Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/4ee084a4-de87-3dda-94f4-0216235fe611.roa
File:                     4ee084a4-de87-3dda-94f4-0216235fe611.roa (raw, json)
Hash identifier:          nFAuluAtUSN6ABIZk+4p/1/JlimfRf12q8hfICYppxQ=
Subject key identifier:   AE:F8:BE:1A:9C:49:32:EB:17:2C:3F:C0:B8:D7:DD:12:AB:8F:7C:F0
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F43285848E16BDB639909A7A5DF5D1940
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/4ee084a4-de87-3dda-94f4-0216235fe611.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     14007
IP address blocks:        192.102.254.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:db:63:99:09:a7:a5:df:5d:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=dc860f77-e179-496a-ad45-a9803bad3c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:66:27:6f:d6:bc:a9:18:f1:b6:5f:71:f3:
                    15:2e:cd:9e:05:3e:4c:b4:3a:b7:77:89:90:a5:ab:
                    6b:2d:80:7d:63:77:71:9e:52:de:08:25:5f:67:f3:
                    87:63:8d:65:bb:d9:f5:7e:7d:05:ec:56:42:74:0c:
                    de:b8:54:45:de:8c:0e:40:09:b6:d0:38:62:cd:89:
                    a6:b6:1c:2d:bf:57:4d:e6:a9:0b:39:56:06:67:ce:
                    9b:a5:80:3d:3e:3f:bb:97:71:98:b0:b7:e8:c8:1f:
                    fd:5b:8d:b9:85:8f:4e:4d:66:af:7d:5f:e0:43:04:
                    ab:01:ea:17:47:eb:db:2c:9a:74:d8:fc:04:20:18:
                    d1:80:6d:81:bf:6a:ef:57:c0:49:27:d6:0e:fd:f3:
                    5f:35:55:a3:11:6a:97:db:e4:c2:2e:8f:38:7b:87:
                    43:34:6d:4b:17:6c:b4:a6:71:8d:48:40:91:26:08:
                    eb:2a:fb:84:a5:df:33:ec:4b:c3:af:c4:0e:d4:f6:
                    f7:02:6c:c7:80:fb:6a:53:ab:d6:9b:84:ab:bb:ad:
                    51:bb:ba:43:a8:16:7d:a2:d6:fa:6f:1d:5d:e1:e1:
                    03:b6:bb:c4:2d:2e:ce:45:22:17:dd:04:53:e5:7c:
                    b3:d7:92:3a:21:cb:3f:4f:ac:03:10:6c:af:1c:e6:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:BE:1A:9C:49:32:EB:17:2C:3F:C0:B8:D7:DD:12:AB:8F:7C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/4ee084a4-de87-3dda-94f4-0216235fe611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.254.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:a1:26:38:8b:86:70:4f:7f:6d:b2:8e:7e:1b:dc:37:83:
         b0:e0:1a:f6:69:13:8c:9e:77:1e:b3:72:5d:d7:0a:e5:33:70:
         f2:ee:1f:8f:17:7b:84:9f:0c:08:f7:d8:f2:6c:a7:c6:fd:e0:
         d5:45:3c:4f:69:31:41:e4:e7:b6:67:56:ae:8c:7c:86:86:f7:
         6a:02:52:29:b2:b4:6c:41:37:4a:e0:94:a9:f2:4f:ca:cf:f2:
         12:56:24:0c:1e:3f:52:a8:bb:2e:ff:66:e2:c1:9a:62:cb:1e:
         26:a5:4d:2d:d8:9c:68:e2:5f:24:46:1c:bd:4e:5d:87:34:86:
         bc:0a:87:e4:45:44:92:41:6a:7a:91:73:85:99:23:29:8c:30:
         f0:5e:c1:f9:7c:d4:a4:21:91:7b:4a:14:25:5d:21:c4:fd:85:
         2f:4c:54:3c:7f:9a:49:82:34:e2:8d:d9:28:0d:47:8b:12:46:
         11:0b:cf:59:e3:5b:76:8b:db:62:6d:f1:76:77:e6:62:9e:dd:
         5d:c1:28:0b:9c:8c:f2:d7:64:6c:a1:67:0c:f8:ef:87:c2:cd:
         e0:4f:d7:f4:34:dd:7d:e8:fa:8e:bb:b2:b5:4b:bb:b3:3a:44:
         0b:c6:50:e4:55:b4:5d:7a:a8:11:69:2d:7d:91:fc:7e:b2:44:
         60:52:be:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:23:05 2025 by rpki-client