Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
File:                     6a49b156-6028-30c5-b60a-3bb373cf36fc.roa (raw, json)
Hash identifier:          TH9JGCTeSYyfAhqj19KGhElnu2DD5xhQMBYWvKiglqU=
Subject key identifier:   C5:9B:97:48:22:0D:F3:61:BF:F6:57:9B:2C:AC:6B:6C:9F:EC:FA:96
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F4328584908816E89EE57EF7C86B37180
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     398940
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:6e:89:ee:57:ef:7c:86:b3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=606d13c1-a789-43e6-8334-5aff4477c216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:ea:2f:51:ff:bc:5a:75:db:9a:d6:fd:09:
                    a8:20:bf:90:ea:2d:e4:ea:1b:a3:fa:b6:fb:41:06:
                    10:eb:72:fb:94:23:cb:7e:55:b4:34:c1:1a:05:65:
                    86:2b:66:91:af:a2:c3:36:d2:25:fc:5a:84:4b:bc:
                    70:03:70:1f:06:23:af:5e:e2:63:ff:32:db:83:b1:
                    26:21:a3:54:58:26:87:48:a4:4a:5c:05:12:1a:65:
                    6c:19:04:ef:f4:93:3f:8e:26:d9:ac:65:70:ff:63:
                    a9:6e:36:56:db:08:25:23:93:56:d8:28:ab:9a:2f:
                    50:d4:5d:c4:0d:ad:fc:0a:1a:06:61:f5:6f:1c:ae:
                    ce:2d:e9:02:ae:4e:01:76:fe:f5:de:b1:f7:5e:d1:
                    5c:9d:79:22:10:21:93:ad:b4:cd:b1:2c:62:ab:ab:
                    07:ed:f5:fe:d4:28:bb:1f:bf:48:c1:d2:d4:0d:07:
                    7c:8d:c0:30:b7:0f:2e:bf:6f:2a:81:57:73:c3:fe:
                    60:90:62:8e:49:84:7c:2a:67:20:e9:02:15:85:e1:
                    fd:6d:bf:01:29:0d:bc:bb:5b:8c:32:2c:13:f5:e1:
                    72:ef:be:4f:59:dc:0e:b0:e2:42:03:f4:18:5a:a2:
                    da:e8:4b:73:a2:20:56:ce:44:3e:81:6a:54:52:25:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:97:48:22:0D:F3:61:BF:F6:57:9B:2C:AC:6B:6C:9F:EC:FA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:a0:6f:ef:a1:08:1d:c9:22:fd:3d:c4:9c:71:49:c6:f3:
         1c:5d:3a:5c:95:3c:06:e7:99:f0:66:61:ab:22:bd:4c:d9:01:
         1b:b0:d0:8d:91:d2:af:cd:dd:19:12:53:85:7d:3c:03:5d:cd:
         b8:52:17:c0:38:0d:89:2b:60:74:eb:af:0c:d4:86:67:c1:35:
         ba:bd:2b:0a:6e:93:c5:2c:41:43:ff:39:bf:1d:25:3f:1b:1d:
         05:e2:85:88:4b:46:b1:95:c0:85:b4:33:86:15:be:d0:93:da:
         e9:3e:5a:9f:59:bd:71:3c:44:02:b8:12:8b:ff:5d:5f:df:6e:
         82:da:10:dd:a1:3e:57:12:90:0a:1d:40:4d:0a:96:75:79:2c:
         70:a8:6b:ac:c1:5a:42:95:cd:32:50:e3:ca:5a:3b:38:01:ad:
         65:e3:be:d8:82:88:c5:bd:77:14:fc:f6:43:92:b4:70:f1:91:
         d4:84:bc:a3:30:a4:8b:ba:99:5c:a6:ea:e9:4a:f3:e6:ea:10:
         1f:90:d3:c7:54:e0:07:67:3b:d5:67:dd:ac:fb:b3:ea:18:06:
         78:52:73:69:d1:96:6e:18:77:c6:c6:8a:ca:d4:01:a5:d8:06:
         f9:55:41:c2:6b:cd:81:40:e3:e4:00:28:57:c2:97:76:20:c7:
         20:23:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:30 2025 by rpki-client