Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
File:                     28f9e361-2a40-3533-ae86-3037006c7eda.roa (raw, json)
Hash identifier:          CsMujcJT2DLLcauitZnqIElszqqKJHzNnU+3cEX2Jsc=
Subject key identifier:   E3:A9:92:99:72:EF:1B:A7:E3:82:DB:8F:95:FE:1B:87:FC:87:3E:69
Certificate issuer:       /CN=6ca4d9b1-5397-4654-94da-7840371f5226
Certificate serial:       010D0C9F43285849350EADDF77153ACAE894B8C0
Authority key identifier: 9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     25914
IP address blocks:        65.49.152.0/21 maxlen: 21
                          65.49.152.0/22 maxlen: 22
                          65.49.156.0/22 maxlen: 22
                          108.160.80.0/24 maxlen: 24
                          108.160.84.0/22 maxlen: 22
                          108.160.88.0/24 maxlen: 24
                          132.147.240.0/20 maxlen: 20
                          2607:2900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ad:df:77:15:3a:ca:e8:94:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca4d9b1-5397-4654-94da-7840371f5226
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=9a1f15ab-1d6e-4f31-9836-c1917f7f8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:66:45:e1:4f:0f:f3:0b:a3:cb:22:c0:a9:
                    45:b6:c8:f1:b1:dd:4a:48:16:b7:ae:25:65:b4:c6:
                    f8:a3:11:4e:0d:77:89:cd:23:d0:55:62:30:f9:10:
                    c3:4c:0d:34:a1:11:14:52:96:7a:f5:0d:94:e3:98:
                    36:fc:9d:1b:cd:69:59:d1:70:0c:e8:0e:1a:9b:86:
                    cd:8c:6a:98:7d:c6:ab:44:cb:3f:5c:7e:05:ea:b8:
                    f2:ce:ef:f6:50:9c:f1:b6:51:c4:2d:2d:91:50:21:
                    61:8d:dd:2f:3d:5f:76:35:7c:38:fa:7c:05:ca:92:
                    06:01:90:7d:e2:87:d7:ac:22:1c:84:f2:2b:05:02:
                    77:b8:3b:17:dd:01:70:da:c7:ee:59:a6:45:84:f5:
                    ba:5a:de:82:1c:58:05:b5:41:09:60:a3:40:07:37:
                    e3:ca:bc:42:71:0f:be:b8:f2:d8:7a:8a:6c:3c:90:
                    fa:8c:e0:80:b6:42:b7:d8:96:22:82:13:40:71:49:
                    1c:c6:1d:0b:9c:9a:b7:4b:50:00:e1:39:17:d7:2c:
                    b9:d1:f7:ca:c4:49:a4:77:4b:69:2b:e5:aa:e8:7a:
                    5a:6e:39:cd:a7:06:a0:82:95:de:a0:d4:61:ac:7a:
                    aa:70:c8:fa:94:02:21:f2:51:d8:ba:c1:db:44:ec:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A9:92:99:72:EF:1B:A7:E3:82:DB:8F:95:FE:1B:87:FC:87:3E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/28f9e361-2a40-3533-ae86-3037006c7eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226/6ca4d9b1-5397-4654-94da-7840371f5226.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B5:5B:29:BE:D8:4E:C6:F7:7B:B0:1D:BB:7E:29:C2:8C:AD:DA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6ca4d9b1-5397-4654-94da-7840371f5226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.152.0/21
                  108.160.80.0/24
                  108.160.84.0-108.160.88.255
                  132.147.240.0/20
                IPv6:
                  2607:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:10:ea:f4:f1:68:b9:2d:93:04:7d:9f:0e:14:2d:dc:31:
         ff:49:73:bb:b1:a9:d9:6c:49:ec:f5:c5:3f:4e:be:ce:be:c3:
         41:9a:a3:6a:86:19:6b:87:1e:d5:51:3c:bb:74:bb:5b:2a:7f:
         d3:2c:e5:af:6d:98:b2:9c:5e:0f:53:3b:ee:22:8b:b5:11:d6:
         d5:c1:1f:7e:55:27:98:4e:2e:58:e1:96:2b:38:49:47:9f:f3:
         49:9c:93:16:66:c8:e1:f3:33:84:64:36:37:f0:96:2c:3b:9c:
         38:84:5b:1b:da:b8:68:0e:10:70:77:f0:25:bf:46:12:8d:c1:
         57:1e:ab:ff:a5:4b:c1:ae:59:76:b5:67:08:04:12:b3:c3:ea:
         a1:07:bf:b7:fa:a1:de:00:a9:aa:3a:4c:75:c5:e2:40:1d:8a:
         a8:eb:93:28:97:99:dc:fb:35:4c:0c:e2:b2:38:20:78:97:ae:
         12:d5:8a:7c:5f:b2:36:4a:d2:e6:e6:4c:60:7a:c1:0f:04:f8:
         c4:69:6b:36:f8:0c:ef:dd:78:e2:06:35:f6:e9:c3:66:24:ec:
         b4:67:b2:4a:78:87:26:a4:14:b3:f7:57:4e:10:c8:eb:46:20:
         dc:67:b3:8c:25:6a:5c:2b:80:62:38:75:a3:89:e6:c3:9b:ea:
         1f:85:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:48 2025 by rpki-client