Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
File:                     94a5b142-649d-371a-8c3a-822429553a6a.roa (raw, json)
Hash identifier:          H+bkp7GWG/l/p4Idl/edUddRWuzPwMTe0DMmfq9VTkw=
Subject key identifier:   17:61:F6:D8:6A:68:9E:40:B6:FE:E9:0C:80:BD:8D:8D:FA:42:77:51
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584925B3AD3DC855C7BF5CDCFF00
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     46832
IP address blocks:        150.199.4.0/24 maxlen: 24
                          150.199.90.0/24 maxlen: 24
                          207.160.152.0/21 maxlen: 24
                          209.106.228.0/22 maxlen: 24
                          209.106.232.0/21 maxlen: 24
                          209.106.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ad:3d:c8:55:c7:bf:5c:dc:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=4bd845fb-2fb8-4a82-8079-8a8db1b23b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:d4:e7:79:33:34:cf:19:42:a3:03:e6:7a:
                    16:43:c5:26:a5:42:81:52:81:fb:4a:72:04:c5:c5:
                    cc:e0:b6:a3:e4:cf:22:2a:5c:a9:89:89:4a:01:56:
                    c6:a6:7e:3f:a2:7f:53:b6:ff:02:1d:8a:74:97:56:
                    e2:f0:7b:5a:c1:4b:15:7d:70:c5:85:6d:47:c2:09:
                    e2:db:dd:97:55:e0:3d:93:68:80:26:30:a1:77:f7:
                    74:13:11:1f:2f:1d:a6:38:ea:1a:61:ff:93:06:f9:
                    43:c8:0e:9a:fb:87:b7:56:53:0a:b9:a0:69:3f:22:
                    59:61:b2:e0:b2:8e:e2:d6:e9:09:94:f4:cc:46:5c:
                    fa:3d:cc:57:74:53:c8:2c:21:40:b7:04:56:99:43:
                    1d:32:d2:3a:97:87:2b:da:66:23:2c:41:f2:d6:ad:
                    d0:07:f8:45:6c:4b:c7:a4:25:e9:d9:f9:cf:f6:b1:
                    a0:9b:43:0c:4d:06:26:3e:10:ee:5c:be:a2:89:5c:
                    1f:af:fd:35:f5:7b:15:5b:75:41:72:e2:70:13:b4:
                    77:d3:ce:63:36:c0:94:a8:bd:8c:76:19:64:13:0f:
                    14:b3:ac:59:cc:15:78:52:26:9e:2f:da:ea:9f:76:
                    08:6b:9a:9a:f5:06:e7:13:c8:e6:21:c6:45:67:69:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:F6:D8:6A:68:9E:40:B6:FE:E9:0C:80:BD:8D:8D:FA:42:77:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.4.0/24
                  150.199.90.0/24
                  207.160.152.0/21
                  209.106.228.0-209.106.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:a1:af:12:dc:09:e5:03:ad:66:44:d4:5c:0c:44:7a:57:
         42:4b:b5:18:2d:88:d7:d2:68:1f:d0:98:d2:9a:39:c4:64:15:
         55:df:26:1e:18:ac:f4:31:5f:bc:45:6b:71:c4:b7:88:42:e8:
         d1:9d:3a:af:79:fd:e4:34:4b:b3:ac:45:20:d3:f7:0e:17:67:
         81:9b:54:74:eb:28:e6:4a:bb:f8:7e:86:73:4b:6d:0f:81:07:
         85:46:ce:b5:b3:d2:5a:ad:1a:25:90:33:de:f2:e8:e7:ff:4f:
         06:14:83:06:60:be:c5:38:99:48:3c:80:d0:15:62:32:b0:7a:
         d2:16:e7:33:76:13:bc:5f:9c:8e:02:6b:5d:23:c6:81:a3:76:
         e6:29:81:e5:ea:d9:7a:8e:0d:ec:c9:7d:7a:d0:b9:1f:27:83:
         54:43:2b:1d:7b:2d:98:b5:e3:9a:e7:1b:72:51:b6:b1:3a:c8:
         5b:34:01:d0:e9:78:19:64:a4:4f:76:c9:97:45:74:3d:d6:9d:
         dd:0c:f6:3d:99:dc:7a:6f:41:18:ce:7c:dd:92:ca:b9:c8:69:
         c8:c0:1e:8d:6e:2c:20:0b:ab:ec:02:4b:28:e4:a7:25:ae:66:
         34:1d:81:88:b9:d4:1f:87:13:ee:c4:c0:7e:ef:68:e7:d5:c9:
         45:a0:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:55 2025 by rpki-client