Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/5e53b1bb-3fc0-3b50-8207-e98b119d3d90.roa
File:                     5e53b1bb-3fc0-3b50-8207-e98b119d3d90.roa (raw, json)
Hash identifier:          xP2v4cVgYreyDBitF/xihr2BHxaJFSUp11qZBfiftrI=
Subject key identifier:   CE:28:D4:E2:EE:85:8C:E5:55:AA:E7:BE:24:33:1B:73:47:E4:04:95
Certificate issuer:       /CN=9a3d5156-0805-43d8-89a7-e6677660aae2
Certificate serial:       010D0C9F43285848BBBB7057B7894B3B484CA880
Authority key identifier: 6C:65:84:B6:41:30:26:10:02:37:02:39:3B:74:29:65:F7:82:6A:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/5e53b1bb-3fc0-3b50-8207-e98b119d3d90.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     400833
IP address blocks:        216.234.184.0/23 maxlen: 23
                          216.234.186.0/23 maxlen: 23
                          216.234.188.0/23 maxlen: 23
                          216.234.190.0/24 maxlen: 24
                          216.234.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:70:57:b7:89:4b:3b:48:4c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3d5156-0805-43d8-89a7-e6677660aae2
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=ba20dc6e-2075-4654-89cb-e9bbd661ba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:5d:61:63:d0:a3:da:73:11:da:9f:e6:1b:
                    47:59:66:9c:ef:39:74:9a:28:30:ca:e9:ca:ff:db:
                    5c:f7:ac:91:04:c8:d6:c1:86:9f:ff:de:1d:c0:13:
                    c5:25:d2:b2:62:c1:81:00:45:c2:93:a2:64:1a:96:
                    5e:bc:cc:5a:24:67:95:0f:49:0a:96:16:e6:2b:b9:
                    6b:02:f0:ef:d7:0f:88:86:1f:29:27:e6:29:38:52:
                    57:ba:57:84:e0:10:33:f2:f0:ec:a4:6f:80:ce:ef:
                    14:28:f1:a0:1c:c1:fc:b9:a4:6a:fd:55:a1:3a:7e:
                    42:ac:a4:8b:71:e6:bb:f1:e1:e6:ca:25:d4:0e:0e:
                    cd:62:08:a2:79:06:9f:ec:c0:78:3d:6f:e6:ab:b3:
                    21:26:5c:b5:c4:b6:96:9e:f1:21:2b:68:ec:c2:ff:
                    ce:7b:21:c7:1b:24:8e:56:31:15:eb:14:13:ef:b8:
                    87:6f:70:eb:98:12:36:38:66:81:0c:4e:b2:75:57:
                    d8:b6:02:a3:a8:a8:e9:5d:4f:ec:38:16:3b:5c:cc:
                    2b:19:99:2e:2c:44:91:63:67:71:c3:28:43:98:e2:
                    d8:b6:ae:a7:f2:7d:43:7c:b6:73:11:0a:73:60:3f:
                    b9:e6:a2:74:88:ba:52:95:97:74:e1:7c:66:4b:4a:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:28:D4:E2:EE:85:8C:E5:55:AA:E7:BE:24:33:1B:73:47:E4:04:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/5e53b1bb-3fc0-3b50-8207-e98b119d3d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2/9a3d5156-0805-43d8-89a7-e6677660aae2.crl

            X509v3 Authority Key Identifier:
                keyid:6C:65:84:B6:41:30:26:10:02:37:02:39:3B:74:29:65:F7:82:6A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a3d5156-0805-43d8-89a7-e6677660aae2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:0c:98:2a:1e:f7:44:0d:5d:94:0a:2d:d1:bb:34:71:c6:
         66:35:79:a1:54:3f:95:19:b2:4a:db:56:3f:08:c4:bb:67:1c:
         32:8d:6e:1f:43:12:9c:82:9f:41:ca:bf:25:d5:7e:a5:61:1a:
         36:fc:2a:2b:29:25:32:9d:ae:d2:cc:4a:81:33:11:50:b0:5f:
         8b:5e:9e:78:fb:c4:b1:fe:33:df:79:36:78:fc:ac:04:d4:7e:
         67:d3:53:a1:b7:b3:ca:7e:b0:c9:04:d5:78:61:1a:3f:a2:53:
         bb:db:1e:bf:c8:89:85:ad:0d:3d:a0:32:6d:c8:41:ed:b3:5b:
         45:ce:fd:d5:d2:89:ee:ec:b3:bb:14:5b:35:b5:8d:08:a6:76:
         68:f6:bf:50:bd:51:83:1d:e0:1b:1b:22:29:2d:4d:c4:ad:d3:
         81:65:09:af:20:46:6e:0d:5f:01:95:fa:b6:4c:75:14:80:6b:
         60:07:9c:c3:a7:8b:b9:a1:19:0e:fc:b7:2e:a1:00:ad:c3:09:
         a1:7d:ad:89:cf:72:1f:e9:9d:5c:5a:fd:8e:3f:68:e7:eb:82:
         74:1f:0d:89:9b:04:3c:52:28:e4:20:4a:a9:89:0f:d9:00:51:
         df:59:bf:10:47:a1:fa:4b:c9:33:82:37:d2:d4:71:01:12:be:
         85:ae:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:22 2025 by rpki-client