Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/f73469ad-0308-3c9b-9c9f-3bed932c91a6.roa
File:                     f73469ad-0308-3c9b-9c9f-3bed932c91a6.roa (raw, json)
Hash identifier:          KaTcpO6a2x55NykeJUQjP8v4G6/wK+Q4xafyTZbwQIk=
Subject key identifier:   01:49:E0:A9:6B:78:42:80:F7:EC:82:93:26:50:58:A3:02:9F:DB:4C
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584A14655A4583A60EFBEC6424C0
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/f73469ad-0308-3c9b-9c9f-3bed932c91a6.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     18434
IP address blocks:        147.249.16.0/24 maxlen: 24
                          147.249.17.0/24 maxlen: 24
                          147.249.18.0/24 maxlen: 24
                          147.249.19.0/24 maxlen: 24
                          156.55.27.0/24 maxlen: 24
                          156.55.124.0/24 maxlen: 24
                          156.55.125.0/24 maxlen: 24
                          156.55.126.0/24 maxlen: 24
                          156.55.127.0/24 maxlen: 24
                          156.55.139.0/24 maxlen: 24
                          156.55.148.0/24 maxlen: 24
                          156.55.149.0/24 maxlen: 24
                          156.55.150.0/24 maxlen: 24
                          156.55.151.0/24 maxlen: 24
                          156.55.156.0/24 maxlen: 24
                          156.55.157.0/24 maxlen: 24
                          156.55.204.0/24 maxlen: 24
                          156.55.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5a:45:83:a6:0e:fb:ec:64:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=90f33dc8-0166-447c-b85b-0d377288c6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:e5:dc:fb:9e:f9:d3:bf:46:00:00:0a:89:
                    f3:f3:bf:65:4a:f4:49:80:cd:29:2d:b3:81:10:a9:
                    fb:ae:ec:61:c0:a5:84:4e:1e:75:e2:9e:4b:35:4d:
                    33:ee:f6:ee:4b:63:ce:51:2b:28:ba:f2:1c:bb:c6:
                    80:53:5d:de:a8:c8:73:56:d1:68:2c:94:0a:8c:15:
                    35:22:ca:12:fa:62:45:a7:4d:2d:57:5f:ca:55:5e:
                    a3:73:72:c0:bd:e1:d0:aa:7f:9a:32:2a:5b:74:80:
                    b3:51:a2:24:07:0a:53:11:43:b7:e0:1d:1c:82:2e:
                    d0:7c:3e:39:9b:17:53:2a:da:5c:ad:cc:a5:3e:ca:
                    73:32:a2:1a:f3:ee:9c:a3:52:55:6f:71:46:2c:2f:
                    37:5c:fd:09:e7:eb:46:44:9b:83:b5:dd:dd:79:09:
                    1a:7f:56:67:3f:38:11:cd:37:db:07:00:36:98:f8:
                    90:97:37:13:f6:ed:90:86:db:22:40:52:b3:35:f9:
                    bd:b5:dc:78:e5:c9:07:f4:3a:57:e9:5d:40:39:12:
                    fa:93:a2:ba:ff:82:1c:65:17:a8:3b:3a:8e:0a:dd:
                    bf:3d:24:fc:1e:81:83:95:98:b1:79:14:6c:c1:d3:
                    c3:13:58:0f:57:f1:ee:fd:4e:74:a5:8c:e0:76:56:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:E0:A9:6B:78:42:80:F7:EC:82:93:26:50:58:A3:02:9F:DB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/f73469ad-0308-3c9b-9c9f-3bed932c91a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.16.0/22
                  156.55.27.0/24
                  156.55.124.0/22
                  156.55.139.0/24
                  156.55.148.0/22
                  156.55.156.0/23
                  156.55.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:a8:4c:63:7c:66:e7:10:7e:82:89:bc:7d:8b:21:32:14:
         e7:62:2f:ca:44:5b:7a:57:7f:8c:00:ab:7f:d5:25:34:d9:f9:
         ec:3f:72:d8:cd:87:7e:e3:5e:c7:9d:b3:36:6d:92:f9:42:94:
         4c:ac:c1:7e:0c:ad:95:f7:e8:53:e4:8d:31:60:0f:73:bc:ef:
         87:f4:8d:af:51:20:1d:82:39:05:e2:62:04:11:38:70:04:a8:
         74:79:b9:b3:63:70:62:d7:48:df:7d:20:9e:ef:11:f4:40:ac:
         7a:72:eb:fe:3f:e7:6e:9b:57:86:61:02:24:71:66:2c:66:71:
         74:c4:0e:46:84:f3:f6:7b:40:dd:f7:6e:ae:f4:42:29:e0:c0:
         ba:23:b3:29:7c:a5:d9:8e:5d:ad:ae:4b:9c:83:34:e2:4b:f6:
         07:1d:63:11:95:f2:dd:ba:84:cb:57:97:14:30:13:04:21:b9:
         a5:bd:b8:14:55:d6:fb:db:4c:68:9c:fd:14:c8:58:55:79:ac:
         d4:f6:02:3d:33:de:c9:5f:0d:03:b2:df:05:b4:0a:50:1a:ac:
         d1:34:47:eb:de:78:d0:42:ba:09:d2:d8:17:28:34:42:ea:a3:
         7c:a4:e2:3e:3a:c6:b4:f3:05:c7:6c:19:1e:cd:a4:45:df:0f:
         81:6d:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:06:42 2025 by rpki-client