Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa
File:                     918dea34-b898-36d2-8228-5e0fa36a7f73.roa (raw, json)
Hash identifier:          yQ0tlUv/hDTZbluMMaoZRXyw2dsqYsTZWmFLpRMshY8=
Subject key identifier:   1B:EF:EB:E3:09:F5:7F:99:09:9E:A3:82:75:54:52:CF:40:DB:AC:06
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584957F3F6DA1CACFA0EE0EBE200
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     9009
IP address blocks:        45.33.158.0/24 maxlen: 24
                          172.98.165.0/24 maxlen: 24
                          172.98.166.0/24 maxlen: 24
                          172.98.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f6:da:1c:ac:fa:0e:e0:eb:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=fe5c1568-c05c-4acd-b918-9b632ac1b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:d2:f4:09:a8:9f:2d:75:5b:3e:d4:ac:5c:
                    c0:a7:db:34:b0:35:38:2e:89:36:05:7f:ab:a8:5b:
                    5a:4b:b7:f4:f8:13:2f:f1:29:3b:9a:95:b9:48:b5:
                    45:9a:a2:42:c8:2b:de:56:8a:d9:16:17:1d:01:6e:
                    2f:fa:3e:b1:62:49:5d:ba:93:f5:b3:8b:ff:91:1e:
                    a6:71:53:04:dd:56:67:74:2c:11:96:36:29:27:1b:
                    0f:b1:63:ba:54:99:ee:db:e1:7d:8a:40:74:ca:91:
                    39:ab:c9:b5:72:86:b2:37:68:82:ec:1e:fc:21:a9:
                    a5:44:ea:2a:cd:4c:61:55:83:85:d2:7a:31:1b:f5:
                    fe:7f:f0:27:74:8e:cd:91:4a:aa:62:57:06:0b:64:
                    15:20:7e:68:1c:43:f9:2c:d2:54:29:d9:6f:d9:02:
                    6f:b1:ac:2b:e6:e9:6c:fb:5b:f0:d9:2d:79:b1:9c:
                    8d:6f:6f:39:7f:78:00:f8:1b:29:79:de:58:81:b1:
                    d8:44:d4:7a:68:7a:a3:73:2a:fe:dd:ab:b0:11:9f:
                    ad:45:af:ec:11:cd:0f:ce:1f:68:cf:1f:64:46:3d:
                    c1:0c:90:a0:5c:96:27:bb:a6:54:76:4b:0a:9d:b5:
                    bd:e6:19:9e:09:b2:1f:f1:57:cc:9e:62:d7:d8:d8:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:EB:E3:09:F5:7F:99:09:9E:A3:82:75:54:52:CF:40:DB:AC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/918dea34-b898-36d2-8228-5e0fa36a7f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.158.0/24
                  172.98.165.0-172.98.166.255
                  172.98.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:41:5b:4b:10:1d:20:07:e3:90:9a:63:9c:c2:d7:86:c6:
         34:9a:d8:3c:95:6b:c0:28:98:f9:df:dc:c3:e6:e0:8d:93:cd:
         e2:1a:18:03:13:59:9d:3f:21:23:96:e0:1c:e0:63:dc:1d:cc:
         b1:c1:72:f1:47:11:a8:38:a8:ed:5a:08:63:fb:9a:96:3b:a9:
         7a:a2:c7:65:8b:56:eb:dd:0d:24:29:34:44:51:48:16:a9:16:
         7b:61:5f:3e:9a:59:a1:bf:db:0e:89:a0:46:64:1f:61:8f:77:
         fd:59:d1:1f:4f:21:c6:98:d0:a3:7e:87:bd:af:56:33:6e:4d:
         04:5e:c3:21:0a:ba:07:d2:6a:df:1e:39:95:59:65:8b:33:f7:
         ce:3a:85:d2:04:6f:8c:41:67:cc:5d:49:a7:3b:6b:b2:7a:74:
         e7:17:50:e9:99:84:03:3e:0c:f6:f6:34:c1:bb:0d:5b:65:9e:
         da:1a:ea:45:79:25:f0:5b:47:87:df:0e:33:8f:da:78:d5:52:
         09:f8:d5:4e:58:6f:48:a3:29:dd:52:35:77:df:a5:d5:5e:ae:
         8e:3d:af:2e:ec:d8:7e:67:54:02:22:5f:3b:c7:1c:ba:21:c9:
         fb:ae:64:b7:b3:38:c2:09:21:4a:b7:18:4c:7b:dd:c4:b7:9f:
         cf:81:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:43 2025 by rpki-client