Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa
File:                     84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa (raw, json)
Hash identifier:          h3i3mI1Gs3NeU17Qpfd7RI0NVZHPW5MseFs/szP6KZE=
Subject key identifier:   67:1D:1E:A8:3C:EE:35:F4:1B:A7:D9:BE:0F:87:6E:53:81:D1:0C:9F
Certificate issuer:       /CN=05fce852-a20a-4939-913c-a82df3dd5549
Certificate serial:       010D0C9F4328584949FE97FA7F444F1F308F406C
Authority key identifier: 41:DA:05:35:38:0D:F7:16:2B:3C:42:F9:87:D1:8E:1B:99:76:FC:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     55193
IP address blocks:        139.60.192.0/21 maxlen: 24
                          162.223.220.0/22 maxlen: 24
                          162.246.204.0/22 maxlen: 24
                          192.152.110.0/24 maxlen: 24
                          209.107.144.0/20 maxlen: 24
                          216.41.176.0/21 maxlen: 24
                          2605:b680::/32 maxlen: 48
                          2606:eb80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:97:fa:7f:44:4f:1f:30:8f:40:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fce852-a20a-4939-913c-a82df3dd5549
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=8eda684b-2636-42ea-803b-b9acfe16c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:8b:a7:87:26:f0:ac:31:75:41:54:74:af:
                    be:ac:ee:be:76:4c:f8:4d:4f:aa:30:1f:c3:68:7e:
                    6b:c4:2e:a5:35:34:5d:66:e7:60:63:96:b3:22:b9:
                    7b:6e:ad:ff:36:7b:b9:47:fb:36:ef:d6:95:ce:07:
                    3b:38:cc:7e:ae:19:be:f0:93:0a:32:6d:72:07:ad:
                    bd:f3:55:6f:64:25:df:92:e0:59:82:f6:08:e9:d7:
                    fc:0a:0e:bb:25:73:94:10:d6:bc:cd:51:97:35:c9:
                    15:7e:e9:12:68:3a:2b:36:71:4c:04:12:e4:e1:d3:
                    43:e7:66:c0:a1:56:c6:e4:9a:17:f2:d6:bc:ad:59:
                    53:19:cd:a1:e3:da:74:95:8c:83:87:62:f9:02:be:
                    43:87:dc:a0:8f:84:ad:80:f2:24:31:ae:9d:23:b8:
                    95:c5:54:81:4f:21:4a:2b:cf:ea:1e:ee:8c:31:68:
                    c5:5f:cb:01:cc:a1:ef:59:df:cc:d2:84:93:16:65:
                    60:86:d1:e2:ff:4a:15:a4:4d:f7:06:32:9a:dc:23:
                    e5:5b:9a:8d:35:9c:08:73:8d:c1:d6:fa:8b:ff:e5:
                    f7:a2:75:2f:e0:7b:bc:97:0b:91:e0:a3:56:bd:72:
                    3e:cc:34:c7:12:23:ae:08:84:f9:5d:07:1b:3c:13:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:1E:A8:3C:EE:35:F4:1B:A7:D9:BE:0F:87:6E:53:81:D1:0C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/84e794ad-4ee9-3c2a-988a-bc625a41b6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549/05fce852-a20a-4939-913c-a82df3dd5549.crl

            X509v3 Authority Key Identifier:
                keyid:41:DA:05:35:38:0D:F7:16:2B:3C:42:F9:87:D1:8E:1B:99:76:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05fce852-a20a-4939-913c-a82df3dd5549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.192.0/21
                  162.223.220.0/22
                  162.246.204.0/22
                  192.152.110.0/24
                  209.107.144.0/20
                  216.41.176.0/21
                IPv6:
                  2605:b680::/32
                  2606:eb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:02:88:8a:06:85:68:2a:23:c6:8e:f7:6d:54:ad:82:6b:
         2f:2a:5b:26:d2:e7:30:7d:72:88:9e:f2:cb:4a:a3:fb:4b:fb:
         93:43:fe:22:65:84:8a:a6:71:ab:65:30:1f:53:9d:11:de:fc:
         7f:26:f4:7b:dd:a7:fe:1b:26:67:15:7e:75:2d:b1:26:f3:4b:
         bb:c2:97:01:e2:e7:41:37:b7:fd:84:66:8b:c8:67:ab:33:26:
         9f:df:5d:1d:e3:ff:14:04:7e:a4:8a:5e:3b:5e:f3:d7:93:d8:
         a4:a4:46:94:94:d1:2b:96:7a:7c:6c:d7:80:17:bb:73:aa:3e:
         85:3e:2f:14:77:8d:79:f8:2d:f7:7c:e8:f8:8d:e4:a9:a8:7b:
         1d:87:9d:b9:98:12:35:24:84:be:a5:0b:ba:79:ed:88:b0:8c:
         51:64:60:9e:3f:cb:30:25:2a:18:d2:f8:11:bc:b1:73:22:40:
         d5:84:0c:57:ac:38:af:ab:8a:52:db:31:38:48:f3:cf:16:bc:
         7d:a3:82:cb:7f:13:f2:17:d4:07:86:e0:c0:28:88:0c:99:1e:
         1c:30:43:bb:95:b6:1e:c8:21:d2:0c:88:90:09:8e:76:12:3f:
         28:d5:7f:aa:c9:2e:a7:13:b3:0e:9d:61:56:04:c0:da:52:c2:
         0f:9f:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:42 2025 by rpki-client