Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
File:                     1ed11bba-2055-382e-ae61-183dfc3956d0.roa (raw, json)
Hash identifier:          qdGQ+y5CQMGOWPGgGQlEGRITwHFyRunS4DSULzIILeI=
Subject key identifier:   27:24:90:55:F1:AA:CF:D0:4C:9E:15:F9:84:50:F5:01:7D:D8:AB:BD
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F4328584950F963DB4AA07BF252A75200
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     35860
IP address blocks:        63.133.208.0/22 maxlen: 22
                          74.119.52.0/22 maxlen: 22
                          192.149.254.0/23 maxlen: 23
                          192.149.254.0/24 maxlen: 24
                          192.149.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:63:db:4a:a0:7b:f2:52:a7:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=85fd3705-3729-4512-9042-00f1f360c438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:b1:59:28:02:a1:0f:bf:e2:52:35:e6:b5:
                    6a:9d:a4:4f:f1:78:ca:81:ac:28:b6:8e:8e:0e:c9:
                    6c:fb:d4:c7:89:32:fa:a3:a3:29:12:a8:d7:5f:ea:
                    98:50:d6:45:ae:79:51:86:90:85:f3:6a:15:7b:a3:
                    a5:ed:f5:aa:8f:6a:a8:3c:11:10:d3:60:cb:f5:6d:
                    20:dc:93:73:0f:ac:b1:ed:d2:f3:77:e7:50:5b:66:
                    e1:0e:c0:81:ad:46:13:6b:39:fa:9e:1a:0e:23:33:
                    79:81:01:9f:7e:71:58:3e:96:bf:14:a0:38:4a:74:
                    84:ff:c6:71:94:db:35:d7:42:ce:b5:53:52:b8:96:
                    24:61:97:fa:74:3b:46:c7:8b:d2:a8:ba:2f:8b:83:
                    fd:e8:52:8c:7e:8f:af:8f:1d:c5:1b:6c:69:11:66:
                    e0:7c:5d:c6:da:85:a2:3d:64:5c:cb:4e:2e:19:60:
                    62:4b:b9:8a:cb:01:eb:2d:ab:39:36:65:df:c7:00:
                    2f:88:63:57:0d:d2:6a:ff:00:36:bd:0b:26:9c:f3:
                    b8:09:e1:a5:73:58:9c:22:d2:37:22:04:f3:63:6a:
                    3a:84:3c:70:c2:ed:b1:f7:68:61:ed:8f:ee:09:28:
                    01:06:ba:fa:77:d1:89:0a:68:29:70:20:4a:ce:82:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:24:90:55:F1:AA:CF:D0:4C:9E:15:F9:84:50:F5:01:7D:D8:AB:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/22
                  74.119.52.0/22
                  192.149.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:29:c2:4a:63:86:f5:15:94:91:d9:0b:66:ad:05:c8:62:
         da:5d:16:78:f9:c9:9e:3e:23:05:2e:d9:4d:0c:ce:95:1d:0c:
         6a:12:cc:b5:9a:32:82:ee:9c:83:b7:ad:a8:2d:ad:ef:fa:17:
         12:ba:58:45:f3:42:d5:53:ee:6f:19:d6:97:ed:da:52:a7:d5:
         8d:92:6e:7a:e4:be:cd:64:95:9e:01:c5:ed:c1:3d:63:d6:f7:
         a4:47:19:64:d6:9e:87:07:67:bd:48:e1:59:f7:61:d9:2a:8f:
         8e:f3:d3:eb:65:71:ac:92:a2:73:31:39:7c:51:27:d9:70:81:
         4b:ca:b0:e6:a0:8e:22:98:29:4b:ae:fa:a4:bd:70:86:7a:7a:
         c5:25:ab:33:98:70:fa:29:1c:92:57:b7:06:e5:4f:db:ff:e9:
         a5:bb:03:d6:46:3a:8d:b0:b1:51:c7:90:a0:a3:d7:f8:bf:15:
         c5:70:5e:44:7d:93:f8:a4:ae:0d:d5:f4:d2:01:08:59:5e:e3:
         88:fc:8b:94:1d:45:a7:24:7a:56:bf:8a:b9:c3:5d:6d:cc:56:
         a1:24:62:c8:93:3f:76:c8:35:5c:38:ce:9a:b9:9d:5b:69:45:
         b2:3e:cc:53:03:5b:b0:a4:3b:2b:ba:11:42:52:da:42:71:35:
         db:3f:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:22:12 2025 by rpki-client