Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa
File:                     2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa (raw, json)
Hash identifier:          RpgeET6wyzzuXICsnPC5qbDaFxM1hjvsoYPUFCGDak0=
Subject key identifier:   18:25:B0:11:0F:08:DF:56:7C:87:66:17:AB:CC:3F:8B:EA:2C:D7:40
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849218401A06B828EC0EDBE2600
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     21928
IP address blocks:        168.73.0.0/16 maxlen: 24
                          170.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:01:a0:6b:82:8e:c0:ed:be:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=669100db-2663-42d1-b875-baafd4add293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:94:49:60:8b:ad:c0:9a:3e:1e:34:af:50:
                    27:26:3f:b3:e8:8f:7f:f4:31:58:5c:3b:96:fb:2a:
                    d0:b3:23:14:1e:8c:20:d3:2e:95:df:a4:b8:8b:5f:
                    79:fb:e0:e8:b5:e6:58:1c:00:4e:af:f3:0a:b5:2f:
                    37:e0:c5:e0:9c:e3:c7:f0:85:bb:c6:84:b9:c4:73:
                    78:73:15:89:65:5c:35:dc:1b:2e:f3:0a:03:c0:63:
                    c8:cc:61:60:ae:c6:93:5e:81:67:9a:7b:65:7a:48:
                    0c:7e:fb:d1:3a:aa:31:0e:bd:49:86:b7:57:a7:52:
                    22:82:95:0b:52:68:d2:e2:b5:52:1c:d5:5a:fc:25:
                    17:55:00:75:1c:d1:d1:dd:94:ed:40:c4:d4:43:87:
                    ec:b7:4a:c6:73:e5:03:34:e3:a0:bc:63:1a:b7:e4:
                    3d:7d:dc:1f:90:0d:a6:17:9f:84:64:96:55:dd:22:
                    09:0a:e5:e5:35:16:7b:9f:7e:94:68:84:06:cd:31:
                    20:77:10:1c:76:c0:8e:91:92:62:9f:7b:0f:b5:57:
                    2e:be:b3:6c:c5:41:ef:eb:bc:04:4c:c8:04:d3:21:
                    2b:b0:fb:a7:6a:18:64:d6:59:a1:88:e3:f0:92:05:
                    c5:68:a4:87:c4:6e:c1:6b:35:85:d0:d7:a1:6d:b4:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:B0:11:0F:08:DF:56:7C:87:66:17:AB:CC:3F:8B:EA:2C:D7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.73.0.0/16
                  170.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:e2:e1:76:05:f3:f4:fa:5b:bc:95:0d:c8:73:4a:2b:0b:e8:
         5a:d3:b7:84:58:ab:00:b9:9e:da:e0:66:51:b7:40:07:2c:52:
         cd:8c:be:d9:cd:9e:db:d8:76:d3:77:bd:7f:8a:46:68:e2:2a:
         b8:17:6e:c7:d0:7b:3e:36:67:c7:fe:8e:17:86:0c:74:19:ba:
         55:58:b9:3c:fb:ff:c4:ac:1d:f1:d1:d4:cf:e3:37:bb:56:d2:
         d3:b0:d8:53:35:33:a2:f9:1c:e6:83:d1:33:38:eb:b1:ef:28:
         6d:39:83:5d:21:26:83:4f:48:5b:e3:b6:38:f3:fd:e4:bb:90:
         52:70:46:e1:a7:96:5a:bb:be:be:0a:3e:76:00:99:dd:0f:dc:
         58:e7:4f:3f:56:4c:96:3a:ef:97:bc:d9:4d:c3:f1:f8:55:cc:
         d8:ca:d3:95:ca:3e:a5:0f:91:56:60:a2:f8:68:bc:22:08:dd:
         04:1f:97:5f:ca:59:20:39:f1:7e:8f:3f:e5:19:af:39:86:d2:
         4e:c5:fa:05:6a:32:e8:cd:29:e6:47:5b:c0:e1:87:53:2d:f4:
         e6:e7:c7:b8:2c:9f:6e:43:75:fd:8e:52:22:e1:ed:ac:5f:5f:
         10:70:d3:ba:67:07:cf:4a:2a:22:1b:84:a4:5c:6c:2a:66:82:
         b2:c1:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:07:30 2025 by rpki-client