Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
File:                     12670d4d-d305-33df-8fd0-2996efbc81d5.roa (raw, json)
Hash identifier:          tPgMS2Yq/uImY1+8m/1Zse1/Mg03Ha+bE8JVPEZEoXU=
Subject key identifier:   9D:66:D9:5C:7A:B5:84:0D:57:88:F5:6E:AF:55:D0:8C:83:B6:8F:69
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858490021613B3908C92A8AEB2100
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     46455
IP address blocks:        67.22.208.0/21 maxlen: 24
                          67.22.216.0/22 maxlen: 24
                          67.22.220.0/24 maxlen: 24
                          209.51.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:61:3b:39:08:c9:2a:8a:eb:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=0291dc38-0be2-4897-9228-7bd68e481cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:e2:0b:be:a2:36:4b:1d:b6:15:8d:da:2b:
                    9d:11:d2:9d:ab:ea:3c:9b:39:d3:5f:1b:c6:1a:ee:
                    85:23:67:91:6f:cf:2a:4e:76:1c:08:6a:b0:d3:8f:
                    77:fd:6a:68:31:6c:1b:e9:83:43:28:7c:ed:3c:ed:
                    2b:ef:19:30:e0:4f:0e:07:0c:d5:1d:2e:c0:11:b1:
                    bc:12:53:a3:d7:ed:34:3a:d8:15:eb:7d:f4:82:86:
                    08:13:26:01:d6:c5:aa:92:56:01:ab:de:8f:c9:d0:
                    28:c3:f2:37:45:e6:a8:4e:48:b0:55:05:9a:c6:e0:
                    70:d4:aa:4c:51:79:db:7f:70:52:c5:bf:13:5f:d3:
                    a7:d9:76:fb:e3:76:e7:4f:43:4b:c5:f9:65:02:b8:
                    86:5f:aa:f4:d6:c4:2c:13:75:6f:b0:3c:19:67:83:
                    eb:dc:cc:d6:95:10:29:3e:46:b2:30:13:54:15:f6:
                    71:82:8b:fa:83:ae:db:d4:7d:d4:7b:6b:c7:f3:67:
                    9a:f6:9e:c6:4c:5c:3b:aa:5f:e6:44:fe:e7:7b:2a:
                    31:66:f9:b0:ce:66:98:e3:14:3f:95:fa:69:0b:68:
                    eb:d5:c1:35:e5:64:07:45:65:77:33:c5:0c:57:73:
                    8d:46:d9:a1:ec:2f:a8:c2:f9:7b:f5:b1:82:46:96:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:D9:5C:7A:B5:84:0D:57:88:F5:6E:AF:55:D0:8C:83:B6:8F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.208.0-67.22.220.255
                  209.51.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:e5:d7:b2:86:a2:50:0a:8f:3a:c3:5e:b3:e9:61:91:bc:
         7f:7a:2b:a7:69:24:7f:93:87:22:86:a4:0e:1f:e8:8f:10:3b:
         55:51:08:3b:ed:90:d0:ed:04:ae:f7:3d:05:6e:13:f6:be:5f:
         42:67:44:ae:7a:5c:72:45:71:10:5a:6a:16:e1:13:39:86:38:
         5c:3d:4b:d2:b4:e0:7d:4b:f1:a3:8f:6b:40:6a:49:34:5b:11:
         61:06:93:56:f3:a2:de:93:9c:fe:c4:c8:d2:da:85:5a:90:af:
         85:22:ac:a2:4c:d7:30:f1:15:72:9f:33:40:2d:c2:74:6e:e1:
         6e:d3:2c:ec:80:b7:58:1d:5a:d7:1d:10:24:83:ce:7f:be:a4:
         89:f0:3d:c5:15:30:1b:80:6e:97:d1:6d:9b:e2:8d:29:f8:08:
         40:c6:2b:b6:09:ec:68:40:67:0b:e6:64:69:2d:e3:e6:fd:c1:
         8d:ba:99:32:ee:c9:7b:89:26:ad:66:bb:ca:fc:59:e3:97:f9:
         94:47:62:b0:27:9b:22:94:d1:96:17:37:01:7b:87:55:7d:3f:
         03:3d:11:c1:a0:cf:02:c4:f9:57:b6:0b:a1:de:26:1b:bd:66:
         8b:1f:b1:92:33:5b:87:ed:91:b7:01:79:93:18:7f:c6:52:08:
         29:93:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:54 2025 by rpki-client