Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
File:                     9b38aa73-d1e5-3574-86f0-2be61de03925.roa (raw, json)
Hash identifier:          EpLI+KnmTdPgDqFnBFBOcV2ovWyopB200EoUTbI0yfM=
Subject key identifier:   6A:53:56:F6:62:95:86:60:65:FE:3A:45:47:AC:C8:6B:9C:F1:32:04
Certificate issuer:       /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial:       010D0C9F43285848E8665C4D6FFE2FAE05DFFA80
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     18907
IP address blocks:        104.219.144.0/22 maxlen: 22
                          162.249.36.0/22 maxlen: 22
                          2605:2880::/48 maxlen: 48
                          2605:2880:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:5c:4d:6f:fe:2f:ae:05:df:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=112141e3-8369-4481-8c75-bca7df38b661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:4b:1b:5b:ff:a7:9c:ce:7d:6e:75:a1:05:
                    79:47:00:3f:c4:65:d0:e4:13:c0:b6:4f:cb:77:38:
                    e9:ae:4a:48:7b:00:34:a5:65:52:63:06:eb:cc:cc:
                    68:9b:a8:fd:f2:aa:b7:40:12:3b:82:99:56:9f:bc:
                    a4:2b:a9:ea:ed:71:16:44:58:56:99:cc:3d:7f:71:
                    17:4a:88:37:53:5a:ab:78:fe:7d:80:0a:47:f2:f9:
                    e8:95:74:59:0d:6a:e3:59:51:9b:fe:08:5e:8c:45:
                    a9:31:72:8e:a0:ac:5c:5e:82:13:11:af:20:42:fc:
                    14:00:07:df:b5:7f:e5:80:f2:d1:58:cc:ad:25:d6:
                    02:33:01:0f:26:3e:89:fb:9f:81:00:b1:d8:81:2f:
                    6d:ee:e3:64:93:c5:22:ab:4b:32:12:29:cd:b2:4e:
                    3f:9e:70:0b:4f:58:7b:8f:90:bc:d7:77:cf:00:d5:
                    da:07:1d:96:e6:de:ae:8d:b0:da:9d:82:87:b7:fb:
                    bf:0e:95:4e:5b:18:18:0f:12:41:69:da:7b:89:cd:
                    4d:34:6b:dd:87:8f:91:91:d1:7f:93:0c:8c:70:21:
                    2b:15:c4:c1:5f:d1:90:e2:1b:62:ef:fa:d4:22:74:
                    8b:69:04:72:29:30:6d:4f:d5:9e:db:3f:28:37:b3:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:56:F6:62:95:86:60:65:FE:3A:45:47:AC:C8:6B:9C:F1:32:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/9b38aa73-d1e5-3574-86f0-2be61de03925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.144.0/22
                  162.249.36.0/22
                IPv6:
                  2605:2880::/48
                  2605:2880:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:3b:cd:94:0e:dd:42:9e:69:c7:f7:98:2c:f4:6b:3b:6d:
         b4:6a:61:7a:d7:9d:a4:ee:dd:63:60:9d:66:60:fe:b2:eb:6f:
         90:f0:2a:1c:af:9a:39:2e:72:38:61:85:90:91:cc:57:05:b3:
         3a:e8:6b:77:65:16:5a:64:a7:8d:02:b2:4b:4e:76:4b:39:0a:
         4a:83:91:f1:75:f9:a2:c7:3e:36:7c:ff:bf:01:dd:48:07:a8:
         17:a5:2d:2a:fb:da:4e:32:4d:e9:3d:68:8a:3c:00:6b:9e:c9:
         0c:e3:47:2c:c1:aa:fb:a5:6e:63:b7:28:02:de:94:f4:6a:78:
         de:60:cd:2a:a1:08:b2:9b:82:8c:64:1f:df:33:4a:96:88:f3:
         e4:a1:9d:26:da:e2:e6:e8:2c:b9:f1:fa:b2:23:d8:77:73:64:
         d7:7f:2d:a8:41:03:cf:41:3c:ad:d4:96:ec:b2:29:26:b1:ea:
         b1:85:cc:d4:2e:aa:8d:1f:54:78:2b:bc:cd:fa:d9:30:14:3b:
         35:e2:b6:b2:b4:76:da:1e:78:43:23:ba:eb:81:7a:f9:4b:cb:
         dd:8c:d1:45:6f:13:48:86:a4:ad:84:a1:5f:42:3b:f4:9a:83:
         78:78:2b:da:d9:76:a7:ea:09:b3:13:7f:88:ff:8e:2b:69:90:
         b1:5b:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:32 2025 by rpki-client