Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b3759c16-12fd-3805-a650-f5acec5036e7.roa
File:                     b3759c16-12fd-3805-a650-f5acec5036e7.roa (raw, json)
Hash identifier:          uEzDqQrxlKEjJCIs5/msZsNEM8xp8zTHbHxpjwtJMfo=
Subject key identifier:   85:9C:ED:A4:2C:09:A2:C6:6B:93:4B:36:74:FE:AD:F2:BE:A3:79:0E
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285848A13618416062617683886980
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b3759c16-12fd-3805-a650-f5acec5036e7.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     400754
IP address blocks:        107.180.0.0/18 maxlen: 24
                          107.180.108.0/22 maxlen: 24
                          107.180.120.0/22 maxlen: 24
                          132.148.184.0/21 maxlen: 24
                          148.72.4.0/22 maxlen: 24
                          148.72.16.0/22 maxlen: 24
                          198.71.224.0/21 maxlen: 24
                          198.71.232.0/21 maxlen: 24
                          198.71.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:18:41:60:62:61:76:83:88:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=38cf6a5d-6145-4edc-91f4-79ac68ddc38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:1c:59:3e:51:6b:62:14:08:cb:62:46:20:
                    ca:41:10:5d:97:ee:89:15:ce:3e:ac:2b:f5:37:a7:
                    79:87:00:dc:f5:ca:97:1b:75:c3:c4:c4:3c:f3:2d:
                    c3:97:30:a6:09:ef:30:d6:63:f6:3a:5a:9f:00:67:
                    97:52:2d:e8:cf:3c:52:80:ce:cd:7d:a6:ae:fa:10:
                    a4:4d:24:99:25:b3:2b:48:f7:ba:07:74:b7:c8:f2:
                    b9:4c:3f:e4:7f:a0:8e:b1:91:40:fb:7a:9b:48:cf:
                    a5:b4:41:f5:f8:c6:c4:9c:5d:ba:2d:bc:b2:37:57:
                    1c:07:6f:ef:04:35:28:f5:c6:00:bd:15:a4:7f:2b:
                    f7:82:39:3e:70:e6:60:38:89:96:83:15:4e:9c:8a:
                    e3:09:60:c7:8a:b0:b4:8d:e3:2c:80:b6:7a:36:00:
                    ca:f5:d5:bd:62:55:94:75:6d:3c:63:e9:bd:b1:0a:
                    73:9b:97:5c:8d:55:32:cb:04:9c:09:8e:70:fa:92:
                    c0:dd:2a:43:c1:ad:9f:33:87:f0:02:c8:1c:b8:8b:
                    1d:b7:ab:f4:3a:89:69:a9:80:60:9b:40:d5:1e:2c:
                    04:f0:15:f3:20:91:8b:af:fd:a7:21:66:47:ae:bb:
                    66:73:e1:1e:b6:c8:26:95:52:29:c0:46:21:a3:ea:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9C:ED:A4:2C:09:A2:C6:6B:93:4B:36:74:FE:AD:F2:BE:A3:79:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b3759c16-12fd-3805-a650-f5acec5036e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.0.0/18
                  107.180.108.0/22
                  107.180.120.0/22
                  132.148.184.0/21
                  148.72.4.0/22
                  148.72.16.0/22
                  198.71.224.0-198.71.243.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:c2:47:21:3e:10:c1:fd:75:3c:1f:6b:e3:60:5b:9b:86:
         8a:c7:d9:22:50:15:64:27:2d:1a:22:49:ac:16:2f:0f:a3:97:
         3c:a8:70:d2:2d:2e:c2:6e:cc:54:6d:15:50:ee:aa:db:62:d4:
         e9:03:a2:fb:c1:93:d6:a4:39:36:67:bc:d9:e7:eb:83:d5:3b:
         6a:8e:6a:76:08:03:21:47:f4:f2:83:d2:9b:8b:71:c6:ca:a4:
         c7:52:38:54:ef:30:44:10:a1:a7:ed:e1:48:5d:2b:e8:99:15:
         2c:13:73:2b:a9:19:e2:49:ff:ac:a4:9a:a5:bd:fd:57:3d:9c:
         bf:55:79:79:a7:17:87:57:4a:c9:d5:e5:b3:b1:2c:5a:9f:83:
         62:03:38:69:98:34:c4:dc:ea:6b:9d:cc:1b:75:5f:94:7f:70:
         b0:75:aa:9a:21:49:94:c0:6f:f1:0f:2f:7e:5a:c0:7b:0a:6c:
         93:2a:26:ec:f0:c3:27:5e:7a:f1:46:a2:01:10:e4:3a:95:df:
         65:47:f7:30:b6:14:e9:5a:aa:c7:cf:66:ab:7c:9f:c2:fe:93:
         d4:98:74:db:17:b3:ec:d6:bf:45:48:a4:c2:31:6a:46:ff:a7:
         dc:b9:c8:2b:4b:14:e6:39:18:02:6b:d6:47:74:44:40:2e:79:
         79:e0:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:42 2025 by rpki-client