Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa
File:                     a1333bf7-8497-3910-9db7-0dbeb835edb7.roa (raw, json)
Hash identifier:          ac5W8PkJtCGU2XM8+s4XAELjpUr4RTKv1h3YPAuYqns=
Subject key identifier:   B6:3A:97:0D:52:CD:73:0E:96:18:1C:BB:62:41:61:70:EF:DD:31:0E
Certificate issuer:       /CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
Certificate serial:       010D0C9F43285849087E10110BB67FA4D601F500
Authority key identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa
Signing time:             Fri 28 Feb 2025 13:54:18 +0000
ROA not before:           Fri 28 Feb 2025 13:54:18 +0000
ROA not after:            Thu 29 May 2025 12:54:18 +0000
asID:                     376
IP address blocks:        205.237.72.0/22 maxlen: 22
                          205.237.76.0/24 maxlen: 24
                          205.237.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:7e:10:11:0b:b6:7f:a4:d6:01:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
        Validity
            Not Before: Feb 28 13:54:18 2025 GMT
            Not After : May 29 12:54:18 2025 GMT
        Subject: CN=716fe3c9-e852-48a6-b17c-4d6e7762349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:5d:dc:3d:d7:57:45:0f:b1:c0:74:5b:09:
                    ce:ab:36:a7:41:e5:77:eb:a7:7c:bc:31:d7:a7:12:
                    bd:bb:04:a0:b6:fd:4e:60:f0:4b:e1:39:69:46:e3:
                    c8:0c:ca:e5:7c:e0:bd:50:19:f5:ae:64:48:74:aa:
                    66:36:08:51:f8:95:55:74:7e:05:84:96:38:15:2e:
                    fd:87:79:b8:c2:0a:8f:2a:5c:27:80:f5:f2:20:ab:
                    07:59:3e:2f:f5:38:3a:93:74:1c:97:25:60:cf:48:
                    b4:3e:ac:9e:9b:b3:a5:64:49:dd:34:de:40:18:0c:
                    d9:57:fb:d9:93:f0:49:d2:54:a8:51:36:82:db:c6:
                    47:65:c7:35:b6:e4:8f:7f:f1:36:bf:18:d4:18:49:
                    7d:03:3f:db:a6:07:4a:65:07:0f:0b:b8:1d:ab:7e:
                    8d:ed:1a:b1:00:b2:b1:e0:d4:1c:06:bc:fa:c6:ce:
                    42:6b:18:7f:c2:01:02:79:00:9c:9b:f0:4d:d8:99:
                    44:3e:89:20:fe:4b:da:8c:ac:cd:0c:d5:23:1d:69:
                    ea:16:81:40:9a:03:28:bd:29:78:26:12:1b:9d:61:
                    f8:dc:fa:29:b0:64:35:4f:c5:0f:cf:8a:46:cd:d0:
                    28:48:a2:5a:fa:68:02:40:77:b1:a9:5f:6d:a7:fb:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:97:0D:52:CD:73:0E:96:18:1C:BB:62:41:61:70:EF:DD:31:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/a1333bf7-8497-3910-9db7-0dbeb835edb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl

            X509v3 Authority Key Identifier:
                keyid:85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.72.0-205.237.77.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:7e:5f:c0:f5:6b:39:df:fa:fb:77:e0:e4:06:58:94:80:
         30:c7:f9:0f:47:2d:ba:82:61:e0:36:ab:88:62:71:cf:f2:63:
         7e:1d:72:2f:49:b5:bc:92:3c:60:40:cc:e5:3d:55:ba:89:1d:
         75:ed:0e:04:f5:9a:26:2d:88:c1:08:d5:dc:a3:82:13:20:ee:
         a5:b7:a0:27:34:18:c2:65:ff:50:2a:35:ef:2b:e4:c7:b3:48:
         10:a7:e5:ac:1d:9e:c7:d0:f9:f2:5e:02:23:9f:2e:53:cf:2b:
         5e:92:81:d0:d4:66:cb:0b:4d:70:c8:23:b4:67:cf:94:03:04:
         97:1a:49:08:3e:73:0a:75:74:56:8e:98:45:5f:6b:b5:72:8c:
         cf:04:d9:40:16:b1:32:85:ad:ce:59:fb:5b:d3:93:10:5f:4d:
         88:4f:51:27:97:00:7c:2a:61:56:89:b0:a2:18:33:dd:4d:10:
         71:1f:47:9f:e2:4d:77:7d:e0:95:1b:33:fc:12:28:ae:8d:21:
         db:6b:86:8f:aa:96:77:44:89:a1:28:eb:ae:74:75:fd:4c:05:
         1e:aa:ff:8a:39:0d:f9:b4:1a:8e:65:bd:c4:d3:a0:a0:22:6d:
         eb:2f:2a:c7:0f:c1:ba:cc:4d:3b:fd:bf:4e:e5:97:10:0a:a4:
         23:0e:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:56 2025 by rpki-client