Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c33c90cd-bb61-3f06-8488-e89adb7a6398.roa
File:                     c33c90cd-bb61-3f06-8488-e89adb7a6398.roa (raw, json)
Hash identifier:          gIBsULY7gRgiYRTg6mgniVy++f1u4ey1e0d+v9XhJnE=
Subject key identifier:   C5:98:63:1C:54:BF:9E:A7:FB:49:99:71:F9:FD:43:4E:10:FE:B0:11
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584858A04E85C5DCC65DA11E2990
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c33c90cd-bb61-3f06-8488-e89adb7a6398.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     11300
IP address blocks:        64.49.129.0/24 maxlen: 25
                          64.49.130.0/24 maxlen: 25
                          64.49.179.0/24 maxlen: 25
                          64.58.97.0/24 maxlen: 25
                          64.58.109.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4e:85:c5:dc:c6:5d:a1:1e:29:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=06b415d8-8916-4b6e-9738-3e4b56d2017c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:d8:6d:70:a3:cb:99:c3:2b:86:7b:e7:e3:
                    7b:9c:56:a6:b3:c7:40:d1:15:fa:51:08:d1:8c:42:
                    47:5e:06:11:17:a5:89:e7:c0:3f:4f:de:7e:96:e1:
                    f3:0f:40:31:2b:ee:22:d1:89:97:cb:c6:f0:b9:e1:
                    83:b6:83:53:c4:cb:99:37:db:e7:5b:61:81:f8:ad:
                    3f:85:62:71:6c:ad:9b:fa:03:9a:da:13:a3:f4:f0:
                    43:ad:33:69:f5:fc:f7:b3:11:f4:35:6c:98:3b:48:
                    67:35:b6:22:c7:ff:06:63:38:16:81:2f:1c:7d:c5:
                    26:7e:9c:99:3d:4c:25:fc:5a:fe:5e:29:56:2e:15:
                    74:bc:3f:9d:3a:0e:20:cf:b9:27:f6:19:77:0f:b7:
                    b1:37:26:b0:8b:c5:55:24:1a:29:d4:c6:dc:ef:b4:
                    09:ed:fc:05:81:cc:8a:57:94:c9:3d:fa:68:53:e2:
                    67:6d:96:72:f2:bb:6c:a6:4a:ca:db:a2:75:16:a2:
                    83:fe:f2:e3:5f:47:ed:54:b2:0f:a2:3a:ca:e3:a6:
                    c1:9d:c2:1b:a0:a2:ff:99:7a:21:d6:a5:c9:12:81:
                    d3:16:08:74:81:e2:f4:89:fc:34:19:da:ed:83:a2:
                    9b:71:f8:9c:64:c1:af:c4:c2:51:9c:77:48:83:31:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:63:1C:54:BF:9E:A7:FB:49:99:71:F9:FD:43:4E:10:FE:B0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/c33c90cd-bb61-3f06-8488-e89adb7a6398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.129.0-64.49.130.255
                  64.49.179.0/24
                  64.58.97.0/24
                  64.58.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:cf:e1:45:87:a6:3e:a5:95:ac:3f:e6:d5:e7:bc:8d:d6:
         17:54:ce:5b:58:43:cb:70:b1:3a:2e:59:d6:cd:aa:be:68:51:
         86:40:e3:61:8f:d4:ff:4a:a8:22:43:0e:f7:3b:33:0c:77:73:
         51:77:e7:9d:32:a3:53:e0:a9:a7:53:a2:d2:89:2f:f9:3d:1a:
         da:41:8d:07:4d:7c:05:5b:4c:5f:55:e1:65:d8:b8:00:55:f2:
         08:59:c3:7a:65:92:a5:b7:e6:92:d0:8e:36:6f:ac:8e:cc:fc:
         52:b1:3b:ca:b8:7a:7b:10:c0:7c:8a:50:34:ce:1c:68:cb:90:
         ea:24:05:35:34:a4:30:f2:ad:b5:1a:cc:c5:5b:4a:ac:be:d2:
         4d:2f:c2:ab:32:bf:97:ea:fe:93:21:14:00:87:0e:7f:7a:ce:
         f7:3f:da:7c:bf:09:6f:42:7c:c4:50:8a:f0:31:15:d0:e1:eb:
         1e:e7:78:03:2c:41:21:6e:42:59:4e:b8:d0:24:10:02:f8:5b:
         7a:9c:8b:7f:8c:35:fc:12:21:ff:cb:2d:64:76:c2:21:1f:5b:
         ec:f7:e8:0e:7e:bd:15:8f:a2:b7:a0:ec:88:de:df:67:a3:3f:
         00:1e:5e:90:f7:e7:f7:64:70:2b:16:59:d3:a0:11:59:73:30:
         be:b5:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:45 2025 by rpki-client