Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          WO6B3mL18XypeKDXoSwDKCh6WohO9UYF+3+7WLQ0LiQ=
Subject key identifier:   40:C5:68:D5:E9:BD:AB:05:3F:C2:F5:6F:51:88:0E:BC:32:D4:71:9F
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F43285848C33FEDD10025C4FD08FE4940
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Mon 03 Feb 2025 18:38:19 +0000
ROA not before:           Mon 03 Feb 2025 18:38:19 +0000
ROA not after:            Sun 04 May 2025 17:38:19 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c3:3f:ed:d1:00:25:c4:fd:08:fe:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Feb  3 18:38:19 2025 GMT
            Not After : May  4 17:38:19 2025 GMT
        Subject: CN=3bf58fb0-2f1c-4b07-a10e-53d6d2f14dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:35:b0:80:e2:c3:60:2d:e3:cf:89:82:1f:
                    97:f9:bd:ee:fb:8e:de:7a:8d:43:d2:58:1f:e5:3c:
                    db:7c:33:e0:aa:06:47:61:d1:53:ce:b3:77:f7:6e:
                    99:80:bd:9c:53:24:cb:c5:25:9c:c3:2a:4c:cf:90:
                    1f:7b:59:93:ad:d2:54:a7:59:aa:fc:71:27:7e:1f:
                    fc:65:73:c8:78:1f:69:57:02:ab:01:fa:93:5a:26:
                    3a:0d:cf:81:0a:41:72:3f:46:81:91:8c:57:df:ab:
                    1e:06:c0:db:fd:68:be:ee:1d:44:ea:bc:f1:4b:7b:
                    38:82:46:52:2c:5f:0e:2d:b6:ae:de:99:33:9f:4d:
                    bf:33:24:c2:db:01:13:85:3a:17:54:cf:39:00:d1:
                    38:b3:00:0e:b1:08:39:11:ea:ea:6b:e3:54:02:4e:
                    3f:53:7e:b7:5d:0d:62:1e:f3:a8:74:24:34:af:9a:
                    cd:e2:d4:48:47:0f:db:5a:0c:d6:c1:26:98:14:1e:
                    40:d4:b6:4d:fb:06:c1:61:f1:e2:87:27:87:34:0d:
                    47:bb:ed:83:b6:85:e4:73:f3:d9:bd:43:2c:17:a0:
                    f4:ce:27:5f:1b:5c:29:2a:a8:b2:2b:30:b4:c8:15:
                    6d:da:de:23:ad:d7:ce:c0:6f:00:80:ad:6f:52:2d:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:68:D5:E9:BD:AB:05:3F:C2:F5:6F:51:88:0E:BC:32:D4:71:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  168.203.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:d4:db:bf:ab:9e:8e:56:0b:a6:b5:f5:87:fe:a8:52:f5:
         93:fb:87:da:3a:35:e6:46:53:de:c9:f5:2d:92:04:8d:8e:a8:
         91:23:df:66:ee:25:7d:48:ef:92:95:51:80:b5:6c:af:fd:e0:
         95:11:22:b9:2b:3d:f5:44:83:53:4f:00:22:7f:ae:94:f5:d4:
         09:a3:ce:71:9f:72:3c:f4:ca:0a:d5:72:24:f2:60:d4:2e:84:
         c9:3b:ac:e0:c2:e1:1a:52:ec:b4:e0:05:03:4c:73:62:66:6e:
         1d:24:3b:8b:97:39:3e:a4:42:8e:8c:eb:d5:b6:15:8c:1d:ee:
         bb:9e:6a:3f:00:db:6b:8e:26:04:e5:d4:65:99:c0:2f:7b:7f:
         f9:9a:7b:5a:bd:30:d9:64:c9:b6:48:b9:63:57:6f:53:e3:f7:
         5c:61:04:92:3b:38:1c:87:8b:a2:a5:ca:69:e7:aa:67:cb:8d:
         f2:a3:aa:2f:7a:76:94:f2:96:aa:c8:5e:64:56:1a:6b:87:4d:
         4f:b1:60:fc:5c:8f:cb:97:4d:f3:65:f0:b4:47:06:ee:7a:ec:
         3f:06:64:08:5e:86:3f:63:7e:c4:5f:46:f8:4a:09:6e:37:2b:
         62:ae:46:d1:33:6b:5d:69:56:ff:4f:34:39:eb:9d:3e:da:58:
         30:6a:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:32 2025 by rpki-client