Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa
File:                     ec06da48-9eba-3a74-8791-86a6bee04398.roa (raw, json)
Hash identifier:          unNUYN3Gfh0BhG6kG7ic4WO6hiZDf/2bV6NRCgIOoVg=
Subject key identifier:   A8:85:24:AA:02:6F:91:72:82:F5:CD:56:A6:55:22:64:29:E6:A4:60
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F432858498769BB0E57D3D88C41C81E00
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     53334
IP address blocks:        104.153.198.220/32 maxlen: 32
                          104.153.198.221/32 maxlen: 32
                          104.153.198.222/32 maxlen: 32
                          104.153.198.223/32 maxlen: 32
                          104.153.198.224/32 maxlen: 32
                          104.153.198.225/32 maxlen: 32
                          104.153.198.226/32 maxlen: 32
                          104.153.198.227/32 maxlen: 32
                          104.153.198.228/32 maxlen: 32
                          104.153.198.229/32 maxlen: 32
                          104.153.198.230/32 maxlen: 32
                          104.153.198.231/32 maxlen: 32
                          104.153.198.232/32 maxlen: 32
                          104.153.198.233/32 maxlen: 32
                          104.153.198.234/32 maxlen: 32
                          104.153.198.235/32 maxlen: 32
                          104.153.198.236/32 maxlen: 32
                          104.153.198.237/32 maxlen: 32
                          104.153.198.238/32 maxlen: 32
                          104.153.198.239/32 maxlen: 32
                          104.153.198.240/32 maxlen: 32
                          104.153.198.241/32 maxlen: 32
                          104.153.198.242/32 maxlen: 32
                          104.153.198.243/32 maxlen: 32
                          104.153.198.244/32 maxlen: 32
                          104.153.198.245/32 maxlen: 32
                          104.153.198.246/32 maxlen: 32
                          104.153.198.247/32 maxlen: 32
                          104.153.198.248/32 maxlen: 32
                          104.153.198.249/32 maxlen: 32
                          104.153.198.250/32 maxlen: 32
                          104.153.198.251/32 maxlen: 32
                          104.153.198.252/32 maxlen: 32
                          104.153.198.253/32 maxlen: 32
                          104.153.198.254/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:bb:0e:57:d3:d8:8c:41:c8:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=15b57039-c53b-4488-ab77-0b1271e1a7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:7f:a6:a5:0e:f9:7a:5e:e9:6b:86:72:41:
                    98:59:71:b7:25:c8:d3:ae:4d:8a:0d:49:22:d4:ea:
                    a6:24:6b:88:cf:2d:34:31:00:98:ae:00:8a:0b:98:
                    48:af:a5:d4:32:89:4c:4e:a3:57:d9:3b:81:02:13:
                    3e:b6:c5:3d:fd:4e:b6:66:02:95:e1:06:86:eb:8b:
                    c3:9f:f1:b5:e9:00:56:45:0d:2d:e6:4f:82:de:24:
                    d1:7a:20:63:3e:7b:b7:a3:57:30:d8:4e:55:7f:0b:
                    57:28:05:2a:a3:39:a8:0e:2d:98:52:0b:c6:53:3f:
                    65:1a:8c:4b:09:c7:8e:4f:1e:fa:b8:3f:63:14:58:
                    20:6d:2c:bc:20:f9:fe:79:86:dc:f6:b8:53:ed:ed:
                    00:ce:e7:33:be:0a:e3:2b:58:1c:ee:a2:4b:87:e8:
                    e3:78:53:4f:30:1e:f4:dc:18:15:34:88:0a:0c:bc:
                    c8:c9:71:3f:6a:bb:21:42:f2:e7:54:a7:f8:29:8f:
                    7f:55:cf:c7:7d:35:32:d2:69:3c:e3:c1:ef:fa:d2:
                    50:26:27:c2:72:15:a3:dc:a0:c0:99:27:13:d8:a7:
                    aa:6a:00:35:96:ad:a8:c2:25:8c:7f:bb:7d:56:71:
                    1f:5b:19:d7:34:a5:96:b3:23:71:d6:ce:0c:48:28:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:24:AA:02:6F:91:72:82:F5:CD:56:A6:55:22:64:29:E6:A4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/ec06da48-9eba-3a74-8791-86a6bee04398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.198.220-104.153.198.254

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:ea:0e:76:83:5e:bd:6e:dd:5a:56:ae:74:50:a1:7f:30:13:
         79:6c:ff:44:bf:82:3d:3b:ac:81:a1:b9:5c:2b:a1:85:6e:6c:
         a3:45:63:50:86:8a:40:99:b1:d4:1a:7f:c6:59:ae:26:4d:cb:
         ad:72:58:da:0d:51:42:36:9a:1a:24:6a:63:2d:2f:73:8f:3b:
         81:8d:ee:d8:8d:50:1d:15:4f:5f:e2:22:bc:35:e9:0e:f1:26:
         9b:5b:40:a5:8b:af:56:be:69:37:4b:73:41:a4:3e:08:cd:c8:
         4d:b5:fa:80:7c:58:c7:59:53:8a:b7:00:ab:03:10:72:9e:bd:
         9b:fb:ac:cf:17:a6:aa:58:2e:5a:8b:7c:e7:e7:bb:13:b8:7c:
         98:0f:da:83:f2:72:96:dc:50:11:e3:f9:55:5a:8f:99:9b:2a:
         9f:6d:82:ac:a2:8f:e5:91:41:21:23:7d:98:74:99:ce:d7:94:
         4e:07:43:fe:0d:78:27:be:8b:05:4d:ca:de:ce:e8:11:f7:fc:
         78:7a:93:ec:af:81:e5:ec:e9:eb:27:64:89:49:35:d2:7e:19:
         f0:fa:f4:05:e2:54:68:84:dc:62:33:cb:4c:2b:fd:d2:09:f5:
         3a:a7:49:c3:bc:42:65:f8:22:88:ab:c2:67:7b:aa:23:6f:33:
         87:0f:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:04:47 2025 by rpki-client