Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
File:                     f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa (raw, json)
Hash identifier:          lUVhBOOYQS+KWtHefBcuTVWyqTAF3QmJfM/ALutTN94=
Subject key identifier:   1E:DB:F1:AF:D7:D1:8C:82:9C:98:96:90:BB:49:C2:06:A1:71:65:69
Certificate issuer:       /CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Certificate serial:       010D0C9F432858495ABEE20080DB82E32080E340
Authority key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     15121
IP address blocks:        66.102.144.0/20 maxlen: 24
                          198.105.28.0/22 maxlen: 24
                          2604:a780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e2:00:80:db:82:e3:20:80:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fdcce5-d149-4129-97c3-c60e86600fb8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=9b29f4fe-bef8-47e9-806b-d08d78ac93da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:51:e2:72:33:70:05:8d:35:f9:03:f1:ed:
                    e4:37:3e:76:74:a5:6b:fb:79:ac:8a:23:d2:fb:2e:
                    10:53:68:0a:79:55:bf:3b:6c:78:f6:6d:d2:61:e8:
                    e3:27:65:ad:79:33:2c:6b:f1:95:37:34:c8:77:3a:
                    8b:63:b5:66:ad:6a:92:e0:04:41:f2:00:1f:37:00:
                    69:14:01:37:86:ff:ee:ee:98:c1:3a:ff:4b:a7:c9:
                    c4:01:fe:89:1f:fe:bf:65:7f:07:ed:f3:7c:58:15:
                    ba:9a:6b:bc:fa:d6:5f:02:b9:b9:3b:bc:82:68:58:
                    b0:00:8b:11:4b:1a:11:8f:bd:9a:74:3b:ce:99:99:
                    2a:de:6f:0a:89:88:6e:62:0e:e2:fe:dd:ec:da:31:
                    e0:af:25:63:c0:89:c2:d2:e8:9c:15:17:da:93:aa:
                    33:09:d0:77:fc:6d:c6:12:72:fa:56:16:44:e0:4f:
                    2b:32:74:0a:75:94:f4:bb:31:65:6e:1f:a9:ef:55:
                    05:c0:af:66:57:ed:22:31:37:b5:f8:5e:6d:4c:34:
                    01:d5:44:84:bf:48:37:d6:d5:0f:f7:3a:b0:4c:f3:
                    ae:85:ec:18:0a:89:c6:bd:b0:03:5f:a5:a9:89:79:
                    7d:49:bd:f0:49:da:11:66:77:0d:2b:e1:e3:b6:a7:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DB:F1:AF:D7:D1:8C:82:9C:98:96:90:BB:49:C2:06:A1:71:65:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl

            X509v3 Authority Key Identifier:
                keyid:8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.144.0/20
                  198.105.28.0/22
                IPv6:
                  2604:a780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:19:76:4e:d7:e5:9f:09:fc:7d:b3:9e:57:c5:b6:6d:7c:
         db:9b:42:2d:2e:f6:f9:8e:01:7b:d9:70:4d:48:df:31:2d:13:
         19:13:50:d9:f4:f6:eb:23:be:bb:0a:32:38:72:e0:bc:c8:cc:
         9e:5e:28:7e:03:54:ce:a9:e9:77:b2:73:4e:22:7b:88:57:2f:
         9a:cf:36:81:cc:04:c7:42:71:b4:90:ad:10:36:ba:90:41:07:
         a9:0e:df:56:ad:df:e1:0c:0b:22:03:de:4f:cc:60:21:32:90:
         7d:80:d7:ce:17:8f:de:a5:d1:bc:b1:84:ea:11:32:53:fa:2f:
         6c:26:94:34:d8:62:ca:0a:28:89:d9:a1:f3:2b:55:de:4e:61:
         55:73:6f:89:dc:f0:c6:a9:83:15:68:f2:65:e4:f4:cc:eb:7f:
         51:9b:72:1d:d9:cb:08:a5:9d:2f:99:0e:05:1c:28:cc:25:fe:
         74:5b:3e:ff:cc:52:33:48:a5:c4:55:78:75:91:7b:70:73:0d:
         db:bd:45:cc:19:c5:93:b2:39:d2:86:ff:7f:45:a7:a5:19:28:
         1c:1a:b1:8f:2d:e0:2e:96:0f:f6:8b:1a:75:a0:9b:c6:bc:86:
         3c:24:fb:ee:fb:0d:1b:31:07:84:9f:ba:d7:3d:b3:c4:99:a9:
         3d:ec:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:07 2025 by rpki-client