Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
File:                     b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa (raw, json)
Hash identifier:          dKTLFeukMrqbBb8auOmYWombAPvAsG7PNT1Yyq79TF8=
Subject key identifier:   E7:0A:2E:E0:7F:63:DF:66:A5:1F:1E:25:9E:9E:6A:91:12:21:66:9E
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584871C06ABB964BDD5FC8270F80
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     395092
IP address blocks:        52.129.44.0/23 maxlen: 24
                          107.161.50.0/23 maxlen: 24
                          144.208.124.0/22 maxlen: 24
                          146.71.86.0/23 maxlen: 24
                          208.123.116.0/23 maxlen: 24
                          2607:a680::/48 maxlen: 48
                          2607:a680:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6a:bb:96:4b:dd:5f:c8:27:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=d0c05a2b-1c83-4645-8020-087cc61c2b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:9e:27:98:70:b4:ab:df:cd:ac:ba:cd:d5:
                    df:2e:28:45:dc:a5:f7:42:05:73:f6:43:ae:f6:1a:
                    49:a0:1b:51:72:7c:96:48:9c:ca:99:21:8a:48:ac:
                    1d:84:b3:3a:ba:52:e4:d8:cb:87:3c:f2:da:a3:5a:
                    2b:a4:85:9e:93:86:9a:c9:d0:fe:0a:c7:91:d7:f3:
                    c7:bb:6d:7e:9f:eb:5c:e6:63:94:1e:a1:db:83:a7:
                    c5:ee:d1:43:7f:19:a8:79:44:f0:46:69:d4:ef:da:
                    23:bc:6e:12:c9:9d:a8:0d:53:3e:5f:f6:94:34:25:
                    03:29:40:93:ad:f0:cb:7f:c9:fa:e3:0a:da:d2:8c:
                    46:77:c1:c2:55:1e:b2:90:81:0d:09:c2:10:31:6a:
                    99:39:ce:74:d5:39:fb:22:41:93:04:53:ee:26:49:
                    c2:b4:38:04:0c:76:24:87:c4:ed:65:44:c6:3f:c5:
                    3d:2d:ed:67:f9:3a:11:86:e4:4d:b4:63:87:25:b8:
                    fc:98:47:4d:a8:96:ab:95:ea:3d:ca:c5:53:88:d7:
                    a7:e3:9f:33:e5:a6:26:02:98:b5:24:af:80:bd:23:
                    f4:51:97:e0:76:4d:fa:17:3e:6c:18:82:db:fe:20:
                    11:e6:c3:f0:9a:88:e3:71:45:45:ed:18:ac:d7:84:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:2E:E0:7F:63:DF:66:A5:1F:1E:25:9E:9E:6A:91:12:21:66:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.44.0/23
                  107.161.50.0/23
                  144.208.124.0/22
                  146.71.86.0/23
                  208.123.116.0/23
                IPv6:
                  2607:a680::/48
                  2607:a680:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:de:3f:0b:7d:0e:0b:20:2f:27:ee:5f:94:49:37:82:d3:11:
         56:ad:a0:05:88:a7:5b:a4:87:a7:c6:cf:52:26:33:0e:30:45:
         b8:f7:eb:05:ae:4d:27:94:43:64:83:30:ba:23:2f:2e:3e:47:
         2b:49:e7:52:8e:d2:80:e0:74:e5:69:f1:91:57:41:a5:a0:f3:
         b9:af:07:e8:78:86:19:6c:1b:79:78:6f:31:51:19:29:35:f4:
         c7:f4:b4:45:29:0d:ef:ca:67:0b:1c:de:df:e8:53:f5:73:95:
         22:ce:02:68:7a:7f:c0:55:f3:b6:ec:68:6f:91:d4:cf:c4:47:
         8f:08:67:02:06:39:f0:13:63:fc:0b:58:71:4d:64:32:93:a4:
         c6:47:14:5e:b3:6e:46:37:84:55:a7:59:56:4e:75:81:d8:0f:
         20:e7:f3:ff:71:08:ee:80:1f:c2:3d:81:08:d6:02:90:44:3b:
         a4:3d:64:6a:32:b3:14:0d:4b:9e:94:a5:1c:7f:00:a4:63:70:
         bd:c3:36:3b:ad:d0:54:6d:1e:25:da:8a:da:86:be:01:e8:ea:
         00:eb:6b:22:03:82:2d:f2:3e:00:7c:66:bd:a1:7b:d0:da:b5:
         29:f6:06:c3:16:5a:2a:f3:5e:01:35:70:b9:eb:ea:a9:c5:5d:
         36:22:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:41 2025 by rpki-client