Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa
File:                     1c6e5da0-1cd0-34a4-b335-4ca699606908.roa (raw, json)
Hash identifier:          lO8fWw3R3XaInDP0HhtfrcvM9vInWAoLWcyf1bkgPmE=
Subject key identifier:   1B:5D:BF:8B:F1:C2:B0:19:A1:C9:D8:C6:00:15:4C:47:25:3B:F4:15
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858492CAE8C3FDBC01701A20FB280
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33059
IP address blocks:        137.239.201.0/24 maxlen: 24
                          137.239.202.0/24 maxlen: 24
                          137.239.203.0/24 maxlen: 24
                          137.239.204.0/24 maxlen: 24
                          137.239.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8c:3f:db:c0:17:01:a2:0f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e2d44527-7148-4ee2-8805-3145c4f2647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:9f:bc:c6:2b:6a:0f:a6:bf:4f:2a:ad:1c:
                    05:48:5d:76:30:ae:99:18:40:45:94:3f:b0:e7:14:
                    18:5d:67:f3:8a:c3:1d:9f:c1:7f:dc:c2:57:db:77:
                    e8:41:7e:68:eb:e4:89:68:8c:a7:31:a9:b5:ae:35:
                    28:49:4c:55:bc:df:52:52:80:57:89:af:3f:e6:09:
                    af:29:73:9b:33:3f:c3:7b:54:7e:de:f1:0f:bd:ea:
                    28:d9:fe:43:c7:f4:cb:a1:3d:24:76:58:69:02:4d:
                    f1:9e:77:92:f4:80:72:5d:7a:63:f2:a0:8d:c3:6b:
                    23:70:fb:65:74:7b:b8:0d:33:5f:e3:39:a3:f6:63:
                    6b:8e:cf:50:59:82:9d:0c:dd:4e:ea:5a:40:43:35:
                    d4:46:b0:cc:f7:1e:e6:68:a8:f8:1f:1c:41:ee:fd:
                    31:e4:38:d5:4e:f3:ec:11:8d:4b:81:78:58:00:1b:
                    eb:65:99:9d:c5:79:1d:28:f9:8a:db:29:ad:c4:76:
                    d1:2f:83:6b:a2:38:80:4e:93:f5:10:b0:eb:e5:7e:
                    5a:73:78:51:04:8d:ba:c7:0b:eb:74:f8:7b:5e:37:
                    4b:35:fb:51:4b:18:e2:7b:c8:65:ff:e6:70:09:a7:
                    ef:92:5b:5e:fe:3b:7b:8a:e1:14:2e:2f:96:6e:3e:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5D:BF:8B:F1:C2:B0:19:A1:C9:D8:C6:00:15:4C:47:25:3B:F4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c6e5da0-1cd0-34a4-b335-4ca699606908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.201.0-137.239.205.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:4c:20:e4:f5:c8:a7:fb:2f:b4:5e:22:8b:e2:33:4c:6f:
         48:53:cb:33:18:f0:7e:f3:98:50:f2:c2:c7:90:de:70:a1:f4:
         ed:7f:da:90:3b:b1:ce:81:27:8a:22:25:30:8a:52:7b:82:aa:
         d9:9d:de:51:92:93:0b:cf:78:db:31:cf:df:60:31:35:20:da:
         1e:29:2c:f6:ff:c5:b3:fe:49:25:94:88:33:6c:fc:b3:d3:be:
         87:5f:7f:ec:4e:0b:a7:e7:17:a0:3c:6e:fa:23:db:75:00:aa:
         e8:6c:e6:3b:4d:74:ea:e8:80:f2:3d:7b:89:4d:95:1e:ae:9e:
         b8:83:ae:2c:05:33:e1:0f:50:43:1b:7f:fd:17:26:04:d0:b2:
         04:46:b2:cd:0f:1d:78:ad:15:f5:1e:18:c5:1d:4b:f7:d2:2c:
         7a:b7:3f:69:9a:22:b2:ee:fb:f5:91:4a:f8:ef:c6:27:4e:b3:
         69:ce:dc:68:d3:59:0f:d1:f5:a9:7b:ed:7f:20:1e:49:85:5b:
         d2:6e:3d:25:50:24:39:af:cd:ac:71:6c:74:ed:f8:b6:b1:f1:
         b1:c8:01:ce:11:a8:cd:5f:16:ae:29:b3:ab:33:e0:9f:14:3d:
         bc:7e:e1:80:fa:39:31:a2:29:11:7d:46:a5:5f:64:fb:ee:b6:
         9c:62:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:31 2025 by rpki-client