Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
File:                     43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa (raw, json)
Hash identifier:          siqvmgMrcpz6t4iUHsEbEPicbrj0U/mQ3RiVWL76CS4=
Subject key identifier:   CF:4B:09:F8:D3:8D:05:45:0D:DC:9C:AB:9D:DC:15:5E:1F:0A:AA:0B
Certificate issuer:       /CN=62612914-d3c8-454d-861f-ea1fa94cf858
Certificate serial:       010D0C9F43285849218405210E706F4E924F1000
Authority key identifier: D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     398542
IP address blocks:        23.129.82.0/24 maxlen: 24
                          134.195.108.0/22 maxlen: 24
                          158.51.128.0/22 maxlen: 24
                          207.90.220.0/22 maxlen: 24
                          2605:e140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:05:21:0e:70:6f:4e:92:4f:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62612914-d3c8-454d-861f-ea1fa94cf858
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=92e41199-7955-4727-9223-ad6b0b9df714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:7f:25:41:70:b4:8f:05:5c:b4:8c:c0:71:
                    e4:09:c4:f1:9a:47:e1:0c:90:02:dd:46:00:2c:49:
                    ab:3e:e6:2a:44:78:e9:3a:56:cf:8e:a3:74:f9:9e:
                    0a:45:f9:99:55:fb:9c:75:f8:fd:3a:63:64:1f:c7:
                    f8:a1:18:28:06:5f:5f:d3:10:50:fa:83:10:e5:25:
                    6a:8c:60:f1:55:de:82:ec:17:5e:f6:65:b6:c7:2d:
                    e9:62:4b:96:c6:b8:87:b7:23:02:ac:08:1a:a6:2c:
                    5c:e6:91:0b:04:0f:c6:cb:30:7e:f9:e1:b9:d1:08:
                    60:ed:56:da:06:ab:b4:6d:71:e2:74:99:48:0d:ac:
                    59:29:f9:00:19:16:18:81:dc:73:6e:45:30:c5:10:
                    d7:ad:25:ab:90:eb:be:85:72:51:88:33:3d:e3:fd:
                    01:85:c6:b1:1c:23:50:e5:fd:4d:c6:de:25:fc:03:
                    d1:d2:b0:d5:41:ae:33:a9:50:c0:7c:f4:7d:f4:69:
                    72:9b:44:27:3d:25:4a:00:a6:fc:b1:b4:d3:bd:72:
                    99:58:d7:20:0f:7a:23:78:54:fa:84:dd:c1:d7:39:
                    bc:9e:9d:dc:2a:71:cc:43:5f:aa:61:64:bd:96:31:
                    99:c1:ec:a0:4c:4d:96:9c:46:bd:cd:e6:aa:7f:dd:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:09:F8:D3:8D:05:45:0D:DC:9C:AB:9D:DC:15:5E:1F:0A:AA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.82.0/24
                  134.195.108.0/22
                  158.51.128.0/22
                  207.90.220.0/22
                IPv6:
                  2605:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:9b:aa:10:a3:27:56:f3:96:fd:19:3b:8d:5b:8c:7e:64:
         91:db:54:28:6e:f7:a1:b3:78:d4:55:fe:64:df:fe:4c:b4:af:
         aa:cb:1a:22:cf:a1:ff:ac:dd:fa:4b:5c:54:fc:52:76:65:f8:
         ed:f7:3c:5c:a8:15:52:38:6b:e2:2a:07:04:c9:3d:b1:9d:eb:
         90:17:b1:d0:65:12:68:d8:3f:d4:46:b6:d9:eb:5e:a6:a9:71:
         15:c5:8c:7a:04:3a:d6:7b:fa:2b:13:cf:a9:af:c6:64:59:ad:
         d5:21:9e:86:26:22:08:6e:71:10:29:99:90:34:cb:f8:83:4c:
         76:85:8c:0f:26:6d:d5:54:4e:c0:bb:25:bb:31:e5:61:87:d0:
         14:40:b6:63:9e:38:02:76:a3:15:b2:40:76:70:28:46:eb:30:
         42:fa:26:82:62:67:7f:49:ce:15:17:a1:49:de:c1:aa:e1:d9:
         15:f3:14:85:b4:a7:a9:73:b4:02:13:e6:a5:c0:c5:00:b7:65:
         bb:d6:8b:d6:2d:56:b9:54:79:a2:50:0e:6a:f4:dd:79:10:96:
         75:8b:62:b2:7e:e1:2f:7f:cd:20:9d:be:ca:35:be:75:57:e3:
         66:a3:63:4f:8e:ad:54:61:b8:b9:d7:41:a4:c0:0d:9b:96:05:
         af:ed:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:37 2025 by rpki-client