Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File:                     8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier:          /iUkTS0Eq6+5wsjhCkGMNrRkPBh4AR75qhh6Owb1M7Y=
Subject key identifier:   A8:EE:12:4C:B8:45:80:4B:C7:E9:86:36:5F:CC:30:00:9B:D8:6F:8A
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285848E16BD5E334D8D71739743F20
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     17012
IP address blocks:        64.4.240.0/21 maxlen: 24
                          64.4.248.0/22 maxlen: 24
                          66.211.168.0/22 maxlen: 24
                          173.0.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d5:e3:34:d8:d7:17:39:74:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=9fb02acc-fba5-4cc1-9a99-de2f7a06c987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:3d:4c:d6:c4:ea:43:dd:9b:e6:5e:43:7f:
                    99:27:a9:09:ef:20:4d:d2:da:e4:20:cb:0b:a0:5c:
                    47:0a:c0:0b:5b:9f:19:d4:33:31:08:7b:f3:27:06:
                    a2:c1:a0:76:32:4e:47:16:66:60:9b:60:7c:de:51:
                    b6:a4:42:fc:b0:43:f9:5f:8b:c4:55:f7:31:b5:61:
                    7d:7d:40:d3:87:e0:f0:84:4e:6d:db:40:03:64:05:
                    d3:86:91:77:28:2d:a1:b6:2c:20:5c:29:d7:3d:68:
                    95:c4:6b:3f:cc:ca:22:77:78:11:b8:9b:fe:d3:7b:
                    fe:9d:df:6d:84:32:26:9b:fb:9b:d0:8a:26:f8:0a:
                    58:d3:f5:98:e4:53:85:03:17:99:4e:ec:73:f2:b3:
                    9f:24:3c:b5:22:c6:58:20:30:0f:8f:a4:4c:63:fa:
                    36:c6:46:df:93:34:53:12:cb:93:6a:74:2a:17:ed:
                    d3:ba:e7:52:39:d0:32:ba:93:64:2d:52:9e:e7:52:
                    ee:11:bf:c3:ea:71:dd:35:bb:b0:76:ab:ac:20:a7:
                    2b:fc:27:23:9d:c2:6f:2c:0a:61:a8:d6:63:de:77:
                    c3:bf:00:7a:52:f5:f5:b2:97:0b:55:61:9a:80:a7:
                    28:e3:af:7d:73:60:87:93:06:a7:6e:dd:5b:4f:40:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EE:12:4C:B8:45:80:4B:C7:E9:86:36:5F:CC:30:00:9B:D8:6F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.240.0-64.4.251.255
                  66.211.168.0/22
                  173.0.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:c4:e2:08:76:b2:e5:52:5d:ee:66:3d:b0:93:fa:f9:00:
         d5:a6:b8:ca:cf:55:ba:27:9a:0e:78:fd:f7:26:7b:f3:4c:31:
         ba:d0:bc:02:d3:be:d0:85:63:c5:95:00:1d:39:a4:c6:2c:50:
         2e:97:0f:2a:1d:ce:a3:c5:46:36:7c:ba:c7:b3:c0:0e:15:26:
         da:a2:ef:b5:85:30:12:7a:fa:1d:fb:a5:bc:86:f4:56:f6:ed:
         3f:fe:d4:f8:5a:34:d9:07:08:4f:85:e0:0c:d9:95:39:4e:f3:
         66:5d:cc:fa:44:1e:96:25:a2:d4:9c:a6:e0:94:88:2f:ac:33:
         c9:63:4f:d1:9d:e3:9d:84:cb:da:a9:58:7c:79:4d:9c:83:5e:
         45:86:93:82:7a:bd:52:67:34:6e:21:81:8e:22:c9:f7:df:7e:
         a3:61:cd:7a:83:3f:c1:05:90:ed:cf:ac:9e:10:53:41:1b:52:
         e7:a4:b1:b5:e6:51:5a:d1:ec:40:9c:21:f2:8b:ff:34:33:79:
         65:df:01:10:f1:d0:cb:aa:8e:15:62:fc:46:59:f2:d8:34:3d:
         f4:96:b7:0e:a1:61:28:15:72:1f:5a:b5:b3:f1:ca:70:64:55:
         76:90:c0:c6:ed:4d:80:b6:70:c8:d5:21:77:82:f1:90:ef:0d:
         a9:87:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:00 2025 by rpki-client