Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa
File:                     32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa (raw, json)
Hash identifier:          FYHnWYwdIWC+Cy/BcnKIgc6SG2ViNB/3BNT2iNgA2TY=
Subject key identifier:   DB:F4:A7:18:5C:A1:15:DD:C2:F5:39:6D:E5:02:EB:BA:A3:75:75:B6
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285848E16BE75C129219C9BA85C2C8
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     13916
IP address blocks:        67.231.144.0/20 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          208.84.64.0/22 maxlen: 24
                          208.86.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e7:5c:12:92:19:c9:ba:85:c2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=54decebc-49e7-4588-8b3e-bcc89ddccd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:9f:a2:bf:d9:70:f1:8e:06:72:42:7b:ee:
                    56:7d:9e:d7:c3:35:e1:3e:02:8a:d5:66:84:61:27:
                    bc:4f:6e:7c:b0:41:93:89:ca:cc:b7:8c:28:e8:b6:
                    59:e7:61:14:eb:27:c9:f5:e0:86:fa:70:a7:7e:d9:
                    07:c1:b0:0c:7d:34:dd:76:d1:a2:47:e0:0a:89:5d:
                    c2:3e:f1:ce:72:55:3c:0a:e7:61:81:fa:b3:d0:0d:
                    dd:a5:84:dc:12:c9:93:b4:4c:8f:be:9c:cc:ef:08:
                    03:a7:a6:dd:60:0f:cb:4a:99:00:1c:14:ed:3c:8e:
                    2a:46:f5:5e:c4:36:0d:79:51:e0:2d:36:10:5d:73:
                    b3:5d:71:3e:09:e8:5f:de:df:d7:a0:b3:bf:f5:17:
                    06:22:d4:7e:7a:82:92:27:ed:28:ff:56:0a:ab:4c:
                    15:a9:30:4a:9d:93:b8:55:1c:bc:da:0f:0b:46:5e:
                    c4:0e:18:20:df:ca:10:0f:b2:4e:61:26:ac:6c:8c:
                    f4:d9:6d:fa:06:c9:c4:e2:69:81:c7:6d:ca:fb:46:
                    5f:c4:be:66:50:96:2e:95:ab:eb:a5:b6:f6:8f:ad:
                    6c:10:72:2c:6a:e5:ce:e7:63:ae:b1:89:aa:19:b8:
                    9a:c5:fe:93:31:05:d4:09:16:9d:99:2d:6d:3f:98:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:A7:18:5C:A1:15:DD:C2:F5:39:6D:E5:02:EB:BA:A3:75:75:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:87:40:b7:30:81:ca:12:02:c6:8c:4c:71:04:8a:4e:5d:c4:
         dd:a6:06:c9:36:f0:37:02:3e:03:5e:3f:00:7c:4e:82:ea:d7:
         54:d3:6d:75:33:00:d9:e4:c6:d0:ec:97:5c:1c:07:7f:cb:82:
         29:1b:23:c9:e6:ff:06:09:40:e7:01:fe:8c:ef:29:86:e0:4b:
         f3:bf:72:76:99:59:c1:10:83:7e:d8:6a:96:8d:07:5c:6f:53:
         b1:de:89:25:06:87:9e:f6:e4:21:17:cf:47:e9:8a:bd:17:6f:
         dd:7d:a4:a9:16:7f:98:15:b3:ae:33:f9:d9:c8:ad:cf:ed:5f:
         64:1e:f8:53:b3:3c:77:84:5d:8d:da:80:4b:14:c4:53:1c:65:
         3a:c2:d7:4c:af:6c:98:bd:30:c8:1b:5b:54:4c:4e:81:09:c8:
         6f:29:7f:c0:dd:e9:65:9e:81:46:30:fc:0f:30:19:59:c7:38:
         00:bd:73:2d:b8:c9:8f:7c:28:29:60:ef:f8:d5:ad:d6:63:3a:
         c5:fd:8e:46:a3:1c:81:cd:07:5e:e4:c0:9d:bd:cb:c3:c1:a8:
         72:a0:5f:ed:36:43:57:f2:82:62:bd:92:cb:7c:99:54:d6:e2:
         5a:00:fb:2a:6a:9f:a6:fb:1c:5e:23:90:c6:bd:ab:99:eb:78:
         eb:b2:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:33 2025 by rpki-client