Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
File:                     b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa (raw, json)
Hash identifier:          R8ciJtAezhQrrk6Qa/yZN5eKFK1CNd9zcl0GjIKuuWI=
Subject key identifier:   3F:D7:68:83:61:3B:FA:7B:C3:1B:6E:05:CD:64:C9:9D:5B:2B:F8:98
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F43285848A6CB658423A3693A1AA47B80
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     22299
IP address blocks:        65.254.160.0/19 maxlen: 24
                          162.249.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:65:84:23:a3:69:3a:1a:a4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=c2647b9b-9b1e-40e1-9234-88871637695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:71:18:43:1e:21:33:90:cf:24:05:31:fa:
                    b5:7a:42:85:ad:75:1c:fe:c0:66:f2:93:fa:50:82:
                    d2:10:7a:a6:0d:ac:fd:14:50:7a:80:52:f7:d6:1b:
                    9b:18:05:52:6a:57:f5:eb:f8:a2:a2:7b:07:d8:96:
                    b4:6e:39:a7:d8:ba:04:3f:49:32:f1:eb:77:fd:50:
                    9d:c8:f1:e2:d6:77:a2:28:25:d4:cd:30:07:7b:91:
                    ea:ea:6a:27:7e:fc:14:f7:ff:08:31:5a:de:47:ac:
                    8b:07:ea:5a:32:c4:f7:bd:23:99:da:c5:08:52:e5:
                    3e:39:57:d0:2a:5b:8b:5e:3d:b6:24:fb:ff:dd:b4:
                    56:f2:d2:a7:06:9f:dc:d3:24:70:7d:ca:33:1f:aa:
                    00:a4:a1:65:18:e3:8e:54:32:38:14:48:94:2b:a3:
                    3f:34:db:18:00:92:23:77:72:cf:90:f7:6b:63:17:
                    15:76:d0:17:e3:41:da:a1:96:a8:c9:db:40:d6:f9:
                    cf:f5:5e:2e:9f:23:65:0d:3d:c3:ae:0f:19:30:a7:
                    1f:1a:4a:12:27:89:6d:db:fc:00:a5:55:ef:18:a9:
                    01:50:51:9f:0f:13:1d:6f:32:8f:7e:63:06:f4:59:
                    bb:17:87:2b:ba:68:bb:04:68:56:6b:db:a4:0f:74:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:68:83:61:3B:FA:7B:C3:1B:6E:05:CD:64:C9:9D:5B:2B:F8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.160.0/19
                  162.249.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:2c:89:ff:d3:02:90:8f:bb:e0:66:e9:c5:92:fd:79:d6:
         a2:8a:b6:ed:31:66:8d:5c:8f:5d:6d:60:26:3b:02:11:1f:71:
         18:3b:5b:02:9d:95:0d:13:4f:b2:99:c8:be:41:6c:89:c7:f0:
         f4:d7:3f:40:8b:31:c0:5f:6e:c0:88:86:9d:06:19:df:25:ba:
         e2:67:39:96:b4:9b:13:1d:7c:e2:54:fa:95:1a:ce:69:fa:17:
         2b:b0:d2:f7:9c:50:56:5b:86:b1:88:5c:30:47:62:d0:61:bd:
         a6:df:c4:45:4d:5e:1f:0b:69:fa:c3:67:c5:42:33:ec:b8:f6:
         c6:89:7a:3c:ee:c9:e6:46:78:cf:23:55:31:c2:62:11:b3:32:
         bf:2d:8f:84:d6:33:28:87:de:d7:97:9e:f8:73:79:e0:13:b1:
         5b:36:db:3d:b0:06:3a:38:d5:33:5f:fd:aa:ee:7d:7f:cd:e5:
         19:75:e4:fd:a5:7d:9c:8b:52:6d:01:f1:31:61:89:64:48:c4:
         08:9f:3e:ee:f9:fd:dc:6a:39:34:a7:ed:85:48:8c:58:cc:d5:
         44:0d:68:55:1a:bc:9e:f6:1b:c5:f4:34:c7:61:92:3c:61:71:
         a4:11:72:54:4f:23:b7:45:f1:45:90:b9:22:bc:45:38:47:66:
         67:30:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:51 2025 by rpki-client