Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
File:                     6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa (raw, json)
Hash identifier:          M6d9l89+MrmEiYS8bcAQWbi1fqfpCThqfx6T2co9USE=
Subject key identifier:   E9:28:62:0D:CB:70:7D:7C:ED:ED:3B:EA:E4:C1:1B:8B:11:68:FC:9C
Certificate issuer:       /CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
Certificate serial:       010D0C9F4328584871C0707BF002FF74E7B06100
Authority key identifier: 6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     32808
IP address blocks:        66.29.160.0/19 maxlen: 32
                          70.36.80.0/22 maxlen: 32
                          107.191.0.0/19 maxlen: 32
                          204.14.20.0/22 maxlen: 32
                          208.64.88.0/22 maxlen: 32
                          2604:7b80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:70:7b:f0:02:ff:74:e7:b0:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a27bbf-900f-4a15-9ddb-8d30f013a375
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=85a11da2-6a7d-4f4a-8a47-880c5b7a119a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:63:56:ce:49:50:5c:a0:08:1e:b2:40:c9:b1:
                    f4:49:2c:bd:45:c6:fb:d7:3b:75:3a:e4:83:52:7c:
                    ac:14:13:ce:05:53:2d:3e:71:b0:27:03:c1:b3:7e:
                    65:40:3d:14:f1:de:19:30:91:2d:43:82:f2:54:44:
                    e8:55:fb:bd:fa:98:bd:d6:8f:8a:fb:34:f1:b0:85:
                    96:18:09:74:88:c3:b9:fa:24:11:27:b6:a4:3a:52:
                    5e:3f:6c:60:49:0e:31:61:b9:54:ae:f4:60:8c:9a:
                    c3:f1:de:5b:2c:34:92:33:f1:32:7a:86:8a:36:9f:
                    99:01:bd:cb:b5:c9:d4:a6:13:1d:f7:b5:f3:3d:ca:
                    e4:27:2f:4c:35:7b:81:02:e3:90:c4:af:a5:92:92:
                    9e:55:2f:54:8e:33:02:8d:fb:8c:97:dc:29:11:f1:
                    36:71:a5:ec:a8:73:8a:3b:e3:82:e7:1e:b4:e8:fb:
                    0d:4e:c8:07:eb:e1:94:d2:7a:72:38:5a:7e:d0:e8:
                    4c:53:89:9d:0d:a8:c3:b7:37:e7:ca:7f:eb:a4:67:
                    4f:b3:76:49:08:9f:40:3f:45:b8:64:95:78:5d:a5:
                    40:bb:d9:83:b0:7d:9b:ce:ab:c2:31:ed:7d:fa:bf:
                    53:ff:3a:32:b8:21:3e:86:62:a0:41:50:05:43:fd:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:62:0D:CB:70:7D:7C:ED:ED:3B:EA:E4:C1:1B:8B:11:68:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/6ac0d84f-3faa-32d1-bf7c-cbf97d372221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375/18a27bbf-900f-4a15-9ddb-8d30f013a375.crl

            X509v3 Authority Key Identifier:
                keyid:6E:2F:AE:21:72:68:FB:98:6F:44:35:69:7D:53:7F:FB:62:B2:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18a27bbf-900f-4a15-9ddb-8d30f013a375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.29.160.0/19
                  70.36.80.0/22
                  107.191.0.0/19
                  204.14.20.0/22
                  208.64.88.0/22
                IPv6:
                  2604:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:67:b5:11:2f:f0:57:26:e3:e4:d3:04:c6:3e:8d:08:01:27:
         2e:4c:a6:17:94:d9:e1:aa:b7:7c:e2:17:e8:01:fd:23:eb:61:
         b4:df:09:f9:cf:21:37:29:b1:16:79:32:ed:12:1a:24:ef:69:
         45:f8:82:ca:c5:80:a7:83:7d:aa:87:1c:51:a8:6b:c9:d9:d5:
         34:d1:d1:d9:d7:ab:f6:f2:97:2e:be:4a:c0:1b:a9:7d:6b:e6:
         b2:b5:0d:41:51:f5:63:70:c3:18:ff:5e:14:9b:51:8e:f4:d3:
         d3:75:60:89:e7:6a:ba:0c:96:ff:33:e9:d8:c3:ab:e6:0b:fa:
         e9:33:3f:97:d8:7f:20:9a:d3:0f:23:8d:41:7f:be:26:9c:d1:
         3c:80:20:f4:56:ff:2c:95:76:64:a3:62:ea:55:21:c3:be:37:
         66:1e:df:22:20:37:59:28:e3:80:3f:4f:f3:dd:97:8e:5b:c6:
         e9:03:f4:97:0b:62:93:bf:37:c9:d4:b4:85:a8:9a:44:6e:58:
         cb:fc:59:bc:59:ac:4a:a8:f5:85:01:f6:9c:53:43:c6:c8:ee:
         57:28:2d:1d:e9:2d:90:40:12:55:a8:57:02:af:50:49:a9:b4:
         6f:29:5c:51:0f:f6:d5:3c:41:c7:89:82:8a:62:ba:b9:22:18:
         7f:62:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:24 2025 by rpki-client