Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa
File:                     e0b6d9cf-566a-36d8-bf65-83c583e60273.roa (raw, json)
Hash identifier:          +QawawC7yiV/Ni7oDzPZKYDcKgOqP9QcfXGaUTsKlMI=
Subject key identifier:   F8:51:00:2F:08:1D:E3:80:DB:51:61:F1:1D:EC:D8:AF:48:72:C7:A2
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285848A99619EF6D10E9E6A6DE5780
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     19871
IP address blocks:        162.241.32.0/21 maxlen: 21
                          162.241.40.0/21 maxlen: 21
                          162.241.48.0/21 maxlen: 21
                          162.241.72.0/21 maxlen: 21
                          162.241.88.0/21 maxlen: 21
                          162.241.96.0/21 maxlen: 21
                          162.241.104.0/21 maxlen: 21
                          162.241.128.0/21 maxlen: 21
                          162.241.176.0/21 maxlen: 21
                          162.241.192.0/23 maxlen: 23
                          162.241.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:19:ef:6d:10:e9:e6:a6:de:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=c02275c5-60f1-4d32-aaa8-23de16a8b68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:1d:88:df:e3:75:48:10:1d:61:de:d1:14:
                    9f:4d:c9:35:b8:a5:c7:7d:6b:1f:50:d1:13:de:32:
                    63:3c:69:a0:c7:79:73:8a:6e:69:95:f3:a7:a9:41:
                    bd:4e:8d:64:46:45:a1:0b:ac:2b:52:eb:70:ca:04:
                    90:a0:3f:e1:e2:dc:b0:c0:d6:13:12:cd:db:3d:fe:
                    b5:b6:b8:d5:f2:50:5f:fc:6c:8c:fc:82:d7:cf:68:
                    04:6e:50:05:fc:2d:c6:d0:7f:9d:bf:87:31:5f:ec:
                    5a:00:aa:78:ef:f0:91:55:0e:c1:b9:c9:70:02:40:
                    34:12:b7:65:ed:5f:ec:7c:5e:25:e8:34:81:93:bc:
                    52:1a:48:cc:ac:70:d7:ec:5c:cf:bb:a4:b2:45:7f:
                    c5:59:e8:fb:87:94:b8:fa:c1:71:b3:47:a8:42:9c:
                    5d:eb:61:67:cf:1f:07:18:44:4c:f3:17:c1:6b:39:
                    a1:43:a4:a9:ba:32:26:27:42:68:52:06:d7:98:db:
                    d9:62:c1:7c:c7:8b:f5:ab:e0:15:2d:9a:83:b1:ee:
                    8e:a8:9b:04:81:27:50:75:89:98:8b:6a:c8:4c:cb:
                    f1:ba:04:46:29:51:8c:b1:4f:f6:b5:51:0e:b5:a7:
                    ab:a4:c7:89:d2:b7:5e:ea:80:a1:f3:59:42:4c:f6:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:00:2F:08:1D:E3:80:DB:51:61:F1:1D:EC:D8:AF:48:72:C7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e0b6d9cf-566a-36d8-bf65-83c583e60273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.241.32.0-162.241.55.255
                  162.241.72.0/21
                  162.241.88.0-162.241.111.255
                  162.241.128.0/21
                  162.241.176.0/21
                  162.241.192.0/23
                  162.241.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:81:e8:7f:81:5c:37:b5:d8:3f:f1:f7:85:ff:35:f9:cf:
         ff:85:27:2c:bf:ca:c0:b0:25:dc:04:38:d6:8d:28:57:ff:09:
         59:1e:5c:20:8a:1b:df:20:21:4d:7b:18:f1:2c:4a:fc:ab:95:
         d3:19:43:56:78:d9:d8:bd:d9:96:88:04:96:25:90:a0:90:5f:
         c0:47:56:61:f2:35:26:8b:9f:91:bc:92:13:80:45:e2:7a:64:
         f9:66:a6:4a:49:05:a5:ad:ea:93:fa:6a:94:7c:1b:52:8f:8f:
         3a:81:74:00:56:7d:f1:8f:d4:07:9f:6a:26:92:c7:b6:ce:47:
         97:3c:83:9f:ff:7a:2e:5d:e6:a5:77:9f:96:de:ce:8f:f4:c0:
         af:79:71:cc:76:f2:7a:7f:ca:3c:99:1f:19:af:71:e0:33:26:
         9f:ec:90:35:cc:9b:cf:06:05:5b:2d:75:0c:60:35:99:21:1c:
         b7:94:36:02:76:ed:45:99:3e:01:b7:4a:76:de:5d:46:78:b6:
         7b:a2:7e:34:38:a5:e3:2f:4c:4e:13:b5:e2:7e:6b:9b:0a:99:
         6b:46:d3:55:73:a6:8f:77:61:a3:33:48:e5:e5:7d:c4:8e:eb:
         e4:91:56:93:04:1c:4b:b9:28:cb:92:8d:b8:09:7b:9d:7e:22:
         53:e7:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:32:05 2025 by rpki-client