Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
File:                     511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (raw, json)
Hash identifier:          pMY2JWMfgs60fkNJ/ll17UOGxeW84lfZq/vyxjzF6K8=
Subject key identifier:   52:D7:F5:1E:DD:AB:AB:17:90:4B:B3:DC:EB:3A:61:BE:A4:EA:D4:6B
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F432858494E2EB2159A2860B35B8C2F20
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     46475
IP address blocks:        63.143.32.0/19 maxlen: 24
                          64.31.0.0/18 maxlen: 24
                          69.162.64.0/18 maxlen: 24
                          74.63.192.0/18 maxlen: 24
                          162.253.40.0/22 maxlen: 24
                          192.169.80.0/20 maxlen: 24
                          208.115.192.0/18 maxlen: 24
                          216.144.240.0/20 maxlen: 24
                          216.245.192.0/19 maxlen: 24
                          2607:ff68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b2:15:9a:28:60:b3:5b:8c:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=07f59264-2eb5-4356-96fd-1c4e89a25ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:ca:5f:f4:7f:2c:a6:11:68:34:1e:25:4a:
                    0c:6b:ba:01:3f:61:be:8a:d6:30:5b:f4:cc:81:34:
                    33:b5:77:e6:8d:83:81:ec:c0:a0:97:c0:0a:b2:70:
                    4f:5c:28:e6:15:b2:5d:b0:57:73:60:2d:49:6a:c5:
                    00:e0:ca:28:b1:c8:10:66:9a:d2:f5:b9:a6:bd:2f:
                    e2:9e:b1:c4:7a:17:f1:55:76:3f:4e:12:6c:da:6c:
                    13:8e:95:8c:b5:a8:1c:9e:a3:9d:16:b9:5f:52:a3:
                    c0:d5:5b:9d:fa:56:35:18:af:34:a3:ee:63:0a:de:
                    f6:bc:05:7c:c1:f6:f4:c9:89:30:e3:64:f2:70:6f:
                    be:17:33:71:e3:cd:c6:cf:1c:a3:18:b2:0e:ad:f3:
                    40:3d:59:54:ed:c6:d7:f7:79:90:a0:af:25:72:30:
                    9c:09:f6:b3:1e:f5:77:97:16:77:fb:4a:c3:57:c1:
                    67:66:2c:91:a3:c9:7d:f7:07:4f:b0:3f:bd:10:00:
                    dc:ab:8c:7e:3c:37:5f:7c:fe:73:a2:ac:e6:a5:0f:
                    1e:60:a4:3f:29:21:a4:b8:37:dc:15:13:9c:ea:5e:
                    70:96:a5:fd:b1:75:cd:02:9e:8d:91:03:84:cf:66:
                    94:44:83:13:cf:a5:ba:4a:c0:da:9e:33:81:39:bd:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D7:F5:1E:DD:AB:AB:17:90:4B:B3:DC:EB:3A:61:BE:A4:EA:D4:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:56:61:bd:24:aa:46:24:a7:48:aa:3d:c0:7a:8b:72:57:43:
         16:7a:48:02:37:12:7d:02:1d:98:1d:ec:2e:69:fd:79:81:e5:
         0c:0d:5e:c0:3d:f6:4d:a5:7d:68:65:ce:98:2a:91:6a:df:88:
         b8:ea:a0:ea:19:af:d1:c0:93:47:3f:7e:38:36:8c:6b:a3:1f:
         5b:5f:ce:03:93:12:b1:7c:aa:15:6f:33:5e:5e:a4:ef:23:22:
         1d:21:64:93:90:a8:c2:b6:7b:88:13:68:dd:2e:a5:9e:81:36:
         08:63:3a:56:62:c2:69:47:ed:f1:c6:6e:4c:13:e3:e0:6e:70:
         60:b4:16:d8:23:f0:ce:10:16:56:1b:79:b1:95:32:9e:bd:d2:
         3d:06:84:30:75:ad:27:0f:44:84:32:78:fc:d1:2f:10:e7:db:
         cc:eb:82:6f:d6:3f:ab:e0:c5:a1:3d:6f:d8:9b:57:31:d6:71:
         0b:d0:7c:0a:69:e0:3b:f8:d5:5f:99:6a:7b:30:55:a6:da:1f:
         ed:6c:d6:3a:2f:07:28:13:1f:b2:e4:8c:ca:ae:aa:68:42:1d:
         e2:24:36:14:53:70:5f:48:88:63:8c:5c:a9:9d:f8:1b:f2:79:
         fb:6d:64:b7:1c:86:c8:00:8a:71:76:3a:63:7a:9e:87:92:13:
         d8:f4:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:05:18 2025 by rpki-client