Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
File:                     3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa (raw, json)
Hash identifier:          9yHLKHByjPkYAzem0q/+/gZZ7LSM37zJJzebyoqv2pE=
Subject key identifier:   AA:5B:E7:4B:1A:33:4C:C5:4A:E2:B2:7B:F9:DC:CB:37:55:69:2E:C0
Certificate issuer:       /CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
Certificate serial:       010D0C9F43285849287E6E5D9E88BDB9D108ED80
Authority key identifier: 08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     36326
IP address blocks:        158.51.132.0/23 maxlen: 24
                          2602:fcd9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6e:5d:9e:88:bd:b9:d1:08:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96beed0-0beb-4387-bde4-56aa0782ae2c
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=d395476b-bd5d-41f6-857d-9de815640659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:22:48:4b:fc:e4:39:5c:ed:58:b0:76:68:
                    23:bf:ff:52:cd:c5:46:ea:d2:59:ee:dc:fc:e9:f1:
                    a9:1a:40:71:b9:49:ae:27:a5:69:5e:d8:0f:45:7f:
                    49:9c:cf:b3:94:96:0a:cd:3f:4a:d5:06:98:00:c1:
                    1d:55:19:e5:f4:22:34:7a:9c:ef:e3:49:1a:9b:3d:
                    75:fe:1f:72:08:20:e4:5e:cc:d1:33:50:ac:de:3d:
                    01:f3:ea:5a:8e:71:69:5a:26:a2:87:78:af:26:b2:
                    d4:3c:ac:7e:41:a3:85:9f:7b:c4:ec:4b:9c:e8:19:
                    6b:5e:3a:72:f2:30:77:66:5d:83:60:02:fd:95:f4:
                    cd:28:a4:b5:79:db:03:11:07:af:a8:be:15:02:98:
                    dc:1b:e8:12:b9:c5:03:99:7e:2e:73:4e:7f:4b:8d:
                    5c:be:16:e8:fd:d5:6e:50:ac:77:4d:9e:ed:f5:3a:
                    bc:36:30:cb:cc:b8:77:85:62:c7:33:ba:84:f5:73:
                    32:1e:2c:ab:a8:23:b6:b0:b8:74:60:a6:46:a1:9a:
                    fa:72:07:6d:10:6b:50:f9:28:dd:2c:32:b1:e6:23:
                    5e:37:7e:22:47:77:06:5c:b2:db:70:5f:a2:69:c4:
                    f7:b7:2e:2f:85:a1:c8:a2:d4:4d:ae:17:42:44:94:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:E7:4B:1A:33:4C:C5:4A:E2:B2:7B:F9:DC:CB:37:55:69:2E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/3b2b7fdc-8a9d-3768-bc01-c8e2da27ef31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c/e96beed0-0beb-4387-bde4-56aa0782ae2c.crl

            X509v3 Authority Key Identifier:
                keyid:08:E6:A0:B8:AF:1D:0E:39:34:3F:22:B9:3A:12:AD:B4:BF:67:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e96beed0-0beb-4387-bde4-56aa0782ae2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.132.0/23
                IPv6:
                  2602:fcd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:e8:a7:f9:9d:f7:df:51:1c:7d:b8:31:33:4b:51:aa:88:
         66:c3:97:95:a9:cb:d2:b1:0a:74:3e:1d:a6:81:58:8e:52:d9:
         3d:b0:ff:95:f4:1c:ee:5b:e0:b2:dc:9d:bf:e0:94:22:f7:8c:
         65:1f:41:75:58:04:1e:60:07:66:c7:8d:5f:55:0c:30:89:80:
         b8:7a:ff:d6:fc:85:b1:66:4c:f5:5d:99:5e:02:26:72:fa:5f:
         ab:3e:5c:4b:f4:bd:1c:a0:86:78:73:be:01:14:58:88:31:77:
         d9:fa:eb:05:ca:1f:6c:24:dc:30:fe:b8:3b:12:43:da:74:1d:
         76:a1:3b:5c:ac:90:90:ae:7c:56:c4:cb:d5:e0:cc:29:4c:5f:
         78:41:58:1e:a7:ee:0e:d0:d8:35:c9:37:61:82:72:04:cc:20:
         b3:dc:92:ab:00:f9:fc:ba:26:67:31:58:f0:bc:92:0c:15:40:
         66:5b:f4:a9:8d:5e:41:07:fd:11:46:2d:64:ae:69:f6:11:c5:
         ba:c5:c7:50:12:61:2e:89:8b:6f:a1:3f:fa:0e:c2:3f:8f:50:
         0d:a8:9b:14:71:27:a4:91:5a:49:46:64:c9:93:11:4d:80:24:
         9c:d6:29:aa:5e:25:f8:60:a8:2f:93:07:1d:68:4a:78:33:fd:
         44:2c:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:55 2025 by rpki-client