Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa
File:                     435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa (raw, json)
Hash identifier:          vHAG1lHMNCAXq/5A8JYYKoT9vvwgbCOVmhQHbAdKhvk=
Subject key identifier:   DA:E0:E2:ED:25:40:C4:FB:DA:09:BE:79:99:09:82:4B:A6:D0:3F:AB
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F43285848C9B0DE026D63627A52B54380
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        209.161.192.0/18 maxlen: 18
                          209.161.192.0/20 maxlen: 20
                          209.161.208.0/20 maxlen: 20
                          209.161.224.0/20 maxlen: 20
                          209.161.240.0/21 maxlen: 21
                          209.161.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:de:02:6d:63:62:7a:52:b5:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=9f271d67-a502-4a18-969d-9d3997123cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:d8:f3:2a:c5:20:65:7a:14:0a:12:f4:2e:
                    17:76:14:a7:74:7d:3a:a6:70:b3:30:d7:91:b2:e4:
                    c0:39:0a:d4:f5:21:8f:94:77:83:1e:63:8b:4a:9f:
                    5b:c1:83:1f:43:48:51:82:2c:6b:88:d0:a0:53:1f:
                    68:80:a2:10:49:93:63:c0:71:dd:d8:79:b3:88:2b:
                    66:3a:e2:6b:81:be:ea:c0:2f:41:c8:4f:6e:92:04:
                    31:19:e0:fd:09:5c:a8:89:3d:c8:86:0f:af:ad:c4:
                    3c:e5:06:c2:98:a2:c4:de:16:37:fe:cc:43:fd:c5:
                    61:65:10:48:1d:c1:3f:2f:5d:22:60:b5:e1:d4:90:
                    41:c6:c9:72:64:f1:1b:d9:04:9e:c9:7a:05:08:92:
                    da:62:c6:8b:6f:b7:b6:e0:47:4c:c0:51:19:67:99:
                    e7:c0:45:84:9c:ec:19:38:fd:4e:7e:42:30:f1:ad:
                    f4:27:d6:da:0f:d0:29:75:22:7e:59:64:85:62:f5:
                    df:e7:47:62:94:bc:47:d0:5f:f0:c5:22:76:9f:45:
                    cc:a1:78:b0:c8:cd:42:3e:e9:97:d5:cc:3d:ad:6b:
                    a7:8e:63:e2:f5:1e:17:e9:44:3f:42:3c:ed:42:86:
                    d5:41:3e:0f:4f:0c:8f:54:5d:ca:b8:ee:bb:cc:a6:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:E2:ED:25:40:C4:FB:DA:09:BE:79:99:09:82:4B:A6:D0:3F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.161.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:83:16:9d:8f:de:81:58:ea:27:b2:55:57:04:be:61:e5:
         ce:67:6e:9d:6e:7b:0e:1a:17:84:2a:71:de:36:0e:3e:a1:be:
         c2:28:f3:20:0e:07:2c:38:da:5d:c9:b8:e0:00:d3:ba:11:58:
         d6:09:f7:9d:d9:1e:7f:fd:46:c4:d5:ae:35:9c:ab:a3:2a:97:
         49:bf:22:8f:ac:61:f4:49:27:68:5a:a5:66:ba:40:e6:fb:5a:
         78:52:f9:36:4c:e7:51:7f:c6:fb:35:d5:f4:e9:7c:e6:bb:5d:
         b7:4d:51:22:f3:7e:b9:1d:f3:14:b9:19:5d:75:b8:a8:8a:42:
         6f:23:ea:0c:03:45:5e:28:1a:3c:1b:52:8d:b9:7e:5d:49:27:
         12:6c:4f:4b:6a:70:84:77:ad:a7:e1:14:2e:e8:e2:ad:d0:4a:
         41:a0:89:c0:ba:25:1f:30:bf:ef:85:e9:9e:28:01:0e:30:b1:
         35:65:9b:98:31:28:91:8b:70:ee:fe:a7:27:88:fa:76:4d:01:
         59:76:96:3e:50:fa:86:86:ae:68:32:8f:86:c9:63:f1:46:00:
         6f:0a:17:de:90:40:ad:2d:4b:32:93:a5:c4:70:58:6a:6e:7e:
         e1:78:27:5c:a5:e9:a6:21:bd:3a:08:1c:77:6b:45:79:c7:ce:
         2c:32:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:56 2025 by rpki-client