Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
File:                     c185bc49-3533-373b-bbc3-00f946055c50.roa (raw, json)
Hash identifier:          uVvSptRaghOFiYysalU+fb46EuyVihD9Wyiv8UhpICc=
Subject key identifier:   3A:1B:A5:55:6F:4B:F5:24:7B:30:9B:94:84:AF:26:90:CF:0C:FE:72
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584908816AB4B0FA489CF1C1292A
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     22606
IP address blocks:        66.231.80.0/20 maxlen: 24
                          68.232.192.0/20 maxlen: 24
                          136.147.128.0/20 maxlen: 24
                          136.147.176.0/20 maxlen: 24
                          198.245.80.0/20 maxlen: 24
                          199.122.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:6a:b4:b0:fa:48:9c:f1:c1:29:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=368fb490-c195-4825-a3e7-dbaf0cbdc3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:35:20:96:45:c2:28:16:0a:dd:bb:af:bc:
                    09:02:e5:92:be:d0:eb:68:47:98:7b:60:92:46:41:
                    26:1c:a7:69:c6:ab:93:aa:8f:53:2b:a3:23:45:ab:
                    19:3e:22:9d:53:92:7f:dc:57:7d:7d:cb:52:88:b1:
                    64:cb:58:e6:70:ee:31:b7:a4:ef:76:84:02:c5:cd:
                    92:7a:ef:b4:22:82:01:34:b9:1a:40:34:3f:a5:32:
                    54:b2:3b:f3:2e:f9:7e:3a:d3:e4:c5:fd:7b:7d:27:
                    3f:92:a6:c8:3e:91:b4:97:11:4b:e5:27:33:36:cb:
                    a6:70:43:43:79:bd:9b:fd:2a:b6:f0:f2:9e:ff:13:
                    85:32:87:a6:c7:b9:a9:d4:a8:4f:20:ee:7d:b5:40:
                    b7:8c:43:ca:1b:8c:e8:2c:69:b9:50:45:dc:91:12:
                    a7:8b:f2:6d:4e:22:5f:d9:7c:2f:3e:59:62:f1:8b:
                    b6:9f:90:21:d6:12:85:78:21:6a:3f:9b:25:e7:d8:
                    80:62:9c:0d:3f:79:77:18:98:d2:d4:b7:db:f8:ba:
                    ad:ed:f9:ec:1c:c2:4a:99:b7:01:f6:3d:ff:ca:d3:
                    f1:6e:8e:2a:a2:4f:65:4a:46:32:0c:c5:6d:59:f4:
                    0f:2c:cc:ad:75:de:b6:96:71:14:d8:85:53:b8:bd:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:A5:55:6F:4B:F5:24:7B:30:9B:94:84:AF:26:90:CF:0C:FE:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/c185bc49-3533-373b-bbc3-00f946055c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.80.0/20
                  68.232.192.0/20
                  136.147.128.0/20
                  136.147.176.0/20
                  198.245.80.0/20
                  199.122.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:1e:6b:01:67:0a:e2:98:cd:7f:3e:bd:fe:57:6d:cf:0c:34:
         2b:e0:ab:88:3b:e6:33:f1:9a:5f:ef:fd:d5:98:3e:b4:45:c8:
         0f:7c:e6:1c:6d:52:56:ea:ff:45:e0:e5:de:6c:47:de:08:97:
         bd:18:37:37:47:81:a7:c2:14:f7:11:f3:a4:b0:65:bb:ca:6e:
         6c:d9:0d:52:20:23:22:19:8c:5d:62:40:a3:5b:e4:8f:97:a3:
         7b:32:4d:92:3b:10:a0:1c:ef:98:6c:d3:9c:3f:a8:9f:c4:5d:
         cb:d2:03:77:0b:66:39:74:9a:c7:7b:54:76:71:c9:bc:59:5f:
         b5:f9:f8:a1:f6:6c:a8:4b:7c:79:74:3f:d0:bc:ac:fe:83:c8:
         76:5b:30:70:08:fe:3d:29:41:d3:aa:a4:64:2a:91:19:95:3b:
         03:71:81:82:89:3c:63:60:5d:24:39:ac:7d:ec:bd:83:6e:9b:
         ca:1c:f8:c5:54:40:73:ca:05:e6:e1:f6:cb:e9:04:68:cd:0a:
         a8:d5:b9:8b:85:f3:19:85:6b:b3:15:af:67:f7:cd:15:5e:4a:
         7e:89:16:f0:55:ad:c9:ae:c4:fb:de:89:4f:0c:23:50:b5:34:
         57:36:1b:71:ed:35:31:85:c7:6c:5a:33:12:92:31:20:4b:4f:
         68:29:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client