Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
File:                     0a4a278a-43d9-34d7-b741-e7725dd4623c.roa (raw, json)
Hash identifier:          YLS8svJHeywK32FkTiufwTLEOUM97SbDoKn8Ehdp25Y=
Subject key identifier:   ED:14:18:7B:41:59:4F:FA:AE:09:E5:9F:0A:7B:7D:26:C1:12:2D:15
Certificate issuer:       /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Certificate serial:       010D0C9F432858490E16BC6954365B6F2B662110
Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     11023
IP address blocks:        209.251.33.0/24 maxlen: 24
                          209.251.34.0/24 maxlen: 24
                          209.251.35.0/24 maxlen: 24
                          209.251.36.0/24 maxlen: 24
                          209.251.37.0/24 maxlen: 24
                          209.251.38.0/24 maxlen: 24
                          209.251.39.0/24 maxlen: 24
                          209.251.40.0/24 maxlen: 24
                          209.251.41.0/24 maxlen: 24
                          209.251.42.0/24 maxlen: 24
                          209.251.43.0/24 maxlen: 24
                          209.251.44.0/24 maxlen: 24
                          209.251.45.0/24 maxlen: 24
                          209.251.46.0/24 maxlen: 24
                          209.251.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:bc:69:54:36:5b:6f:2b:66:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=e5525f53-9b47-4fb3-92ab-95c26aa8cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:0b:dc:a2:e0:32:ba:39:fa:4c:73:ad:e4:
                    51:9d:ed:9f:65:73:b9:d3:0a:ee:a1:2b:52:5b:08:
                    aa:84:cb:f0:53:3c:f4:30:27:8c:2a:ba:9b:1c:a2:
                    57:9b:6a:d8:75:d2:ba:cd:11:9c:33:0a:da:ac:ba:
                    ca:32:81:57:a1:93:c0:be:35:ee:fc:d8:53:80:4a:
                    01:46:cb:6d:03:c2:1e:81:9e:7c:7b:d1:9e:1d:b3:
                    67:28:f8:c5:52:0d:10:d1:ef:2c:a1:80:54:ba:f1:
                    aa:99:49:d6:df:09:2d:22:6c:4a:ba:cc:d2:fb:5a:
                    6d:79:cc:1a:32:cb:bb:1d:fd:24:b6:e0:28:25:a2:
                    b3:12:a4:3f:d8:b9:f5:ab:6c:19:35:50:e5:07:ca:
                    eb:45:00:dc:fd:a7:eb:e1:03:e1:ed:a5:e5:3a:a8:
                    28:5d:84:05:20:a9:e5:6b:df:d8:ba:9d:c9:e4:b5:
                    ea:02:22:38:fd:07:1d:7c:78:2a:a3:c4:21:44:6f:
                    85:7f:73:4c:89:62:01:ed:3c:44:2f:16:45:7a:a4:
                    40:c8:46:89:12:2f:ab:de:ff:8f:21:4e:ea:ee:1c:
                    b8:bf:38:d0:54:d2:6c:9c:ce:c4:d3:66:3d:51:0c:
                    5d:6a:27:5f:48:3d:c8:a0:08:1b:ba:e5:57:d1:82:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:18:7B:41:59:4F:FA:AE:09:E5:9F:0A:7B:7D:26:C1:12:2D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl

            X509v3 Authority Key Identifier:
                keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.33.0-209.251.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:ec:ca:29:74:29:35:a7:3c:c0:0e:e0:dd:c3:62:87:40:
         e7:35:27:b3:e2:b0:fe:59:df:2b:aa:a5:cd:7b:8f:bd:e3:be:
         53:d3:72:b2:f1:a3:e9:df:f0:93:39:83:b4:47:a7:b0:ca:ac:
         d3:15:c7:c9:b7:9d:26:42:e0:a4:ee:6a:5b:47:70:67:09:d6:
         93:c0:15:97:1b:62:fe:f1:58:8d:77:5e:ff:45:25:a3:f3:27:
         e7:09:99:3b:86:79:62:a9:29:df:58:74:18:4f:11:e5:c7:61:
         6a:02:b1:e5:fe:2b:5a:73:51:32:e0:3d:84:6b:04:65:59:35:
         97:7b:db:1e:63:f5:e7:24:d2:cd:90:30:34:98:cd:97:41:d6:
         40:86:ce:1c:c1:8b:63:7b:ba:23:d4:a8:70:fd:f0:7f:9c:d2:
         62:37:c2:9c:bf:10:1d:d9:b8:3c:3d:70:03:f4:9c:b9:5f:55:
         80:41:58:6c:ee:3f:78:dc:55:8f:14:51:51:49:49:54:38:2e:
         48:97:0d:06:9d:5e:77:74:07:d9:f7:b0:c8:53:31:2f:3b:4d:
         c9:25:77:da:fe:02:30:d9:a7:19:a9:fd:96:87:61:2e:d5:aa:
         cf:da:fb:a9:70:f6:bb:21:4d:2a:c1:99:38:79:df:1a:61:a8:
         cc:15:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:44 2025 by rpki-client