Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa
File:                     645eb0b3-7acc-3623-8925-9d501fddfb53.roa (raw, json)
Hash identifier:          YF0EkcM5m/JtCCNiEvGq6MkjluO82MUsX+u9lPy0zfo=
Subject key identifier:   CC:AE:3A:F7:B0:39:77:DA:05:75:D4:28:5F:56:A5:C6:3E:05:96:F9
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F43285849CE9A66D988CB925EE37A2840
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14496
IP address blocks:        192.6.143.0/24 maxlen: 24
                          192.25.88.0/22 maxlen: 24
                          192.25.109.0/24 maxlen: 24
                          192.25.114.0/24 maxlen: 24
                          192.25.125.0/24 maxlen: 24
                          192.25.149.0/24 maxlen: 24
                          192.25.169.0/24 maxlen: 24
                          192.25.218.0/24 maxlen: 24
                          192.25.230.0/24 maxlen: 24
                          192.25.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:66:d9:88:cb:92:5e:e3:7a:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=fa9715d9-eb1e-49b3-818e-033911742d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:74:1e:51:c9:71:15:8c:11:39:90:de:b7:
                    cb:0f:45:98:f2:78:ce:6e:e5:e0:46:a7:be:5e:8f:
                    f5:2f:12:db:18:a2:01:f1:11:b7:82:41:41:53:2c:
                    be:4b:ff:6e:01:ce:bc:38:30:cf:59:ae:62:be:b4:
                    de:01:d4:31:53:aa:a8:6c:dc:f3:a3:a3:c9:4d:b9:
                    1c:6a:c5:47:68:b1:99:1a:87:e6:f7:41:26:b3:ca:
                    3a:46:07:bb:25:48:1c:70:c7:7b:73:d6:6a:68:de:
                    a7:f3:6b:10:45:fd:0f:27:4d:aa:ac:d8:24:5c:91:
                    06:4d:2b:6d:e9:35:08:e0:39:74:a6:35:3a:42:c0:
                    5a:3d:8c:e9:96:58:38:c8:c2:d3:ac:de:fc:bb:ab:
                    d7:88:9f:2e:67:8b:8e:23:05:44:4a:26:cc:f9:55:
                    bb:dc:55:fc:39:5b:50:f0:c6:cd:09:62:ce:53:ff:
                    73:09:f2:f5:2d:76:6d:8d:07:43:5d:41:84:62:8c:
                    41:d9:12:46:14:92:f4:b4:fa:3a:8f:13:f9:47:d8:
                    7d:02:26:90:8c:11:1c:78:c7:29:f2:1e:5e:4b:b9:
                    9e:67:33:b6:62:a1:de:cd:47:de:02:ce:14:85:1e:
                    64:59:fb:56:80:83:16:5c:ad:43:81:b2:51:86:e7:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:3A:F7:B0:39:77:DA:05:75:D4:28:5F:56:A5:C6:3E:05:96:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.143.0/24
                  192.25.88.0/22
                  192.25.109.0/24
                  192.25.114.0/24
                  192.25.125.0/24
                  192.25.149.0/24
                  192.25.169.0/24
                  192.25.218.0/24
                  192.25.230.0/24
                  192.25.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:12:51:69:4e:8d:42:d4:d0:fe:3b:58:3e:16:92:16:51:
         9e:8b:b0:68:f4:5c:c0:a8:26:64:ab:2e:97:a5:a0:d2:c9:4d:
         d6:b3:09:dd:ac:30:f2:7a:a5:3e:36:ff:d5:13:fe:0d:13:b0:
         5c:7b:b6:26:81:fd:8d:d3:e0:f5:63:bd:a4:3e:33:4f:ae:6d:
         04:46:35:f9:24:91:ab:30:d9:7a:31:e3:63:17:f4:41:94:b4:
         07:f2:ef:e4:9e:e0:af:b1:bb:ab:80:39:fc:6d:e0:ab:88:f3:
         c0:d3:7a:57:96:80:9b:ca:58:47:da:21:88:41:8f:be:d3:9c:
         bf:18:52:d5:b7:f6:d0:62:27:dd:fc:2c:19:9b:5e:d2:4b:ba:
         a3:eb:96:08:95:ad:8f:d3:a7:b2:aa:52:cc:56:e6:63:8f:9f:
         04:ee:88:8f:bd:45:b2:eb:77:66:52:6f:fa:6c:9d:97:6b:f4:
         45:d7:fe:a3:8b:55:ce:8f:ff:96:c2:a6:28:4c:6e:d3:52:58:
         0f:77:9d:f6:88:51:1a:c5:2d:d1:a5:dd:04:dd:fb:56:23:2f:
         8f:fe:cf:94:46:7d:c2:9a:d1:96:28:86:b9:3c:27:a1:eb:cd:
         41:fa:88:b2:e2:d1:41:91:90:ee:a9:3f:a1:5a:41:70:8b:0a:
         d3:20:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:00:44 2025 by rpki-client