Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa
File:                     7dc9f381-556f-3234-ab22-8ad7b4242933.roa (raw, json)
Hash identifier:          i0vCgKJ0zpnHwPlNveH/PuEulCRiFALuywkbxfTsptw=
Subject key identifier:   9D:6F:4B:F8:51:CC:93:29:2E:E2:AA:EA:FC:8C:88:B0:29:67:6F:0B
Certificate issuer:       /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
Certificate serial:       010D0C9F432858488DAB502A3CAD97A991B3A180
Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     27602
IP address blocks:        23.249.171.0/24 maxlen: 24
                          63.246.134.0/24 maxlen: 24
                          209.209.96.0/22 maxlen: 24
                          2604:f3c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:50:2a:3c:ad:97:a9:91:b3:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=dc238c1a-76d6-4c48-88b2-91e560643e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:d4:5a:79:f9:00:1d:7d:b9:2b:88:f6:3d:
                    b3:66:f4:e5:40:ec:38:ed:02:b3:ad:83:57:30:df:
                    b2:3c:9a:d1:18:b9:33:d0:49:f7:4d:99:1e:8c:f1:
                    42:6f:0d:4a:3c:ae:89:ee:f9:2e:24:cc:68:8f:fa:
                    9a:f8:2f:35:0d:a2:4d:88:bd:f5:7a:d8:59:95:87:
                    1a:9b:55:4b:d7:f3:a1:21:8a:e8:ce:03:a4:2b:3f:
                    30:00:af:fb:c4:69:98:a4:6f:a4:6f:83:30:76:2c:
                    9d:dd:c1:3e:3a:4b:1b:fe:aa:e1:1b:45:84:48:d3:
                    c1:f7:fa:ba:8a:91:53:ba:fe:4d:78:6f:9a:0f:6b:
                    a4:aa:8b:65:a3:1e:6e:f8:a1:e4:50:41:77:cd:43:
                    2f:d6:bf:25:0f:b0:52:b9:ee:07:14:90:e2:66:ed:
                    ba:0a:d4:25:4f:6c:07:d2:69:af:4a:20:ce:69:10:
                    ff:87:16:04:bf:78:eb:d1:38:57:f0:c7:84:56:23:
                    1a:4c:9e:e2:94:ac:3e:71:c7:cd:29:73:03:a2:c8:
                    b4:ed:32:3c:04:82:07:30:41:be:5b:85:71:45:a7:
                    cc:44:5d:31:21:06:23:b6:c3:c1:d5:2d:55:68:d5:
                    46:c4:2a:a3:e0:a3:33:a5:d7:25:f2:38:5f:67:e5:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:4B:F8:51:CC:93:29:2E:E2:AA:EA:FC:8C:88:B0:29:67:6F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.171.0/24
                  63.246.134.0/24
                  209.209.96.0/22
                IPv6:
                  2604:f3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:7c:9e:d6:14:52:60:7f:5e:12:ab:01:63:6a:ec:6e:ad:
         6f:b6:fe:c4:c6:1d:ab:14:b5:87:77:31:6b:18:a8:5d:5e:ae:
         60:77:a0:84:9f:8c:04:60:5a:9b:a4:06:e0:fd:63:69:d6:f3:
         21:0f:2b:57:0f:b0:3e:9c:c6:ea:79:54:07:23:88:0b:61:81:
         27:22:04:25:3a:1b:d4:6b:c4:20:c2:e7:38:e7:c1:ea:42:8b:
         c1:9b:71:b9:1f:bc:6f:ba:64:2c:01:ff:b0:ed:c6:0f:52:e0:
         3e:fd:af:ed:a8:c0:b3:be:f3:c8:74:e8:0f:f0:1d:f2:28:30:
         ca:37:84:e7:ca:ff:0c:33:3f:0a:57:3c:cc:7e:84:17:d6:86:
         ac:08:67:40:7d:be:3d:4a:c0:37:03:96:1b:c9:3c:00:52:c6:
         c3:26:09:40:ce:a4:df:e6:d0:95:b8:bb:24:85:c6:c9:41:1a:
         f0:b7:74:d9:a0:b3:58:98:e6:c6:bc:c2:e0:0c:ee:9e:4a:1d:
         cd:06:38:66:b7:61:78:23:75:38:0c:c8:0d:cc:d9:8f:9c:9f:
         bd:ff:b8:69:97:e1:d7:db:15:9d:78:c9:e7:cb:10:54:b1:f2:
         ba:7f:d7:98:75:b2:eb:ef:b9:9f:98:82:a0:36:f2:aa:3a:5f:
         8d:39:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:06 2025 by rpki-client