Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
File:                     82188834-19d0-34be-9f3c-13ee797db6fa.roa (raw, json)
Hash identifier:          ddtViimXZwzlgM0zh7YVKwP6U3Tb+Z/ZPRD5NQ3V6Ek=
Subject key identifier:   A4:B8:26:59:5F:92:41:B5:4B:07:42:27:55:97:1A:F2:C4:76:4F:69
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F43285848424AD7E54EEF458942FCADE8
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     54665
IP address blocks:        66.128.128.0/20 maxlen: 20
                          162.220.84.0/22 maxlen: 22
                          192.190.88.0/22 maxlen: 22
                          198.177.52.0/22 maxlen: 22
                          199.59.112.0/22 maxlen: 22
                          2605:4680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d7:e5:4e:ef:45:89:42:fc:ad:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=4e924a43-e778-4e74-a1d4-1bac0aeade16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:b0:a4:19:eb:3f:4c:1f:10:a8:9f:87:8d:
                    5f:82:60:4f:2f:b5:11:99:df:e4:95:5e:59:0a:57:
                    62:50:1c:f9:39:a1:31:c4:af:94:a9:48:db:1e:e3:
                    b0:91:ff:37:a4:84:1a:1a:7e:a6:4c:af:3b:d4:05:
                    6d:c3:d3:3c:d2:32:25:0d:b7:25:73:1a:02:34:60:
                    fb:74:74:bc:f5:5f:9a:8e:aa:1c:53:3b:12:ac:9e:
                    b6:09:59:17:6c:79:0e:12:fd:d2:e2:0c:48:4d:94:
                    26:40:34:9c:25:1f:d9:da:dd:f5:06:30:2e:8f:8e:
                    eb:6f:85:67:76:42:33:35:ea:ac:d0:2f:b2:55:97:
                    4c:3e:74:ab:23:fd:13:e7:22:aa:79:f4:a1:f7:91:
                    8c:b1:fe:4d:f7:3a:00:a0:78:62:b1:44:61:2f:f2:
                    e5:30:17:ee:16:f2:12:2b:8b:ce:a8:0c:77:8a:95:
                    f2:1f:87:1a:ab:ce:7e:2d:ba:14:d8:77:94:3b:5a:
                    ac:18:51:b9:e4:a9:a2:04:f2:f7:5f:00:5e:17:2f:
                    fe:f8:df:92:4a:75:f9:fe:dd:7d:f2:b9:e0:a2:35:
                    32:26:67:4f:53:25:c5:6d:18:e5:e3:25:10:48:85:
                    93:af:cd:a5:19:90:3b:c9:2b:7d:6a:f8:43:ec:78:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:26:59:5F:92:41:B5:4B:07:42:27:55:97:1A:F2:C4:76:4F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/82188834-19d0-34be-9f3c-13ee797db6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.128.0/20
                  162.220.84.0/22
                  192.190.88.0/22
                  198.177.52.0/22
                  199.59.112.0/22
                IPv6:
                  2605:4680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:88:70:98:be:ea:16:e1:7b:37:b2:18:db:6d:86:05:a3:
         c7:8c:a5:39:0d:71:b4:26:95:75:d8:39:e5:15:53:79:fe:77:
         ff:73:14:27:ef:74:aa:0d:1d:f7:98:5f:6a:0d:09:19:fd:9a:
         17:92:fd:e2:f6:78:4d:b8:54:5e:9f:95:46:9b:c6:08:a1:53:
         16:27:5d:8b:27:9a:9a:07:5b:f8:a5:aa:14:6f:ca:e1:06:eb:
         52:9f:a3:89:d1:da:52:dd:f0:f2:85:30:c1:a0:de:d5:05:1e:
         90:ec:ca:fe:f5:df:69:98:fb:27:27:e7:6e:a6:35:80:5a:23:
         1e:b9:ac:ef:f7:36:36:fa:8a:60:7e:5f:d1:0a:ff:28:de:a3:
         d6:de:3f:c6:a5:53:54:c5:93:f0:48:a1:69:46:77:a7:dd:c9:
         d3:a0:22:bb:8a:88:be:07:76:73:ce:61:f3:c2:d6:0d:42:4f:
         3a:54:84:f9:d4:64:fd:ab:be:99:4e:9d:c1:c8:02:36:ae:d4:
         8b:77:3b:d3:20:5e:d4:ff:5c:16:f3:de:51:4c:78:5f:bd:ae:
         f2:bb:b0:ce:35:d6:43:71:15:9a:95:e7:21:59:60:ec:95:f1:
         0c:67:c0:fb:54:7b:b2:89:45:19:4d:74:ec:34:29:4b:6d:89:
         f0:b6:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:24 2025 by rpki-client