Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
File:                     c1d6ae56-3efa-39fa-afc4-089897153b24.roa (raw, json)
Hash identifier:          U2j+T0w8MmRF2lWQGQbs2Bu2nTTzapWxgj1piFN9hqs=
Subject key identifier:   34:6F:5D:8D:0C:FF:97:AA:69:2A:D4:3D:D0:15:7B:11:58:6D:FB:FB
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F432858494734001D7A9D7387B8B7E700
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:00:1d:7a:9d:73:87:b8:b7:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=111bf30f-abb3-4b5d-b96b-37e4d87222cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:b7:fc:98:c0:2e:23:41:65:c1:37:32:db:
                    09:6e:9a:b2:b9:4f:c5:a3:16:c1:02:76:ed:72:ef:
                    77:8d:a2:83:bc:0e:d5:55:d6:fd:c5:0a:46:78:37:
                    ee:66:12:f6:d4:8b:d1:64:f0:16:69:98:b0:f6:1d:
                    1b:8c:9a:a6:e6:9a:85:13:9c:0b:6a:d7:02:15:9c:
                    64:80:81:22:66:cc:12:47:36:c3:67:ac:b0:7e:01:
                    73:cc:36:8f:a3:7e:cf:8a:57:69:82:cd:5f:5b:62:
                    96:a5:84:b3:5a:b8:e6:00:67:1e:1b:a1:55:e4:35:
                    55:ad:2d:da:37:bc:70:2b:ff:12:4f:59:36:f5:e5:
                    1c:32:14:f3:c9:0b:b6:ba:5f:6a:70:94:f9:a8:36:
                    3c:7c:3f:4e:00:48:69:29:88:ea:02:73:c9:d8:41:
                    75:11:37:ae:27:19:50:8e:c7:63:84:06:28:0c:a3:
                    39:32:63:7c:51:66:03:6d:b8:8c:04:8f:48:fd:0b:
                    79:44:5f:6d:00:ae:b3:a7:0d:25:52:07:c0:57:f3:
                    39:e4:c9:9a:78:8f:c1:a9:18:51:87:86:e9:a7:db:
                    e6:95:11:07:6a:fe:b9:93:fe:a5:86:df:26:b8:84:
                    9e:bb:28:f8:13:89:56:ae:f3:81:0d:6f:47:fc:6c:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:5D:8D:0C:FF:97:AA:69:2A:D4:3D:D0:15:7B:11:58:6D:FB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:87:9a:da:99:c4:c7:62:f7:e8:19:c5:09:44:d0:9c:04:
         a0:ce:e7:e5:17:5c:af:ae:e3:89:e8:1c:d9:fd:0f:23:4c:da:
         83:bb:10:7b:09:1f:10:a7:2e:9e:14:b4:aa:cb:cf:eb:b7:23:
         2f:08:95:b0:60:d7:93:de:e5:7f:7e:30:b2:41:b5:28:91:44:
         07:a3:6a:af:3c:cc:ac:84:d5:ee:40:57:b2:ae:8e:46:f2:36:
         a1:d2:f8:ba:f8:c8:d8:c4:a2:2d:24:d1:9f:87:07:b6:c9:07:
         6f:16:ff:28:6b:bf:8d:59:b6:77:ba:38:8a:84:94:a6:0d:01:
         44:09:3d:1b:fa:d2:78:31:23:ef:39:60:0c:0a:68:e7:42:8c:
         cf:34:60:52:aa:2a:4b:c2:8a:59:6f:c6:31:09:c8:46:84:e9:
         53:6a:b3:01:12:8b:bd:cb:a8:78:e4:5b:d3:7f:b6:fb:69:59:
         cc:16:57:36:ff:4b:c7:83:94:b0:6f:2e:c6:9e:41:38:7a:7c:
         47:a1:0d:a6:75:e0:a0:a8:91:0d:0e:9e:f6:49:29:b9:0b:2d:
         55:9c:21:65:14:85:fe:00:ed:4a:fe:00:56:8e:35:c8:9a:82:
         1c:0f:11:85:a4:b8:67:6c:52:4c:71:25:5d:a3:96:66:2f:88:
         e7:a1:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:59 2025 by rpki-client