14:50:fe:20:19:
                    6b:fe:2c:a3:c0:fb:3d:e8:28:84:3b:9b:2e:f4:16:
                    48:7c:c6:c6:af:95:ea:a2:0f:77:c2:8d:53:d4:b5:
                    49:c5:f6:d7:16:03:47:da:96:c6:11:4c:c8:a2:a3:
                    5b:8b:c6:fe:9c:6f:34:45:75:d6:d7:92:14:b4:98:
                    60:15:d2:42:ee:b1:4e:dd:26:11:e5:de:f7:a3:17:
                    93:d3:49:c4:01:b7:3d:d6:59:cb:ce:27:36:58:2f:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2B:6D:88:07:02:23:2B:74:08:F4:FA:6A:20:7E:C6:86:5E:D7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:65:74:81:8f:0d:51:fb:95:99:44:2d:ea:c5:90:10:2a:35:
         b1:69:52:1b:a1:85:5c:ed:d3:aa:f5:aa:38:65:f5:bd:e5:e1:
         13:be:59:03:9d:90:fd:7d:0b:d2:35:09:35:2a:fe:d1:13:b8:
         2b:ed:e5:5b:fe:9c:29:c3:73:af:f1:a0:9c:7a:28:0a:92:c0:
         50:89:a0:da:8d:a4:06:54:31:c0:b5:19:be:20:5b:cd:a9:32:
         c3:65:39:de:2d:c7:74:55:05:d1:44:a4:47:da:9c:66:a2:d9:
         6e:14:10:0f:7e:4a:9e:bf:98:e3:e5:3d:81:e0:c6:6a:92:e0:
         d3:14:a1:12:96:95:7b:d3:cd:dd:93:6d:d7:ce:81:25:02:de:
         a3:1f:59:1d:d8:b5:61:6a:27:f8:3a:18:47:96:e7:9d:02:d9:
         66:5f:d6:cc:02:ea:e6:28:a7:be:81:25:eb:e2:c7:e7:ff:d5:
         3c:1c:d0:6c:23:de:cf:c4:05:75:00:e3:2d:2a:3e:53:1a:32:
         7b:53:13:d4:e5:78:76:94:cc:f9:c2:94:f6:92:a9:de:6b:b8:
         56:0b:ae:e2:72:05:48:63:55:08:b8:a5:7c:32:20:59:ca:aa:
         61:56:74:aa:a1:0d:42:9d:b2:d7:c5:31:1e:a1:b3:70:47:2c:
         4e:85:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:19:12 2025 by rpki-client