Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa
File:                     6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa (raw, json)
Hash identifier:          V5jFa5bi2+YHuVtmde2lcEHabtBPG/mOvsZlHhBxKII=
Subject key identifier:   BC:AB:ED:84:AC:36:F3:F8:E0:4B:AC:83:5A:8F:48:F2:5C:E4:9C:A6
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F432858485B6B0244B2D8CE5CA00C8500
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     16580
IP address blocks:        131.232.3.0/24 maxlen: 24
                          131.232.4.0/24 maxlen: 24
                          131.232.5.0/24 maxlen: 24
                          131.232.6.0/24 maxlen: 24
                          131.232.11.0/24 maxlen: 24
                          131.232.12.0/24 maxlen: 24
                          131.232.13.0/24 maxlen: 24
                          131.232.14.0/24 maxlen: 24
                          131.232.17.0/24 maxlen: 24
                          131.232.28.0/24 maxlen: 24
                          131.232.33.0/24 maxlen: 24
                          131.232.38.0/24 maxlen: 24
                          131.232.51.0/24 maxlen: 24
                          131.232.52.0/22 maxlen: 22
                          131.232.56.0/24 maxlen: 24
                          131.232.57.0/24 maxlen: 24
                          131.232.68.0/24 maxlen: 24
                          131.232.73.0/24 maxlen: 24
                          131.232.80.0/22 maxlen: 22
                          131.232.88.0/22 maxlen: 22
                          131.232.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:02:44:b2:d8:ce:5c:a0:0c:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=94abd184-95e3-4131-acb2-eabea4b3aac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:a9:11:51:5e:23:a9:b3:c8:74:12:85:62:
                    63:79:23:57:75:6d:99:b8:16:d4:b2:bf:7c:12:4a:
                    0b:20:5d:11:db:fe:13:7a:73:25:88:32:b0:ef:68:
                    3f:70:8c:6f:7d:ee:ad:d6:d0:3e:5c:c2:9a:11:32:
                    be:f2:6f:a3:d7:91:d0:9d:cc:69:fb:70:a8:f0:22:
                    9f:c8:81:60:01:bd:58:b2:81:90:bb:62:c4:08:0f:
                    19:5a:63:c5:cb:d9:5d:de:3f:6f:4b:a2:d3:b5:b8:
                    26:0c:53:51:f2:8b:64:97:30:1f:f4:61:67:d4:2a:
                    93:52:22:f7:f4:6e:22:2e:3a:8d:6d:a2:b7:60:f7:
                    21:ee:cd:e7:a8:b5:8e:6f:f3:c3:b6:cc:09:2f:6f:
                    1f:ff:8f:60:63:0f:13:50:61:18:cb:f5:06:f7:e3:
                    96:39:ce:95:8a:a6:64:bf:6b:1c:52:a8:c2:7d:28:
                    06:67:38:e6:3f:b3:43:70:17:92:f1:99:cb:bb:40:
                    07:c0:9b:63:db:b1:7c:8f:07:7c:58:5f:c8:4b:f9:
                    db:56:2b:71:4a:c2:69:00:bd:3f:20:d7:8f:4b:4c:
                    1a:99:b9:3d:8c:3c:28:c8:62:26:31:b2:43:7d:44:
                    a3:54:91:3e:38:bd:c7:81:61:b4:82:14:d7:33:9a:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:ED:84:AC:36:F3:F8:E0:4B:AC:83:5A:8F:48:F2:5C:E4:9C:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/6f7b8dbb-a610-30c8-8866-b5f97e9bf152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.3.0-131.232.6.255
                  131.232.11.0-131.232.14.255
                  131.232.17.0/24
                  131.232.28.0/24
                  131.232.33.0/24
                  131.232.38.0/24
                  131.232.51.0-131.232.57.255
                  131.232.68.0/24
                  131.232.73.0/24
                  131.232.80.0/22
                  131.232.88.0/22
                  131.232.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:16:c3:84:85:38:f5:50:ed:83:f1:dc:34:aa:1f:ff:ca:
         e6:15:32:17:6f:7b:d0:1c:cb:7a:9f:c3:f6:f8:09:e2:99:de:
         af:a0:6d:a1:03:1d:3b:70:cf:35:66:4e:ca:e3:63:de:22:cf:
         0f:93:79:6e:2b:61:ea:60:7b:27:fe:df:f3:f6:f1:da:e0:1c:
         1b:17:77:a1:af:cc:17:90:e4:ae:c3:c9:c9:95:9b:9e:32:9f:
         a2:59:60:c0:25:7b:d7:01:48:ca:c4:80:29:cb:5a:cf:7a:6e:
         f7:dd:9e:a2:d7:ba:0f:dd:bd:93:39:3d:6f:52:f3:1c:0d:39:
         b9:8c:c9:be:d2:6a:16:5b:0f:bd:3e:04:7b:59:99:13:5c:ba:
         c9:32:fc:d8:ef:8d:c9:ed:94:4a:c7:ea:38:fb:4a:76:d5:ab:
         9f:7d:6d:ea:9a:4f:2a:2c:e3:e6:14:fa:48:47:14:9c:e9:a5:
         dc:3a:66:c1:a1:09:d9:7f:cd:75:f8:3f:71:b2:f1:7a:6d:dd:
         0b:28:70:6b:6d:9f:88:08:59:32:e8:eb:cb:43:f3:8a:51:1a:
         fd:a6:a2:5b:f3:9c:52:28:69:f0:7c:3d:b2:61:76:22:8a:e0:
         a6:7f:2e:78:55:f9:24:05:d2:81:ed:93:f4:c9:19:fe:36:fb:
         98:de:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:04 2025 by rpki-client