Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
File:                     b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa (raw, json)
Hash identifier:          XfmmLl6FfAadHHkglaZRwTNFKWar15dHNvnzbi9W3U8=
Subject key identifier:   D7:47:4F:E6:0E:9D:2E:19:AD:B2:B9:49:11:B3:6D:C9:85:C1:71:80
Certificate issuer:       /CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
Certificate serial:       010D0C9F432858489340B2EE88678225BCABAFBF
Authority key identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     393796
IP address blocks:        63.245.180.0/23 maxlen: 24
                          104.128.32.0/20 maxlen: 24
                          130.51.32.0/23 maxlen: 24
                          2604:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b2:ee:88:67:82:25:bc:ab:af:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=130c6f01-36ee-4249-916b-fc6a02204d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:22:92:59:5a:6e:3a:84:a9:60:3a:e3:21:
                    54:9e:c5:79:ed:15:80:08:3d:da:1b:6f:23:73:58:
                    f4:ae:e1:0f:15:1d:67:67:12:0e:2f:d7:1c:f6:8c:
                    05:6a:7a:09:c2:9b:de:57:39:41:af:8c:fd:e8:74:
                    3e:50:93:72:dc:45:78:09:5d:de:8f:62:27:98:d6:
                    b7:11:31:c3:ed:73:7b:37:8e:d0:f4:b9:55:1e:3f:
                    a9:95:ea:26:53:d1:5b:97:1b:d6:fa:16:ef:8d:01:
                    92:ab:65:e6:af:b2:df:7e:72:17:22:c8:c7:6f:71:
                    a4:38:6c:9c:31:92:ca:e5:f3:84:b2:85:db:5a:ec:
                    9d:18:4c:2f:17:19:c5:84:77:b9:85:34:08:0e:d7:
                    19:d2:a7:a2:a2:e3:4c:63:9c:f9:cd:9e:14:12:c5:
                    b9:ed:bf:5a:8e:d5:c0:2d:52:62:01:3b:cd:55:24:
                    1f:70:d5:ad:78:b2:7f:98:c7:09:42:4c:1a:ac:b9:
                    5a:45:7f:e4:bf:48:21:86:66:08:d6:41:63:1e:11:
                    e0:71:35:b3:ed:d4:18:b4:b9:d4:df:d2:b8:b9:48:
                    58:74:9d:fc:4d:1e:84:e5:30:be:17:e3:7e:a3:e8:
                    40:b3:fb:7c:40:74:8b:d6:8c:5d:49:9c:53:16:50:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:4F:E6:0E:9D:2E:19:AD:B2:B9:49:11:B3:6D:C9:85:C1:71:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl

            X509v3 Authority Key Identifier:
                keyid:13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.180.0/23
                  104.128.32.0/20
                  130.51.32.0/23
                IPv6:
                  2604:7640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:97:8c:25:0d:65:81:24:e9:00:9c:d5:15:e1:57:49:33:a5:
         19:4a:59:b3:37:a5:21:69:59:61:5c:11:3f:c1:f2:f6:de:50:
         13:c8:60:b2:a0:c3:d5:79:af:56:dd:77:bc:a5:c5:1f:50:59:
         5e:21:3d:2a:76:5a:c2:d0:17:9a:dc:1e:9f:ff:6b:36:ca:66:
         77:1e:e1:87:b3:34:63:88:a0:1f:f5:52:4f:dd:95:75:60:47:
         23:8f:7c:c8:f1:cb:8d:8f:cf:66:37:03:75:cb:6b:91:4c:f4:
         83:48:0b:07:f0:ea:69:7e:e8:1b:6d:a7:15:2e:ce:9b:fa:21:
         55:f2:6f:69:cb:c5:25:f7:08:e6:62:3b:de:27:15:3f:29:d2:
         90:9d:2e:6a:83:d5:e7:9f:35:05:8f:d5:79:b9:42:bd:d3:f3:
         c8:d7:22:82:fa:14:bb:5b:30:1b:85:5d:27:ca:38:ec:e6:99:
         10:90:6e:0b:25:9d:72:ad:f1:51:51:eb:62:90:d1:73:83:4a:
         40:f3:5a:cb:81:a6:c0:3d:fc:a4:7e:ef:cb:c2:1a:1c:8c:24:
         5d:1d:01:55:36:32:cd:17:ce:1a:35:16:d4:d0:76:0b:0d:4a:
         06:9c:43:db:d4:19:61:40:11:81:70:46:a8:2c:05:ab:37:1a:
         84:7d:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:03 2025 by rpki-client