Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa
File:                     1ed96d55-b477-34a7-bf3a-6deadbd63243.roa (raw, json)
Hash identifier:          2RFitDCcvoGIfpN7IVCUod464+2rNznA2bs4VYXu4y4=
Subject key identifier:   D6:8E:D8:C4:6D:99:1A:83:DF:33:7A:FB:03:7D:DE:04:5D:B0:85:B5
Certificate issuer:       /CN=33abedb9-022c-43d0-ac12-a00ad12424b3
Certificate serial:       010D0C9F43285848EC968AE0FC26EE598A212C3C
Authority key identifier: 62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     27400
IP address blocks:        74.116.160.0/21 maxlen: 21
                          199.36.232.0/21 maxlen: 24
                          208.85.60.0/22 maxlen: 24
                          208.88.112.0/21 maxlen: 21
                          2607:f3d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:8a:e0:fc:26:ee:59:8a:21:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33abedb9-022c-43d0-ac12-a00ad12424b3
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=7b954f88-7758-432e-8ee4-7af53b5fe1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cd:c8:14:38:22:8b:a0:ee:25:47:98:c3:77:
                    23:8b:df:18:0b:4f:e9:9d:61:da:58:20:bb:84:5d:
                    44:36:9d:b0:d4:44:04:81:71:e2:dc:cf:e6:01:aa:
                    ea:46:42:94:17:8a:26:21:68:8e:46:8d:69:c1:32:
                    4a:8f:6f:8c:52:c2:22:ca:76:21:4d:51:7d:29:5a:
                    bd:2c:7c:48:5c:0a:cb:1f:9e:13:e6:09:e2:5b:b4:
                    5f:37:e9:bd:30:8c:06:03:dd:5e:b9:43:6e:58:ff:
                    64:61:bc:3b:3e:0e:b6:8f:f2:70:b8:20:85:98:03:
                    5d:2d:31:6b:78:8f:42:4f:3c:be:74:26:79:9c:b0:
                    49:e0:75:20:e5:77:26:ec:df:cf:78:ad:c4:cd:a4:
                    49:c9:94:eb:37:34:29:f5:9f:ac:a9:66:2e:03:29:
                    dc:4f:ca:fb:41:6e:34:89:1d:ba:ce:eb:79:10:52:
                    df:c5:d4:4e:eb:65:7a:47:0d:95:f5:28:c9:b6:25:
                    81:a1:03:ac:ef:bb:87:1d:09:2c:25:66:08:e5:d3:
                    54:59:dc:c3:28:29:a6:38:c9:7c:1e:8a:06:2a:2f:
                    6a:86:14:35:3f:1d:4c:c9:e6:4d:09:23:53:c3:3a:
                    7f:24:26:6e:f4:e7:43:ff:5a:7a:7d:5a:98:47:74:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:D8:C4:6D:99:1A:83:DF:33:7A:FB:03:7D:DE:04:5D:B0:85:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.crl

            X509v3 Authority Key Identifier:
                keyid:62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.160.0/21
                  199.36.232.0/21
                  208.85.60.0/22
                  208.88.112.0/21
                IPv6:
                  2607:f3d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:76:4e:86:29:12:0f:5c:ec:80:3d:ea:a0:08:b9:03:e9:
         85:5d:e6:fe:45:d0:3a:7d:7e:49:ad:8e:72:10:fc:f8:08:a3:
         b2:25:5d:b7:85:67:07:ce:0c:29:45:6b:7f:d8:12:c6:cf:73:
         2b:30:5b:64:ff:d4:cf:cb:cb:73:0d:da:2c:30:47:9f:0e:ea:
         e0:0f:d2:48:58:9e:7c:e6:55:ef:4f:96:a1:58:06:bf:78:ca:
         b5:18:f3:1e:36:90:94:05:7b:b9:94:a5:c7:8d:8d:e9:c9:1e:
         83:c1:87:ab:8a:c8:04:42:55:81:70:65:04:c5:c3:23:2b:dd:
         4e:ab:35:57:a8:19:d8:65:5d:1f:fd:c1:7b:82:88:e6:ca:b0:
         cc:a0:ba:24:37:7e:47:af:c3:9c:ab:f0:32:af:66:ac:02:d4:
         73:59:06:72:e2:e8:16:80:ee:45:c6:bc:f0:88:37:47:4b:4e:
         a5:51:92:19:c4:e0:24:8b:40:6b:38:46:12:cd:50:1d:96:13:
         56:11:b8:b0:37:69:4a:0e:55:3e:c0:c9:01:50:7d:50:ae:18:
         01:1f:11:40:b7:75:e8:1f:dd:bd:fe:11:ee:77:76:b1:8b:e5:
         89:53:c1:fb:92:a9:17:c9:f8:07:0c:9f:06:e6:75:a9:52:d4:
         5c:3e:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:10:43 2025 by rpki-client