Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa
File:                     433a87db-3abb-3463-985c-6b6a6686327f.roa (raw, json)
Hash identifier:          NLC5Ofv25VgukvO6z0bJ+xnTeUatRuHa87ol3CUKlio=
Subject key identifier:   DA:F7:BB:D3:4D:B3:0E:68:17:E3:5E:E6:DC:61:43:3A:3D:59:97:6C
Certificate issuer:       /CN=0d6bb559-168b-45eb-91f1-f7988760221d
Certificate serial:       010D0C9F432858482EC0023AC143CFE31EAC3160
Authority key identifier: 76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     46437
IP address blocks:        74.118.112.0/21 maxlen: 24
                          162.210.16.0/22 maxlen: 24
                          162.252.224.0/22 maxlen: 24
                          172.96.152.0/21 maxlen: 24
                          192.96.44.0/24 maxlen: 24
                          198.135.182.0/23 maxlen: 24
                          199.85.63.0/24 maxlen: 24
                          208.80.140.0/22 maxlen: 24
                          208.91.88.0/23 maxlen: 24
                          208.91.92.0/22 maxlen: 24
                          208.95.136.0/21 maxlen: 24
                          216.120.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:02:3a:c1:43:cf:e3:1e:ac:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb559-168b-45eb-91f1-f7988760221d
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=514dd724-92a3-4ebb-8f08-e86be8626d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:f0:bc:61:90:1e:6e:c9:31:a3:b5:cd:4d:
                    b8:83:c8:48:b2:4f:9d:48:fb:80:e5:6c:a7:d9:ad:
                    46:bc:14:3f:f5:38:89:25:ad:fe:76:cf:71:d1:e2:
                    6d:5d:14:56:4e:04:a0:1a:61:dd:e6:0e:8b:e2:40:
                    c7:01:07:88:83:f0:4e:65:e4:ee:2e:2b:b6:ba:c4:
                    c8:7b:0f:8a:86:bb:d0:22:c5:e0:df:fd:74:bd:76:
                    e7:d5:71:e0:a2:0a:2b:d6:f3:89:1e:d1:36:3e:25:
                    f3:e1:3b:55:fc:07:b6:93:57:3c:ec:ca:94:f4:ed:
                    a4:ad:df:7e:e2:0c:9e:7b:c7:3d:20:6f:11:12:94:
                    b8:9e:0a:76:58:9b:f9:a8:35:cc:56:45:e1:d5:12:
                    d2:57:37:31:bf:c2:87:76:10:79:96:0c:72:6d:a9:
                    8f:a9:5a:96:2c:dc:da:08:59:40:79:c9:1b:52:da:
                    a7:93:e1:66:48:6f:39:32:83:87:70:19:61:43:88:
                    05:b2:a5:11:99:53:95:8d:8b:94:63:32:be:af:f8:
                    a1:f5:ea:35:31:f5:dd:27:2f:b9:67:b1:63:fc:7a:
                    95:fa:12:22:cc:9a:6f:4f:44:18:23:83:82:5b:81:
                    76:67:7d:54:a4:cd:d3:23:3e:fc:6e:20:5d:5c:a3:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:BB:D3:4D:B3:0E:68:17:E3:5E:E6:DC:61:43:3A:3D:59:97:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/433a87db-3abb-3463-985c-6b6a6686327f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl

            X509v3 Authority Key Identifier:
                keyid:76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.112.0/21
                  162.210.16.0/22
                  162.252.224.0/22
                  172.96.152.0/21
                  192.96.44.0/24
                  198.135.182.0/23
                  199.85.63.0/24
                  208.80.140.0/22
                  208.91.88.0/23
                  208.91.92.0/22
                  208.95.136.0/21
                  216.120.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:59:e0:34:1f:bf:0d:46:75:ab:77:a8:85:78:58:4e:8c:
         62:36:35:68:0a:b2:52:ce:0a:0e:7d:6a:d6:5f:18:38:fe:83:
         38:e7:ef:db:0f:d2:f0:00:08:7f:e8:a1:5f:42:9f:73:24:31:
         83:00:75:43:dd:f0:19:5a:3c:20:a6:74:10:1a:87:83:2b:b3:
         91:47:e3:8b:19:09:4d:f1:ef:eb:67:3b:02:fd:57:c6:e2:ec:
         fb:7a:2e:7f:35:fd:f5:1d:25:88:a2:de:5f:ac:49:f3:67:2e:
         d5:7d:ec:67:9a:4a:c2:b4:9a:46:a9:31:2b:d5:ca:37:ab:51:
         57:7e:3c:55:41:96:79:06:af:b3:54:b2:0f:90:f9:e3:dc:31:
         82:65:7d:b1:82:89:b1:87:cf:48:ca:39:38:8d:25:c6:aa:f3:
         76:fc:b0:ef:c7:78:29:54:4f:7e:2c:3f:ae:47:b9:c8:01:bf:
         46:be:42:99:fb:bc:d1:6a:f6:9e:9d:b7:fb:6f:24:74:59:89:
         a9:27:33:63:f8:45:c0:15:9f:5b:d0:96:77:eb:b7:57:87:66:
         a3:1f:a5:8f:9e:77:ea:28:ae:83:dd:3c:de:40:ad:77:ac:31:
         3c:73:1e:8f:55:6a:a8:03:60:45:b0:e6:4f:84:40:75:08:9c:
         cd:18:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:11 2025 by rpki-client