Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa
File:                     9218521f-8532-33e1-a486-a6f6017ef1a1.roa (raw, json)
Hash identifier:          4bYQhzVFEHdAldfL87r0fXmiyotLP3HdEbdnJavRejc=
Subject key identifier:   D5:30:37:B8:BF:C6:91:6B:7B:41:8E:63:0C:C3:B1:C2:A9:9F:DB:9C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487755DCA36520AE47120F5380
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     30103
IP address blocks:        149.137.96.0/21 maxlen: 24
                          149.137.104.0/21 maxlen: 24
                          149.137.112.0/21 maxlen: 24
                          149.137.120.0/21 maxlen: 24
                          156.45.64.0/21 maxlen: 24
                          156.45.72.0/21 maxlen: 24
                          156.45.80.0/21 maxlen: 24
                          156.45.88.0/21 maxlen: 24
                          156.45.96.0/21 maxlen: 24
                          156.45.104.0/21 maxlen: 24
                          156.45.112.0/21 maxlen: 24
                          156.45.120.0/21 maxlen: 24
                          206.247.0.0/21 maxlen: 24
                          206.247.8.0/21 maxlen: 24
                          206.247.16.0/21 maxlen: 24
                          206.247.24.0/21 maxlen: 24
                          206.247.32.0/21 maxlen: 24
                          206.247.40.0/21 maxlen: 24
                          206.247.48.0/21 maxlen: 24
                          206.247.56.0/21 maxlen: 24
                          206.247.64.0/21 maxlen: 24
                          206.247.72.0/21 maxlen: 24
                          206.247.80.0/21 maxlen: 24
                          206.247.88.0/21 maxlen: 24
                          206.247.96.0/21 maxlen: 24
                          206.247.104.0/21 maxlen: 24
                          206.247.112.0/21 maxlen: 24
                          206.247.120.0/21 maxlen: 24
                          206.247.128.0/21 maxlen: 24
                          206.247.136.0/21 maxlen: 24
                          206.247.144.0/21 maxlen: 24
                          206.247.152.0/21 maxlen: 24
                          206.247.160.0/21 maxlen: 24
                          206.247.168.0/21 maxlen: 24
                          206.247.176.0/21 maxlen: 24
                          206.247.184.0/21 maxlen: 24
                          206.247.192.0/21 maxlen: 24
                          206.247.200.0/21 maxlen: 24
                          206.247.208.0/21 maxlen: 24
                          206.247.216.0/21 maxlen: 24
                          206.247.224.0/21 maxlen: 24
                          206.247.232.0/21 maxlen: 24
                          206.247.240.0/21 maxlen: 24
                          206.247.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:dc:a3:65:20:ae:47:12:0f:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=edbccb72-ad99-440b-a54a-f26ec3d41f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a3:0d:40:6d:71:61:e9:4c:c0:65:0c:9b:2f:
                    40:1a:23:78:3a:e9:d3:00:5f:ce:72:8e:b3:3d:18:
                    e2:40:76:c0:fd:68:bf:54:1b:03:24:f1:54:16:32:
                    b5:e2:c8:09:cd:05:aa:11:b9:0e:ba:0f:a4:81:41:
                    00:ff:c0:b7:73:c4:25:17:7c:0f:3d:e7:47:bc:93:
                    b8:2a:3c:0f:ff:d7:b3:e1:d8:94:8a:aa:64:da:0e:
                    3d:03:35:2b:28:a4:01:38:57:cb:a5:e5:c5:78:a1:
                    26:e1:c1:f8:1d:38:17:bc:fd:d7:da:e5:ac:80:ab:
                    82:2f:e6:5d:f3:a2:4f:37:3b:a9:ea:d6:e6:56:0e:
                    8e:fc:a7:cb:0a:76:39:25:4a:32:04:dc:da:a7:31:
                    48:b7:cb:58:b4:eb:54:0a:1e:e9:29:e9:87:3b:98:
                    44:fd:c3:c5:da:05:24:71:ce:98:c0:13:2b:0d:4e:
                    4c:fc:35:84:83:6e:cc:0b:8f:02:ac:5a:0b:2e:93:
                    13:24:6d:b0:43:c9:48:ce:87:c3:f1:aa:6c:e5:9e:
                    13:5a:d7:67:d7:3d:3c:ae:b8:4f:6e:41:02:35:23:
                    aa:09:4b:8a:ed:34:56:61:72:12:65:94:bb:38:55:
                    d1:bc:6a:7b:46:78:3f:f3:e3:58:85:0f:1e:ff:ab:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:37:B8:BF:C6:91:6B:7B:41:8E:63:0C:C3:B1:C2:A9:9F:DB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9218521f-8532-33e1-a486-a6f6017ef1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.96.0/19
                  156.45.64.0/18
                  206.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f7:94:9c:55:37:f3:e6:cf:5a:81:96:56:1e:44:71:2f:19:
         cc:f9:ae:14:fe:a0:90:f0:c6:b9:bd:80:51:27:4d:61:fd:3b:
         62:f6:8c:2f:f6:d5:d1:55:06:7a:74:3d:7c:f5:8f:88:5e:39:
         81:dc:cd:ff:ad:6f:82:2c:81:38:32:20:25:34:11:2f:70:b6:
         ab:14:91:20:da:74:18:67:1d:77:69:1b:a3:a1:d6:46:ec:3d:
         3a:28:47:f1:2f:10:83:eb:c1:f3:ee:8f:dc:69:61:57:2f:28:
         7c:c7:14:37:6f:35:b0:12:4a:c0:01:da:ee:cb:0b:c6:6f:a0:
         d4:5c:3e:ee:c4:55:04:37:a3:72:a5:aa:85:74:bf:cd:a0:98:
         e1:ad:e8:71:59:7f:a0:b7:ee:89:d3:64:a1:1f:cf:f8:0d:e4:
         77:2c:2d:fa:72:6d:d2:07:df:75:00:9e:0c:bf:7b:11:84:95:
         aa:b4:9b:22:b8:ef:05:a0:85:ec:0a:f3:89:39:df:20:90:8e:
         15:2f:07:06:3b:4d:e0:fb:49:41:35:9d:21:38:6d:d6:7a:72:
         21:da:53:9b:83:42:70:f8:88:72:50:5e:d4:e8:90:ba:2e:0a:
         1e:d4:b1:dc:bf:5f:9e:75:2b:69:53:20:63:2d:00:70:ba:81:
         6f:2f:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:36 2025 by rpki-client