Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa
File:                     0a58d4b8-b587-3b07-bb46-842da695b817.roa (raw, json)
Hash identifier:          sPZch58lcs2HzA1VmfyClfSfLafiLK58+AXFRdqZPz0=
Subject key identifier:   59:02:AD:7B:53:7C:55:25:09:31:31:60:9F:51:8B:EC:EE:DE:4E:AE
Certificate issuer:       /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial:       010D0C9F43285848E2D11C8524BCF5A912C18880
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10271
IP address blocks:        69.7.0.0/20 maxlen: 24
                          204.107.252.0/24 maxlen: 24
                          209.213.64.0/19 maxlen: 24
                          216.129.128.0/20 maxlen: 24
                          216.237.96.0/20 maxlen: 24
                          2607:d980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1c:85:24:bc:f5:a9:12:c1:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e271f192-1ad5-49d4-92bb-0e786922edee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:53:ee:1d:71:02:d6:2d:04:12:98:b8:d1:
                    5b:19:d9:4c:56:57:e8:ba:b6:73:77:9a:f5:5f:f6:
                    e5:49:58:9e:92:52:e0:58:17:07:3c:e6:4f:c7:c8:
                    d5:89:95:bb:0c:45:6f:fc:c7:3f:36:07:a8:09:a6:
                    15:68:a5:9c:1e:3f:68:ca:d6:90:f7:cc:05:f7:93:
                    f5:b2:c9:2b:51:54:7b:93:86:de:1b:6c:76:d9:55:
                    e3:a6:b6:3a:98:ca:da:63:2b:92:4f:97:19:36:8b:
                    4d:41:a7:f3:95:52:58:ee:e0:62:74:e7:45:d4:f3:
                    e2:21:ac:bd:93:6e:a7:65:06:8f:99:ce:97:c1:e4:
                    8d:86:9f:8d:51:44:e4:b4:1f:15:d9:76:5a:91:17:
                    5f:ed:42:36:06:f5:58:8a:d6:da:26:37:1d:0f:8f:
                    30:1d:ce:70:aa:97:c3:2f:f4:c1:8e:5b:dc:aa:58:
                    88:de:18:b0:ef:66:3b:14:5c:3f:c2:a7:80:9f:47:
                    d0:72:19:38:7c:7a:65:2b:2e:a7:22:65:40:b2:2f:
                    3f:f4:d6:c5:51:a0:3e:b4:08:4e:30:10:78:b6:d9:
                    6d:f5:05:b2:b3:a4:a3:ad:7a:bd:7e:4f:99:7a:8c:
                    2c:03:d4:fb:ea:9c:d2:c7:95:41:1d:33:37:01:52:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:AD:7B:53:7C:55:25:09:31:31:60:9F:51:8B:EC:EE:DE:4E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/0a58d4b8-b587-3b07-bb46-842da695b817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.0.0/20
                  204.107.252.0/24
                  209.213.64.0/19
                  216.129.128.0/20
                  216.237.96.0/20
                IPv6:
                  2607:d980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:99:f1:23:1e:04:ab:2d:b9:0d:a0:9f:31:fd:2e:4a:8a:1d:
         1d:c2:63:57:db:fe:3e:9d:03:55:91:ea:f4:ec:66:bd:3b:d2:
         3f:51:04:a9:37:a7:6c:4b:17:25:87:41:08:8a:20:ee:57:4b:
         2d:8c:a1:07:82:f9:d4:df:78:12:00:d3:72:59:71:a2:2b:da:
         ad:52:13:a6:1c:c7:af:cd:4d:68:94:17:94:67:13:f4:08:9e:
         a1:fb:ff:86:4d:69:01:be:0e:44:63:f2:7e:6f:55:f7:0b:b1:
         cd:9d:3e:47:d7:c4:a7:8b:3b:95:d4:6d:5d:a0:71:aa:d6:bf:
         7f:ca:ca:f6:ea:63:54:fa:a6:b6:40:9d:4d:f5:b5:c4:b4:64:
         07:a5:c9:d4:31:2d:f2:d4:df:bc:8a:e7:4f:bf:a6:28:e8:5a:
         7d:2f:6a:61:82:34:76:17:a2:10:c1:a7:37:f2:3a:57:52:57:
         22:8b:fe:c0:32:8c:60:90:e3:7e:74:63:35:f0:0e:a6:2a:33:
         dd:20:06:8f:7b:43:52:d3:29:26:15:fa:59:e0:d1:3c:fc:e5:
         61:73:f5:91:3a:f4:a4:3a:cd:8c:e7:54:1e:d4:3f:a1:48:bb:
         d7:d3:74:41:e3:57:52:58:1c:2a:1b:e5:46:98:fd:d3:ce:af:
         95:c7:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:13:23 2025 by rpki-client