Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
File:                     2bd126b7-2be7-355a-ad57-44a85047e0cf.roa (raw, json)
Hash identifier:          MPqq0azgoisBT3/IfcKST/9CWN+GjloNX7E30j7GHEE=
Subject key identifier:   09:EC:CE:9C:7A:10:FA:5C:8A:6F:0F:DA:83:9C:7B:3C:2A:85:04:A2
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584863CB11A3695AAAE266208F00
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     27553
IP address blocks:        64.27.192.0/19 maxlen: 24
                          64.255.64.0/20 maxlen: 24
                          66.79.192.0/19 maxlen: 24
                          69.54.192.0/19 maxlen: 24
                          209.142.192.0/18 maxlen: 24
                          216.144.200.0/21 maxlen: 24
                          216.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:11:a3:69:5a:aa:e2:66:20:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=df26711b-efa6-4389-a082-dee9519b443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:76:0f:ae:4e:d1:b3:ac:cf:3e:52:be:7c:
                    18:bd:31:e8:ea:4c:68:b6:88:3a:6b:32:8e:b2:ce:
                    52:15:ef:89:22:10:ee:f5:7f:5b:93:a4:2e:94:b9:
                    50:6a:77:6c:26:ba:bb:4a:27:c5:10:64:34:96:6e:
                    d5:29:77:67:99:96:76:ec:8d:51:43:30:85:9c:f5:
                    c7:89:31:05:4d:1f:b6:f4:58:2b:b7:5b:87:ee:f7:
                    72:a4:b4:b6:57:06:54:ab:18:c4:20:87:d1:36:f2:
                    7a:5a:a0:75:cc:78:da:28:73:d2:87:13:76:94:94:
                    6a:e9:00:63:ec:57:32:33:f1:bb:b9:a9:3a:62:3b:
                    cb:91:6a:d9:a7:db:8a:be:df:09:ba:3b:81:ec:79:
                    7d:18:2d:fe:f2:e7:90:bc:2b:20:60:59:51:7e:95:
                    4a:07:d1:42:c8:e1:b0:73:43:93:ca:9c:2a:86:76:
                    04:a9:69:78:16:d7:36:ba:7b:c5:e6:e9:b6:29:4a:
                    b7:ad:c6:10:9d:df:30:08:f8:91:fb:ee:d2:7b:37:
                    9c:bf:b8:d0:ac:9e:03:38:d4:50:e9:15:ba:10:2b:
                    e1:a1:60:5b:43:4c:c3:75:16:52:a5:50:92:31:f6:
                    40:0f:66:d6:7f:5a:cf:5c:ba:c4:a2:22:c4:70:02:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:CE:9C:7A:10:FA:5C:8A:6F:0F:DA:83:9C:7B:3C:2A:85:04:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/2bd126b7-2be7-355a-ad57-44a85047e0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.27.192.0/19
                  64.255.64.0/20
                  66.79.192.0/19
                  69.54.192.0/19
                  209.142.192.0/18
                  216.144.200.0-216.144.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:3c:51:b1:1c:ae:ff:c6:f6:01:a9:7e:72:be:8f:bb:8f:
         a4:e0:76:17:78:a3:0f:81:4d:6d:41:8e:fa:3a:09:a0:94:7a:
         8d:f9:78:6e:84:39:65:d9:bd:97:c5:e0:9f:b2:a3:de:7f:90:
         71:d5:dc:3d:c5:1c:05:68:fc:4a:7c:9e:35:c4:10:f9:ae:6e:
         d6:72:17:61:3b:1a:27:0a:b2:13:b0:37:ee:95:71:32:f1:6a:
         16:21:23:5c:eb:ad:1b:ad:2e:78:ba:99:f5:86:b0:2c:de:f5:
         cc:95:94:fb:d5:98:11:d9:8f:30:0b:43:74:99:a3:c1:3e:32:
         24:9a:6e:f4:f6:92:39:7a:41:53:4f:15:48:88:4f:4c:f1:47:
         48:ad:a2:d8:6d:8f:0f:88:fc:10:af:f0:f5:72:e2:5c:49:db:
         1e:55:ae:78:5e:d0:49:7c:ca:83:12:13:2d:55:41:e4:b1:b3:
         21:7e:9f:e7:c6:12:e6:68:5f:94:5e:89:3b:e8:ec:41:fa:9f:
         13:a6:5a:68:9d:c4:09:20:00:ed:5f:3d:a0:87:6b:65:f1:70:
         49:9d:04:e3:7f:cf:72:da:aa:1d:65:15:b1:88:fe:aa:fa:de:
         94:2c:29:f4:65:e2:25:ac:22:fd:b9:c4:d2:b7:de:62:07:8b:
         44:7f:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:38 2025 by rpki-client