Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
File:                     1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa (raw, json)
Hash identifier:          1/2N4YG227qSq05suL9nYUcVOXJUt0bf4oqB9HwkkUk=
Subject key identifier:   CD:95:36:7A:6D:B8:E6:49:D2:42:4A:66:0C:5E:A6:88:6D:91:53:71
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F432858495ABEDFA26962890B9F16D0C4
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:df:a2:69:62:89:0b:9f:16:d0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=1d213ec7-f86a-43b7-8faf-7dcd0d545aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:67:65:fe:55:00:7c:a3:b6:34:0f:e5:73:
                    d0:b1:d7:9c:26:58:27:a6:e5:18:47:da:58:80:fe:
                    ba:90:70:55:f3:18:f2:3c:89:82:9e:5a:8c:1d:33:
                    18:72:c7:15:0e:9a:b9:99:e8:92:29:82:f3:fd:5b:
                    01:c0:c2:32:f7:d4:4b:b4:55:77:15:9c:a4:35:6a:
                    a0:e6:13:b5:e7:e0:29:af:86:45:a6:05:86:49:47:
                    a2:88:50:5b:db:a8:b4:eb:0f:69:f0:59:da:15:e0:
                    86:b6:80:16:8b:01:94:83:ee:b6:2f:2d:3a:70:7c:
                    2c:09:00:10:d7:c0:22:91:e0:6d:2a:47:44:ce:81:
                    bc:a3:6e:a8:15:8a:0b:26:36:72:c4:c3:77:ea:9b:
                    ab:19:cc:0d:fa:75:16:f2:10:c4:fa:03:8e:8a:8e:
                    ea:d8:11:bb:b6:1c:5e:4b:5e:98:46:49:5b:14:3f:
                    58:41:6b:76:17:9e:94:c6:11:6c:74:16:02:4a:7e:
                    90:45:16:04:02:50:78:7a:8b:59:ad:b1:84:2a:af:
                    ee:7a:95:96:9c:f3:b1:3f:7f:7c:2a:40:c5:07:70:
                    a2:6c:b9:85:13:e8:51:ee:68:d5:7d:cb:b9:19:ba:
                    80:fd:19:7b:b2:de:68:1e:58:70:4a:7a:82:2c:8a:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:36:7A:6D:B8:E6:49:D2:42:4A:66:0C:5E:A6:88:6D:91:53:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:22:63:2b:c3:67:1e:28:d5:80:dc:c5:dd:0d:7e:3f:3f:
         22:76:17:bf:0f:c9:1a:44:40:3f:e7:ee:3e:95:c1:cf:b1:34:
         a2:83:42:49:53:93:2f:92:13:4b:e2:3f:e7:0d:3c:71:32:63:
         be:56:43:fe:04:e7:c2:5d:e7:bf:65:f6:73:9b:ca:23:70:ee:
         86:b6:30:3b:7b:fc:d3:08:85:8e:d6:d2:9a:c1:3a:6f:44:43:
         3c:3b:5e:e7:1c:6c:0b:78:80:d2:63:f9:ea:cf:40:df:8a:97:
         95:49:85:94:90:cc:20:a9:d5:69:94:fa:9f:4b:fd:de:47:54:
         12:d0:54:b2:fc:5e:cc:1a:a2:5b:94:09:f1:0f:1d:8a:4b:cd:
         65:88:ad:ba:10:59:b7:6e:6f:d2:68:04:9e:cd:12:f2:fa:69:
         42:2b:57:7c:10:de:84:4d:3b:3c:45:eb:e6:72:cb:61:b9:97:
         91:a9:b4:a1:9b:b8:d2:ca:ee:65:d2:78:5c:88:5e:06:62:66:
         6c:7b:cf:0a:7b:7d:3a:57:bd:f8:a2:94:77:75:79:75:35:4a:
         9e:86:3a:58:9b:70:ea:42:1f:40:c8:27:05:d1:57:19:fa:59:
         5d:06:6a:7b:b3:d5:2f:e1:b3:66:61:6f:a9:49:23:39:0b:21:
         6c:0d:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:24 2025 by rpki-client