Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
File:                     2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa (raw, json)
Hash identifier:          NWh6Rv0Zdw4hjRDihJtIOUil9/xD7gb9OYfUmJD3wjc=
Subject key identifier:   40:9D:3C:42:47:BE:DE:4D:00:9C:1A:6C:BB:45:87:0E:67:C8:D8:4E
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F43285848A830A5A285BA618FABF80A80
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16942
IP address blocks:        66.37.64.0/19 maxlen: 19
                          172.83.128.0/21 maxlen: 21
                          172.93.60.0/22 maxlen: 22
                          204.15.44.0/23 maxlen: 23
                          208.85.172.0/22 maxlen: 22
                          216.222.128.0/20 maxlen: 20
                          2001:4828::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a5:a2:85:ba:61:8f:ab:f8:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=2c433550-3281-4ba9-a5ac-9de54750c005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:b0:89:5e:64:77:fa:51:0c:e2:7d:30:2a:
                    d2:84:38:26:80:8e:1c:83:25:a3:51:64:b4:62:ed:
                    32:f2:a1:58:04:03:54:ed:48:12:a5:f5:97:ad:46:
                    5f:3a:d0:84:cc:89:1e:75:dd:aa:f7:b5:92:3e:98:
                    6a:30:93:6a:e5:e0:7f:c4:da:fa:6d:d6:7f:9d:07:
                    a7:0a:a7:df:54:ac:31:c3:54:5c:fe:b8:d5:96:06:
                    64:bc:2d:d0:45:88:3f:c8:0f:bc:65:62:40:03:ce:
                    96:c6:50:f9:94:79:a0:25:49:05:e5:31:c7:48:3e:
                    31:03:bc:3c:bb:0e:ef:f1:ba:77:24:40:a4:a8:7c:
                    a0:e9:78:ee:de:3f:bd:5d:66:d2:71:ce:33:d5:2d:
                    60:ed:dd:18:d5:6f:c4:8e:22:0a:ae:a6:9b:13:12:
                    fb:0f:6e:06:cc:f4:8f:03:40:45:85:8f:e8:9b:4e:
                    08:c4:56:ea:03:70:f6:93:9e:ca:9f:41:bb:2d:f5:
                    fe:7e:42:b9:1f:4b:8f:f5:73:f3:e3:81:a8:c2:6d:
                    13:b8:71:a0:b6:21:f8:41:bc:ce:97:2f:5f:1b:44:
                    77:c1:fa:b8:ac:63:31:0c:ec:28:eb:29:fe:85:ef:
                    df:10:3f:ed:73:67:5f:3e:e0:70:b2:de:ef:b7:64:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9D:3C:42:47:BE:DE:4D:00:9C:1A:6C:BB:45:87:0E:67:C8:D8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.64.0/19
                  172.83.128.0/21
                  172.93.60.0/22
                  204.15.44.0/23
                  208.85.172.0/22
                  216.222.128.0/20
                IPv6:
                  2001:4828::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:b9:3b:5d:93:8e:0e:ea:fa:f5:01:89:cc:d5:6b:af:7d:
         b5:0c:5f:97:87:cd:3f:a6:ad:3e:9e:76:d8:8d:32:36:ac:e9:
         ee:47:33:d8:80:e1:cf:46:4c:2b:6a:0e:bb:25:8e:f2:a0:21:
         5b:a8:c6:ea:25:4a:10:d2:df:57:48:d8:16:98:82:69:2b:63:
         01:cb:ce:9c:72:57:c8:d4:f6:95:9d:d4:3a:76:83:e0:57:07:
         b4:cb:e9:b8:ae:f0:9a:c6:b3:de:13:2a:18:9a:ea:24:3a:3b:
         27:85:29:ee:3b:4c:fe:6c:eb:63:26:20:a5:8b:f6:bf:bd:2a:
         d7:00:8a:bf:93:0d:9c:68:50:87:e4:34:22:7d:e1:f0:6b:dc:
         16:8b:71:d3:f6:87:b6:05:2e:8a:8f:1c:49:52:c7:3a:52:dc:
         92:d6:55:bd:de:9c:e5:b3:c9:9c:a5:7e:c3:6e:a4:66:77:1a:
         41:4b:86:78:b3:c5:2d:aa:65:93:1b:64:90:ab:76:27:90:15:
         6e:0b:1a:b5:af:fb:45:0a:37:31:00:73:c3:74:1f:1f:3a:69:
         ec:16:3e:eb:15:4c:57:85:a2:7b:48:ac:48:1a:a3:eb:fb:36:
         50:e8:c1:7e:54:71:e3:84:fb:98:d3:d6:06:f6:25:3a:85:7f:
         a3:f8:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:18:34 2025 by rpki-client