Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa
File:                     bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa (raw, json)
Hash identifier:          itQhXxn85Wy3zJbbdrJuMNO0+2U7aAWifxDX2LrfFwA=
Subject key identifier:   0C:50:2B:B4:7F:5B:07:64:F8:2A:EE:B0:3B:42:E0:8F:42:30:15:A7
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F43285848A830A8C335DA98ADACD55BC0
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     6233
IP address blocks:        65.49.224.0/22 maxlen: 24
                          65.49.228.0/22 maxlen: 24
                          65.49.232.0/22 maxlen: 24
                          69.171.64.0/20 maxlen: 24
                          104.129.180.0/22 maxlen: 24
                          172.93.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a8:c3:35:da:98:ad:ac:d5:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=a31c4c63-e180-4c56-8150-2c2e1a78fdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:61:57:9b:92:e7:88:98:25:b5:1e:5e:12:
                    77:41:da:fb:2e:55:35:1e:c0:30:5d:94:69:e3:b9:
                    d4:38:7d:91:ed:34:a0:fb:c4:07:d1:52:84:0e:43:
                    b8:cb:96:21:83:89:84:55:e3:89:9a:77:d2:72:63:
                    59:66:9f:a3:87:40:d4:93:97:6b:2f:c4:f9:35:6f:
                    b3:26:f2:b3:46:3d:ef:08:34:ee:c2:17:ff:03:71:
                    78:80:fb:b6:42:37:38:51:58:70:6b:62:b9:d5:7b:
                    b3:6f:1c:d3:de:23:4b:ca:4e:37:59:1d:03:66:60:
                    ca:e4:e6:f6:76:33:e6:0a:ef:f5:ac:48:fb:85:82:
                    10:a5:8d:bd:f7:3f:35:bf:72:b1:d4:f2:a7:15:b9:
                    b3:31:d3:c6:a2:1e:16:70:55:49:d7:31:16:10:4c:
                    ba:eb:cb:33:1a:ea:04:37:d4:38:ab:af:e1:06:a0:
                    7a:ec:ff:f4:4c:9b:86:78:e8:38:2b:c2:26:6f:d6:
                    e2:5a:d6:e3:59:75:bb:ec:ca:8b:7c:c5:ef:3e:b2:
                    a3:73:d7:59:08:51:a0:f7:68:db:1e:ce:e7:fb:9f:
                    29:0d:89:89:46:b5:d4:b9:e0:09:3d:98:23:50:1b:
                    b6:be:22:8c:c7:7f:09:95:4a:dc:2c:6c:e0:f5:24:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:2B:B4:7F:5B:07:64:F8:2A:EE:B0:3B:42:E0:8F:42:30:15:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.224.0-65.49.235.255
                  69.171.64.0/20
                  104.129.180.0/22
                  172.93.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:88:2a:63:26:65:e7:3b:1b:f3:4a:3f:97:72:d9:7e:ea:08:
         66:16:4a:cd:cb:a6:19:6d:97:df:0c:cc:3b:23:a6:5d:ef:ea:
         e0:0c:31:2c:bc:bb:3e:1b:e9:77:d7:17:f6:9a:db:22:b1:6f:
         05:3a:fb:9e:24:af:82:1b:ee:6b:0e:67:ed:24:63:11:5b:c7:
         bd:34:b0:04:27:b9:07:3c:1e:33:a5:5f:9c:d7:88:fa:a0:50:
         56:7c:fc:61:d9:a7:62:1f:6a:0e:d6:7d:d9:51:2d:58:b9:e4:
         22:45:9d:11:94:5f:7f:32:16:66:a1:6c:a9:cb:de:24:0c:e7:
         1e:23:48:59:18:89:20:54:9a:14:84:4b:fa:b7:96:da:80:dc:
         15:ac:a0:ae:6d:38:8d:ff:7e:04:71:d4:f6:4a:10:67:bd:0f:
         f6:83:e9:6d:4a:e5:1a:0f:3f:1d:cb:b1:e2:41:c1:14:a6:a0:
         f6:16:e5:67:e1:33:94:48:c7:da:52:2a:9f:20:d4:86:42:89:
         57:f8:3e:75:bb:1f:b9:08:d2:ff:3a:22:a1:93:84:c7:d9:ca:
         9f:bc:81:23:50:c0:ad:f1:9d:04:90:f9:ce:26:c9:33:9b:c2:
         5f:ae:96:ed:1f:2f:9c:f7:22:94:37:29:1a:1c:b9:02:fa:18:
         94:c0:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:28 2025 by rpki-client