Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
File:                     63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa (raw, json)
Hash identifier:          pAXVncFbt51+wFp6wY6U9rvpFwAmmkGLizmduRblbj4=
Subject key identifier:   0F:A8:63:38:CD:6B:52:9F:CF:27:72:A1:82:1D:8E:92:71:AB:03:55
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F43285849780F094C3C38B11964CE8F40
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     19935
IP address blocks:        159.112.233.0/24 maxlen: 24
                          173.224.240.0/20 maxlen: 20
                          173.224.240.0/24 maxlen: 24
                          173.224.241.0/24 maxlen: 24
                          173.224.242.0/24 maxlen: 24
                          173.224.243.0/24 maxlen: 24
                          173.224.244.0/24 maxlen: 24
                          173.224.245.0/24 maxlen: 24
                          173.224.246.0/24 maxlen: 24
                          173.224.247.0/24 maxlen: 24
                          173.224.248.0/24 maxlen: 24
                          173.224.249.0/24 maxlen: 24
                          173.224.250.0/24 maxlen: 24
                          173.224.251.0/24 maxlen: 24
                          173.224.252.0/24 maxlen: 24
                          173.224.253.0/24 maxlen: 24
                          173.224.254.0/24 maxlen: 24
                          173.224.255.0/24 maxlen: 24
                          205.178.191.0/24 maxlen: 24
                          208.52.144.0/24 maxlen: 24
                          208.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:09:4c:3c:38:b1:19:64:ce:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=4e5ed8d0-fc46-44a6-a599-83858acde747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:c5:48:9b:b6:a3:0e:2e:b5:26:b2:e1:e7:
                    df:50:06:f9:8a:0e:5f:a1:94:ac:3f:d3:14:7f:f1:
                    39:01:e9:16:5b:92:2c:1b:05:2e:23:a2:64:52:21:
                    29:dd:a1:08:5f:ee:62:cb:bf:4f:17:48:d1:6c:28:
                    cc:6b:31:67:30:9e:cf:f8:17:b9:f7:9c:32:4e:e8:
                    e9:04:6b:58:df:1d:a0:d8:0b:3c:2d:10:23:38:fc:
                    b6:8e:d8:cb:6e:a7:e1:b5:0d:4f:8e:33:bb:3c:52:
                    2e:cf:65:66:48:43:e4:d8:ea:55:c6:34:e1:ee:6c:
                    09:d4:47:61:57:a6:2c:2b:9c:e4:e5:90:d1:4b:4a:
                    d6:89:c7:0a:ca:69:c9:8b:12:10:55:58:17:d2:82:
                    d6:96:5d:c1:69:2b:24:6c:8e:bb:57:31:01:d8:55:
                    7b:0b:5e:53:74:82:df:60:3b:b8:c5:3f:50:e6:23:
                    f8:b1:c5:94:ed:f6:73:fd:40:c6:6a:7a:0f:22:de:
                    7b:57:ce:1f:11:2f:aa:6b:d8:59:54:bf:f1:a0:28:
                    e9:60:79:8a:5f:e6:7a:b6:4f:cc:1b:89:a1:3d:1e:
                    b8:ce:0f:c3:eb:72:44:71:f5:77:24:9b:5f:0e:23:
                    59:8a:8c:c1:c5:22:ce:74:07:bb:2a:c6:bb:7b:d7:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A8:63:38:CD:6B:52:9F:CF:27:72:A1:82:1D:8E:92:71:AB:03:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/63d7507e-771b-31b7-9ea9-6f50c64d9d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.233.0/24
                  173.224.240.0/20
                  205.178.191.0/24
                  208.52.144.0/24
                  208.103.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:ff:c7:57:b0:64:f5:b4:c7:19:bb:9b:f6:eb:cc:f4:c8:
         c3:08:ea:ca:b9:05:29:85:b4:68:6e:34:3e:56:c7:5a:ce:2d:
         94:8f:a4:d2:9e:27:7e:b3:50:8d:d7:20:b4:45:40:d9:60:16:
         f5:51:d6:85:32:3c:d2:46:66:29:10:67:dc:23:70:e7:57:94:
         c1:9b:01:bf:9e:67:27:8e:e0:d5:49:60:41:3b:56:d2:5e:a6:
         73:7f:ca:e3:de:f4:c8:1c:a8:85:89:2b:f2:55:50:3a:54:13:
         72:a6:ee:70:de:e9:a8:7d:f8:84:13:e0:d3:46:db:ee:fd:f8:
         c1:76:5a:b3:8e:65:40:ae:c6:11:9d:6b:f8:61:d7:e8:15:a5:
         23:28:13:cd:1c:0c:69:6b:1b:97:52:85:3f:f3:ce:f6:4f:e3:
         22:80:80:ff:51:6e:37:08:8c:9b:23:01:0e:80:ba:6c:5e:2b:
         fc:7e:ce:d4:d6:fc:f8:44:47:7a:9f:9b:ce:6e:f4:f6:0f:ec:
         7c:dd:d0:40:78:0c:b6:42:47:67:cb:e3:e1:a2:99:d3:08:d4:
         da:dc:d0:38:a6:cb:2b:6c:70:4c:b2:a6:18:f8:29:b2:ab:98:
         a4:cf:9a:10:8e:17:b4:72:89:00:28:2d:22:ae:8b:c6:dc:bb:
         af:8d:86:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:24:30 2025 by rpki-client