Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/8a30cbf1-b877-32fe-b615-fe4e43cafd88.roa
File:                     8a30cbf1-b877-32fe-b615-fe4e43cafd88.roa (raw, json)
Hash identifier:          eALyiJBYOJTuQ7FO3EtmUiYSRpEJ3gt37Mf+JneEKIA=
Subject key identifier:   34:82:50:93:16:CE:D4:20:55:02:54:85:2A:BA:CF:E3:50:D1:A1:95
Certificate issuer:       /CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
Certificate serial:       010D0C9F43285848F22C60406CFFB514FDAAEB00
Authority key identifier: 26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/8a30cbf1-b877-32fe-b615-fe4e43cafd88.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     32077
IP address blocks:        135.84.69.0/24 maxlen: 24
                          135.84.70.0/24 maxlen: 24
                          135.84.78.0/24 maxlen: 24
                          208.86.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:60:40:6c:ff:b5:14:fd:aa:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c776cd4-6b58-4fae-83e8-50352d4178d4
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=4290bfb9-9fd4-48ff-bf06-a94fa1b5e362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:e2:20:c4:c6:ef:be:95:9c:f5:66:67:ed:
                    67:a4:92:01:81:55:ea:25:93:56:d0:1f:c6:87:5f:
                    21:8c:bd:ff:e9:39:f9:1a:1d:0d:b8:d0:8e:82:27:
                    00:d0:63:c2:f0:db:10:7c:a8:4e:92:74:00:2a:cd:
                    0d:4f:1a:be:a7:52:c0:48:af:b8:6d:68:1f:33:3f:
                    ea:bb:b0:18:b6:e5:87:d7:4a:26:6a:67:c4:ac:21:
                    ba:1a:cf:0d:b6:70:da:4e:ea:87:c1:dc:19:72:7f:
                    f6:73:b8:ef:72:7e:3a:48:2e:79:30:70:fb:3f:20:
                    94:2d:f0:3b:83:f7:3a:ca:4f:1d:e3:04:b8:d4:60:
                    4f:38:b2:ab:5a:b8:ae:62:56:55:67:e4:97:16:f0:
                    11:2d:8e:3a:cc:21:67:06:76:0c:9c:48:e6:84:37:
                    1f:15:ba:34:21:4f:c7:ea:04:f2:51:be:fe:65:65:
                    37:e1:0e:77:80:f9:aa:ff:06:79:2b:95:b7:e2:e8:
                    13:00:6f:9a:f2:55:80:8d:85:49:73:a0:b4:de:8c:
                    39:52:82:7b:29:cd:9d:cf:f5:3c:3f:e7:05:25:ac:
                    65:72:1d:f4:d8:9d:0c:63:03:99:a9:7d:81:82:1a:
                    d5:88:f4:55:1d:1b:ed:41:54:76:c2:69:98:4a:46:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:50:93:16:CE:D4:20:55:02:54:85:2A:BA:CF:E3:50:D1:A1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/8a30cbf1-b877-32fe-b615-fe4e43cafd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4/0c776cd4-6b58-4fae-83e8-50352d4178d4.crl

            X509v3 Authority Key Identifier:
                keyid:26:3F:40:D3:37:9F:BD:E1:95:22:4C:2B:3F:F7:29:19:1D:B8:8B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c776cd4-6b58-4fae-83e8-50352d4178d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.69.0-135.84.70.255
                  135.84.78.0/24
                  208.86.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:a9:45:03:a2:f3:5e:5f:9d:16:79:1c:1f:26:b6:84:2e:
         22:4f:d0:cc:8d:d4:17:18:d4:31:32:40:cd:88:1a:84:3a:91:
         77:5c:22:9b:bb:f7:d0:9c:81:3a:d7:11:bb:b0:25:f0:bf:2c:
         6c:32:c1:ac:cf:77:44:af:38:f6:fc:0d:3a:98:b7:21:e7:b0:
         9d:f5:79:1c:7a:94:98:f5:95:8c:4b:01:4e:b5:c6:14:2b:74:
         08:83:a6:0b:02:4a:ac:49:f3:ed:89:95:03:99:d6:37:3a:c8:
         f0:08:d6:61:d2:28:67:36:82:e0:73:9b:73:80:c6:e7:b7:fc:
         57:ed:91:45:bf:5a:24:ea:f5:88:da:9a:d6:75:52:09:83:1e:
         b2:7e:30:2f:9c:7e:c4:15:4e:c2:90:17:c0:10:92:b3:e9:9a:
         86:b1:15:ce:ee:9d:cc:4d:48:ab:e8:39:63:dd:e6:d5:47:ca:
         5c:6c:6f:6c:ae:92:00:36:8c:d5:70:8f:44:47:c3:21:d0:0c:
         9d:d0:16:f2:21:9f:36:db:90:66:23:7a:20:af:d1:b7:d3:2e:
         c5:80:a8:d4:12:59:17:02:d9:f6:17:48:82:b1:54:35:87:f3:
         b4:4e:ea:04:4c:71:9e:52:4d:6b:57:12:72:f1:34:7f:ed:71:
         b7:c1:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:37:47 2025 by rpki-client