Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
File:                     752ad5a3-549a-31eb-8ee9-e86a007198da.roa (raw, json)
Hash identifier:          fOIJxGeaHWsqArBk1xIQ++NWlulpGE3TQ6r9vltdqxg=
Subject key identifier:   53:3C:5D:88:E1:CC:7D:E8:EE:3F:97:A2:6F:79:DE:81:C7:B5:4D:25
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F43285849088170736E212C3B41144A00
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11659
IP address blocks:        169.147.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:70:73:6e:21:2c:3b:41:14:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=019b1399-b2ac-4d54-a764-31d550758e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:92:ec:e6:50:cd:8c:65:79:10:ac:d2:b7:
                    39:e3:6c:aa:d3:8a:13:70:bc:f8:ec:5c:07:1d:73:
                    a8:9d:3a:19:ec:0f:1d:3a:d3:bc:89:55:b0:6b:82:
                    62:db:b3:ce:3a:66:77:02:b6:19:3b:d3:4f:75:47:
                    ce:ad:0e:d5:d5:0d:7c:ec:61:17:a0:72:5b:8e:19:
                    68:5f:e4:47:34:8c:a4:5e:05:e2:ee:00:6d:ee:30:
                    80:4f:66:9b:45:00:6d:dc:70:3a:55:84:88:f4:e2:
                    96:27:03:28:08:21:68:51:5d:9a:cb:03:64:b0:16:
                    38:af:15:4f:1a:48:aa:05:f8:ca:98:64:ac:96:2c:
                    7f:8b:83:2a:69:b7:92:18:d2:ff:96:ae:b3:f4:e5:
                    98:51:c9:08:51:b9:f1:15:fa:e9:7e:c1:af:05:b2:
                    3a:33:f0:cc:ba:39:1e:fc:41:16:c3:0f:25:3b:70:
                    fd:fa:57:84:16:0d:aa:98:a5:8f:61:eb:66:f3:8d:
                    b8:2a:2c:30:c0:59:fa:4a:56:6a:94:74:71:f4:82:
                    83:e5:42:b4:fa:c0:49:0d:88:8d:d6:4e:dc:6d:44:
                    cc:a0:a0:47:91:35:42:bf:fb:c7:3e:0a:e6:38:e8:
                    ee:19:2e:cc:53:0f:6f:8c:05:73:eb:52:6e:9f:98:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:5D:88:E1:CC:7D:E8:EE:3F:97:A2:6F:79:DE:81:C7:B5:4D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:94:d5:eb:e0:b7:22:83:6a:6c:6c:46:af:98:b1:00:70:
         88:16:3d:36:4c:7b:bc:e9:40:d3:07:56:ed:bf:a0:1c:2a:41:
         de:12:37:20:7a:76:52:b8:df:81:3d:ab:c4:4f:e4:26:c9:d1:
         a8:a6:8d:ac:0f:c8:71:1b:23:11:53:f7:ba:ce:4f:80:b9:e7:
         49:95:4b:9e:58:e8:cc:f2:b9:f2:83:c7:e1:a2:42:42:2f:14:
         44:9e:15:92:4e:9b:e5:10:f5:c2:71:5e:1e:ff:69:9a:8c:e3:
         93:71:e5:87:35:36:84:31:34:7a:11:0c:f5:47:29:43:14:df:
         af:f4:f3:2d:26:7a:2f:b0:c7:eb:53:85:e5:b5:52:b4:52:dd:
         af:0e:91:30:1a:73:f0:6d:f2:8c:bc:cd:ca:8e:5e:9a:8f:e9:
         be:e5:a4:12:25:30:19:c6:33:a9:24:1e:0b:2d:8b:74:d2:cf:
         97:12:b2:d0:c8:da:99:83:b2:a3:36:9b:8b:78:86:77:25:2a:
         ed:ff:57:64:43:4e:5e:35:df:3a:0b:b1:80:93:8c:33:c1:40:
         f2:4e:e0:11:5c:d5:34:f9:c2:6d:80:63:ed:98:6b:12:72:0e:
         d2:5e:62:80:aa:f9:38:67:fd:c4:6f:da:e0:b8:20:c3:d7:53:
         f0:38:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:54:08 2025 by rpki-client