Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
File:                     f0853596-0315-33ac-b801-86570db6ad6d.roa (raw, json)
Hash identifier:          /8OB7PjRIy6qbVhqlfwhvQrItOAABNGaKh6kLfGX1QU=
Subject key identifier:   E0:2E:48:6D:CF:36:42:17:7E:75:35:D4:69:57:D1:20:58:5E:C0:E4
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F432858497279B1DD4370C1D115856300
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     395201
IP address blocks:        134.65.194.0/23 maxlen: 23
                          164.152.162.0/23 maxlen: 23
                          169.155.46.0/23 maxlen: 23
                          169.155.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b1:dd:43:70:c1:d1:15:85:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=d2dde169-9853-456e-a3bc-cb27b7251862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:ea:18:3d:33:f4:5e:51:d0:e0:18:a7:49:
                    6b:2b:44:e4:8a:66:b0:98:c6:4c:ce:e0:4f:8e:e5:
                    18:7f:f2:37:72:91:a2:22:a7:b3:4d:05:1a:95:ff:
                    64:ef:5d:69:ab:24:ad:94:43:79:ce:64:85:9a:10:
                    71:27:22:fe:99:27:db:e9:0f:ec:26:36:6a:74:21:
                    4c:26:47:91:e0:59:87:89:4c:dd:0f:cb:a3:fc:59:
                    8f:1e:c6:4d:f8:5a:58:f1:39:73:e1:74:6c:52:03:
                    d1:56:d5:2e:bb:38:ad:b3:e0:ef:8e:68:c5:f0:3f:
                    d3:69:d2:4a:97:83:7a:98:9e:55:0a:6b:f4:ef:bf:
                    00:e5:13:43:dc:13:f8:66:0d:d8:68:fc:05:38:38:
                    2a:51:61:d9:4e:8a:73:c6:50:cc:79:80:2b:bf:1a:
                    a5:87:dd:ab:51:36:5c:42:19:7c:dc:ab:19:da:d2:
                    6f:96:35:80:9d:7d:07:23:1c:82:a9:a5:3b:63:2e:
                    ab:4d:c4:6e:4f:5a:09:56:34:08:40:4f:c2:42:d7:
                    c0:9d:43:fe:25:bd:aa:08:d4:11:87:5d:eb:9f:0a:
                    8a:b0:14:d7:84:b6:d7:5d:d8:12:0a:dd:c9:42:c5:
                    ca:04:62:d1:c8:75:01:4b:4c:d4:9e:d1:a0:a1:21:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:48:6D:CF:36:42:17:7E:75:35:D4:69:57:D1:20:58:5E:C0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.194.0/23
                  164.152.162.0/23
                  169.155.46.0/23
                  169.155.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:00:41:ca:73:f3:62:8c:bd:be:4e:e9:20:99:6e:ab:d4:
         8c:2b:05:51:d2:06:bd:76:75:22:ee:05:61:a0:29:cb:42:44:
         6b:9b:cd:22:34:cb:ef:54:62:e6:0a:bb:0f:8c:3d:3f:48:bf:
         b1:90:2e:b1:f5:9f:c8:5e:f6:75:07:a7:d3:4d:1c:92:0e:7a:
         f6:1c:f9:95:b2:7e:1e:91:3e:d0:c9:21:a8:b8:9e:58:ff:d4:
         46:8d:2a:af:c3:d7:64:18:a1:c0:cd:42:79:9c:26:57:a5:cc:
         4f:fb:e0:eb:5a:29:7c:d3:7d:47:6d:93:5d:d0:07:7d:1e:68:
         e5:26:e7:5a:d4:3e:56:fc:0d:8b:80:e4:bd:bb:0e:f1:b8:d0:
         bf:d7:ca:19:a9:ee:8b:8d:63:9f:bb:5e:87:83:ce:08:26:99:
         48:75:20:54:8f:1c:47:f7:1d:b7:cc:c2:f4:e7:8f:14:c5:ec:
         1d:da:ab:bc:c1:3d:de:b1:bd:ef:6c:2f:98:fd:36:57:b1:52:
         15:d3:aa:62:80:bd:4c:7f:21:4c:ed:80:cc:c5:98:f1:ed:44:
         6b:13:0f:2a:c4:48:6a:5c:03:2a:38:9b:7a:7d:b0:68:f9:2f:
         cd:df:92:19:54:5e:1e:ad:22:5d:cd:27:2e:92:20:c6:2e:a8:
         92:9c:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:17 2025 by rpki-client