Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa
File:                     a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa (raw, json)
Hash identifier:          boNzWjNrPRNe3r/BjjzuO+nfuTSK1MOa0X8GMKY2r8g=
Subject key identifier:   51:E3:08:EE:E9:09:F0:5E:E8:7F:CB:98:40:EF:6C:D1:68:F3:BF:63
Certificate issuer:       /CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b
Certificate serial:       010D0C9F432858497279B2E87D804FB96506CE00
Authority key identifier: 24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     396163
IP address blocks:        69.194.4.0/23 maxlen: 24
                          104.225.212.0/23 maxlen: 24
                          162.251.240.0/21 maxlen: 24
                          198.181.60.0/23 maxlen: 24
                          208.84.90.0/24 maxlen: 24
                          208.84.92.0/23 maxlen: 24
                          208.117.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b2:e8:7d:80:4f:b9:65:06:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac515b7-f8d7-42ab-b935-00cc0ff3d35b
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=79b290f1-902b-421f-b088-26b11a59f783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:7a:d7:83:da:d9:88:c9:9e:49:79:36:6e:
                    b2:61:5b:e2:7f:e8:8f:2c:e4:86:d2:e3:4b:9b:03:
                    aa:43:57:52:ff:42:9f:bd:2a:7a:0d:ac:1d:03:78:
                    3c:2a:09:3a:16:3f:b4:78:01:7e:13:60:f4:fb:01:
                    ef:86:97:e7:52:ac:66:32:93:a2:59:7c:69:d7:5f:
                    e3:87:a2:60:13:d6:fd:47:3e:15:09:d5:d3:78:52:
                    67:d9:7c:8e:7e:54:91:6c:3e:ed:12:f8:64:06:6c:
                    61:d8:33:4e:78:42:29:61:76:2c:0d:b0:07:47:d0:
                    ae:87:aa:dc:d7:db:d8:29:30:aa:04:cd:ed:5e:da:
                    eb:9e:e9:85:4f:b8:cc:ca:4c:8d:37:40:82:7f:20:
                    c5:b4:95:65:e3:6f:6a:25:98:06:31:29:2b:5c:63:
                    cc:09:7d:a6:31:8c:4a:61:ca:c1:a7:89:02:81:cf:
                    2c:25:3b:6a:58:48:b4:aa:e0:ad:9d:68:c2:69:5e:
                    7b:29:ae:1d:8a:4c:c8:ef:3f:2c:b2:f4:22:15:f9:
                    e6:ea:ca:15:a9:33:7d:a0:d4:89:f6:0d:88:09:f6:
                    7b:ce:84:a1:87:7a:45:4a:d9:47:57:40:91:34:5a:
                    19:99:63:3f:1d:20:2c:07:48:9b:f4:47:54:2f:13:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:08:EE:E9:09:F0:5E:E8:7F:CB:98:40:EF:6C:D1:68:F3:BF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/a94e2fec-ab32-38b0-9031-8e2c6f1b0dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.crl

            X509v3 Authority Key Identifier:
                keyid:24:23:8B:A4:70:A5:FF:E2:68:6E:8F:BB:5D:41:87:0D:A9:1E:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dac515b7-f8d7-42ab-b935-00cc0ff3d35b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.4.0/23
                  104.225.212.0/23
                  162.251.240.0/21
                  198.181.60.0/23
                  208.84.90.0/24
                  208.84.92.0/23
                  208.117.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:12:05:5e:69:83:ed:e1:ab:a2:7a:d5:92:1e:c2:3d:54:bd:
         bc:57:55:e5:b5:e7:66:60:d5:bd:58:8c:18:cc:53:1d:ec:46:
         40:b7:f2:b2:fe:c5:f7:c3:64:5e:3d:2b:9f:a0:c5:85:b9:b6:
         68:75:57:07:8e:3b:1e:09:c4:94:8a:e6:64:be:50:57:41:bc:
         d4:65:45:8d:2f:56:80:cb:77:44:95:b2:dc:65:dd:e7:d8:0e:
         f6:77:1b:7b:98:9e:31:83:d7:92:6b:c3:22:d0:81:cc:87:f5:
         5a:2e:4b:4e:a2:5f:c9:93:07:34:e3:ed:33:21:47:59:1a:94:
         17:36:36:79:e8:e8:d8:43:f0:ef:92:ca:85:af:d1:6d:53:38:
         9f:8c:03:6c:36:c4:db:b8:ee:00:9d:96:80:5c:84:1b:72:13:
         28:f6:15:54:38:f8:17:38:fb:ba:69:9a:1c:e3:c6:dd:8f:b1:
         da:5b:1d:6f:6c:0a:b2:f8:e5:b8:9f:61:e4:90:0d:ce:08:73:
         72:89:bd:84:65:89:e9:df:97:93:58:72:75:2c:84:ce:d1:8b:
         84:87:b3:51:10:e4:84:ba:4b:30:e7:b8:4c:26:17:dc:0a:c1:
         81:3e:21:f0:c4:92:1c:42:fe:38:8b:2e:21:79:b1:58:85:f3:
         74:c5:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:46:29 2025 by rpki-client