Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/78911354-ca2f-3462-b52c-2ae7025072db.roa
File:                     78911354-ca2f-3462-b52c-2ae7025072db.roa (raw, json)
Hash identifier:          21bIU2/dRUYQYlne20PTO5dm8PWxkaI8E+0jJEWv/so=
Subject key identifier:   F2:5C:DC:46:7C:A9:56:15:B8:1B:E7:31:FE:61:E1:94:0F:B5:6A:D1
Certificate issuer:       /CN=85cb1f45-c822-4e3f-9234-71ff680b968d
Certificate serial:       010D0C9F432858492CAE9BB8F7CE021F5F541400
Authority key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/78911354-ca2f-3462-b52c-2ae7025072db.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     18439
IP address blocks:        139.64.249.0/24 maxlen: 24
                          158.51.8.0/24 maxlen: 24
                          172.82.122.0/23 maxlen: 23
                          207.174.108.0/23 maxlen: 23
                          207.174.108.0/24 maxlen: 24
                          207.174.109.0/24 maxlen: 24
                          208.78.156.0/24 maxlen: 24
                          216.115.188.0/24 maxlen: 24
                          2604:69c0::/32 maxlen: 32
                          2607:af40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9b:b8:f7:ce:02:1f:5f:54:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85cb1f45-c822-4e3f-9234-71ff680b968d
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=19809793-4e56-45a6-940c-aa3295517a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:39:99:83:c4:ca:81:67:64:c1:13:ce:62:
                    b4:40:25:13:6a:9b:19:bc:f7:49:06:48:cf:a1:0d:
                    4a:98:67:91:37:eb:cf:f9:b4:56:35:ca:50:ae:69:
                    0e:a2:e6:12:89:94:7d:cc:78:71:47:18:38:e9:e3:
                    c7:5b:a2:83:ec:f9:b6:d6:4d:2f:e1:84:0a:e8:4a:
                    a1:c6:cd:41:b3:8d:3e:d2:00:98:fb:80:0f:04:80:
                    fb:28:c0:5b:51:7e:46:bd:82:68:aa:fe:45:ea:54:
                    dc:f1:dc:b1:94:8e:79:8e:0e:03:1b:61:85:1b:86:
                    fa:dc:65:11:a0:09:de:81:84:8e:ab:4f:b9:25:15:
                    bf:7a:21:50:20:94:13:10:78:57:d8:85:b9:85:23:
                    54:f9:9f:85:45:c5:ff:0d:48:55:b2:1d:b8:a0:d7:
                    5d:85:4a:5b:c5:79:61:1e:b4:01:b5:27:dd:43:22:
                    e6:2e:d5:99:63:e3:dd:10:18:41:af:d6:a5:33:37:
                    08:cc:81:65:96:f9:75:c0:3e:9f:e3:39:5b:50:5b:
                    72:28:8f:ac:38:3d:e2:1a:c0:56:e2:39:23:6c:af:
                    b9:0a:97:dc:e4:0e:0b:b2:40:16:b8:d3:6c:1c:b7:
                    7c:f6:dd:be:30:9c:d8:35:a0:43:b8:a1:5c:e5:80:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:DC:46:7C:A9:56:15:B8:1B:E7:31:FE:61:E1:94:0F:B5:6A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/78911354-ca2f-3462-b52c-2ae7025072db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl

            X509v3 Authority Key Identifier:
                keyid:6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.249.0/24
                  158.51.8.0/24
                  172.82.122.0/23
                  207.174.108.0/23
                  208.78.156.0/24
                  216.115.188.0/24
                IPv6:
                  2604:69c0::/32
                  2607:af40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:c4:5f:76:06:6e:fa:da:10:48:0d:23:0e:f9:25:09:09:
         2b:f9:96:f3:4c:eb:46:a7:86:e3:3c:84:05:5d:a1:96:e4:b9:
         20:b5:a5:83:90:69:5d:b8:8f:ae:21:46:70:f8:48:2b:ae:a3:
         54:7d:27:27:23:a5:2f:35:e1:95:6a:5b:b4:f5:f7:fa:d7:35:
         d4:23:9b:d8:d0:12:fe:34:b0:6f:ad:8d:20:f3:6a:8a:4f:55:
         0f:d0:1a:e3:d3:38:fb:1d:15:c3:89:5f:a2:fe:a8:cb:1d:12:
         de:d2:b4:20:25:3f:68:2a:17:09:88:1c:7d:d9:22:37:ad:cc:
         ad:b3:39:75:3d:f2:a2:15:df:54:2d:ff:aa:fc:0d:1b:c7:00:
         dc:18:3d:a1:36:65:c7:ed:40:55:a3:9d:92:95:49:66:3e:70:
         85:b1:16:ad:e2:bb:72:35:60:a8:b2:c8:33:49:c9:1a:1b:38:
         5f:99:98:94:0a:22:67:34:da:b2:e7:2c:95:8d:d1:b4:fa:37:
         a9:93:51:fb:1d:5f:c8:ac:4b:b5:f8:3b:da:49:ee:88:82:91:
         b0:56:73:99:45:df:3b:e7:92:be:69:de:e7:d4:af:4c:c9:ed:
         68:e3:0e:68:f6:0b:dd:22:a1:fc:01:e2:9b:c5:15:c9:c1:ac:
         8d:b4:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:07 2025 by rpki-client