Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/ec87ca35-8feb-3837-a7d4-3372602d346a.roa
File:                     ec87ca35-8feb-3837-a7d4-3372602d346a.roa (raw, json)
Hash identifier:          Jb9mkGDDe92zZkJalBNNyUOtp3p/1fTbpcXQvVVB3CQ=
Subject key identifier:   F9:EC:6C:46:48:FF:B1:82:C4:54:E8:6E:E2:84:86:54:A8:FE:12:38
Certificate issuer:       /CN=80945323-e0d5-4954-9f19-e93c63454702
Certificate serial:       010D0C9F4328584891DB2CBE8B8A6EF2D7CC9F20
Authority key identifier: 79:0D:C7:C2:BF:3E:85:28:FE:98:F0:81:30:76:62:26:7F:FA:C4:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/ec87ca35-8feb-3837-a7d4-3372602d346a.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     39948
IP address blocks:        69.53.208.0/20 maxlen: 24
                          74.209.144.0/20 maxlen: 24
                          192.169.12.0/22 maxlen: 24
                          216.224.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/80945323-e0d5-4954-9f19-e93c63454702.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/80945323-e0d5-4954-9f19-e93c63454702.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2c:be:8b:8a:6e:f2:d7:cc:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80945323-e0d5-4954-9f19-e93c63454702
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=61fa550f-68b9-4595-abe8-46b375dbf479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:ee:e7:3d:8e:9a:78:67:77:60:5d:67:59:
                    1a:b5:0f:d2:65:63:5e:27:55:6a:88:29:fc:38:93:
                    fd:e5:0e:e3:59:28:7e:76:60:ef:9a:50:ed:9a:35:
                    fb:b7:b4:10:16:d6:ad:82:95:78:32:42:e5:17:d1:
                    3f:d6:c3:54:96:d8:ce:28:b7:a1:8e:5e:c1:28:99:
                    1b:ee:a0:45:8e:26:70:aa:f4:93:1b:21:08:3c:df:
                    fe:ec:ac:34:70:e5:6c:27:41:19:43:75:d8:07:e4:
                    31:66:83:81:f1:8b:41:26:0a:6b:4c:fc:5a:ce:86:
                    dc:a4:70:f7:5f:ff:58:e2:65:27:f2:4a:2f:77:6e:
                    9e:d9:14:a5:b0:4d:78:b7:2b:10:79:14:1f:a5:b9:
                    f3:0d:66:68:14:a3:9c:4a:00:20:0f:96:70:78:a8:
                    9f:66:8f:be:84:f4:47:42:dc:30:cc:be:9b:aa:4e:
                    ff:2f:64:05:b1:5a:cc:5e:3e:15:cd:52:3c:48:a5:
                    43:fb:87:2a:45:c6:03:d6:d6:d5:f2:d4:13:9f:46:
                    db:c3:52:b0:f2:f6:d4:08:c6:db:39:42:d2:c2:18:
                    81:8c:b1:50:5d:2f:43:96:47:0e:14:06:b3:51:9a:
                    72:70:e8:91:80:7b:fc:0c:5b:10:47:31:d4:2b:9c:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EC:6C:46:48:FF:B1:82:C4:54:E8:6E:E2:84:86:54:A8:FE:12:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/ec87ca35-8feb-3837-a7d4-3372602d346a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702/80945323-e0d5-4954-9f19-e93c63454702.crl

            X509v3 Authority Key Identifier:
                keyid:79:0D:C7:C2:BF:3E:85:28:FE:98:F0:81:30:76:62:26:7F:FA:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80945323-e0d5-4954-9f19-e93c63454702.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.53.208.0/20
                  74.209.144.0/20
                  192.169.12.0/22
                  216.224.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:40:94:7d:76:c6:e1:18:b5:17:aa:4a:18:7c:68:6b:1d:83:
         e0:6d:14:8f:a7:c3:25:62:11:bb:2d:e7:88:c8:43:85:0b:42:
         c0:ef:13:da:07:49:01:c8:b4:05:59:c6:69:f1:f9:00:9b:ec:
         80:ff:cd:da:be:d1:43:09:81:8f:8a:d5:c3:23:33:12:76:65:
         a8:47:38:10:f7:97:6d:08:fc:29:2e:4a:37:57:8d:a3:a8:99:
         99:70:18:08:3c:5b:20:73:e3:b7:b4:df:0b:cc:70:7e:cc:09:
         14:f2:b4:1b:5c:bd:c0:d1:cb:b5:64:2c:54:c0:a8:1e:1c:09:
         26:61:0c:bf:2f:61:ea:78:e0:ef:71:1e:68:9d:52:05:47:6e:
         d1:64:ea:4b:51:ed:61:66:15:e1:4e:d7:62:26:d9:c0:e7:d6:
         ba:1c:ec:85:12:fc:e3:c6:cf:fc:c8:4d:ce:33:61:4c:3b:e9:
         8b:95:61:97:fe:2a:8c:e2:d2:41:eb:a4:b9:8c:64:7c:5a:3b:
         1a:b4:3c:73:66:5d:5f:72:33:ee:80:8c:bc:f2:c7:0c:26:79:
         8c:d9:6d:9d:08:d8:18:62:35:47:12:12:ef:ca:7b:55:9e:5f:
         b8:99:cd:b7:36:51:f0:f7:8b:b4:41:9e:d6:37:ac:3f:73:68:
         d3:3a:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:56:33 2025 by rpki-client