Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
File:                     1ba6c63c-750e-35ff-b1ce-055d22298e22.roa (raw, json)
Hash identifier:          Em9sQ5MtljtRxr+ug9WrpvBIxTmcys7O30Jc9OvOuBk=
Subject key identifier:   CE:E6:38:6B:8A:17:78:53:A4:26:6E:ED:E3:49:A3:45:4F:A0:04:9D
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F432858489340A4F2887316E9751C6280
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     395201
IP address blocks:        134.65.192.0/23 maxlen: 23
                          164.152.160.0/23 maxlen: 23
                          169.155.44.0/23 maxlen: 23
                          169.155.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a4:f2:88:73:16:e9:75:1c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=b5ae902c-0d28-445f-9ef8-967aa2ca3230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:ac:89:32:53:e0:3d:76:6a:e7:b5:1d:59:
                    3f:ee:e6:96:f9:c7:8e:76:dd:7a:a8:d6:c2:44:04:
                    27:2b:c1:53:ac:de:04:ad:bb:d3:be:64:ba:9f:a3:
                    aa:21:d2:0f:93:9e:84:3c:4b:35:b7:48:ec:f5:1a:
                    9a:23:63:df:89:48:cb:8f:f4:f6:05:d7:42:94:6f:
                    d1:c8:25:2e:7a:2f:cb:07:69:6f:5b:76:e8:49:73:
                    7a:bf:aa:a6:72:3e:2d:d7:4c:46:25:ef:0c:ed:3f:
                    15:95:d7:64:87:57:0e:b8:7c:7d:57:ec:40:51:ab:
                    d3:01:93:d4:54:2d:12:a3:c7:ba:df:d7:d9:f5:45:
                    cb:4d:d0:24:53:f9:7b:0e:48:91:f5:9d:40:92:bb:
                    0f:10:5c:b2:60:96:f5:f8:cb:94:af:89:41:ed:3c:
                    74:2e:a2:8d:4d:88:f5:76:5a:5d:d2:5e:21:d4:af:
                    fc:d6:f4:35:b1:ae:63:4f:ee:24:75:29:c2:d1:5a:
                    d0:87:17:4a:60:01:d1:c2:be:ea:a5:c7:7b:e3:69:
                    31:8d:7b:53:9c:11:48:d3:ac:4e:4f:13:0a:ea:60:
                    56:93:41:63:61:4d:9e:40:fe:15:84:16:d1:b0:4c:
                    75:23:d9:68:69:98:25:07:22:18:52:bd:e6:4d:04:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:38:6B:8A:17:78:53:A4:26:6E:ED:E3:49:A3:45:4F:A0:04:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/23
                  164.152.160.0/23
                  169.155.44.0/23
                  169.155.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:07:21:ef:33:33:be:05:0e:b8:45:04:2c:a1:88:a5:df:5b:
         18:54:1f:d0:97:23:cf:41:27:3a:7d:50:4e:de:cb:d3:0a:13:
         54:76:07:24:4e:a3:61:96:b3:ff:2f:24:bc:4c:37:ba:45:46:
         20:90:7e:47:30:f9:b9:85:a6:8d:3e:f5:b9:70:e9:f1:40:c0:
         fc:2b:0b:6f:74:19:1a:fd:f0:e8:c3:b5:2e:b0:0d:83:07:74:
         33:8b:b6:14:96:d9:cf:ab:e9:60:21:be:56:3c:f9:9b:15:77:
         67:b2:1b:bd:5d:db:a5:ed:b4:07:c9:e4:b3:5d:c1:60:bc:28:
         22:65:62:62:90:3e:06:57:47:9c:c2:b7:20:bb:e6:a3:d0:b7:
         bf:be:ce:72:aa:3f:75:0e:33:24:04:0d:80:85:de:e6:38:c1:
         0b:b6:95:41:b6:ee:fe:b5:27:56:3e:92:03:fd:97:55:6d:49:
         87:76:7d:63:58:e2:d5:b1:0c:8c:43:2b:95:08:ab:12:50:e6:
         3d:9d:50:ef:56:47:23:dc:25:38:80:71:68:69:ba:ad:71:ed:
         34:ad:89:48:57:e3:62:82:2b:b1:21:ea:58:c6:9a:3b:bb:a8:
         79:e9:83:e0:9c:fe:65:74:6b:cf:7a:c9:11:37:d3:86:b9:eb:
         44:4b:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:45:05 2025 by rpki-client