Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
File:                     0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa (raw, json)
Hash identifier:          1VWWF6eBQtsN20g4TJ1xN0fFMIj0J7fDBg2G6p+bC9Y=
Subject key identifier:   9D:8A:F1:71:DD:FE:EF:4D:0E:80:F5:E3:70:E5:3D:C2:EA:1D:C0:82
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F43285849C4D4CC48BFED49F1F49F2300
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     33559
IP address blocks:        107.155.128.0/23 maxlen: 24
                          184.175.192.0/23 maxlen: 24
                          184.175.200.0/22 maxlen: 24
                          208.84.132.0/22 maxlen: 24
                          2604:4600:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cc:48:bf:ed:49:f1:f4:9f:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=0441a56f-0161-46e1-a556-34a5dbc00da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:87:37:73:6b:06:6c:e7:1c:70:46:95:c0:
                    16:29:cb:7a:64:67:5d:13:9f:de:82:49:3b:90:c4:
                    a8:dd:a1:8a:b4:bf:d1:96:48:d0:96:ae:58:0b:01:
                    24:8f:87:c7:b7:4a:7d:6a:75:78:18:b2:24:b8:72:
                    93:c1:ce:ce:11:1a:27:6b:b3:ea:7c:a4:3c:44:20:
                    5c:b2:5f:3b:c8:46:eb:d6:18:ee:f7:f2:00:f9:ee:
                    6e:27:db:37:a9:9b:19:ac:13:0c:2e:73:fa:c7:3b:
                    6d:a4:0a:86:8d:63:c6:17:13:ae:34:38:29:c5:13:
                    74:34:7f:10:a9:13:7b:9e:6f:f9:e9:2d:34:89:57:
                    bd:55:ec:88:11:e7:a6:18:cd:cc:9d:02:71:50:fa:
                    27:13:0f:c3:86:f5:ed:b7:a6:ec:37:0a:a1:cb:0e:
                    8d:8b:c4:db:ec:79:68:6f:16:49:f2:2c:08:03:6b:
                    f9:1e:35:a4:87:8b:c3:bf:be:fa:1d:52:de:8a:a6:
                    e8:20:35:d8:dc:28:bf:de:76:52:fe:7b:83:0e:9d:
                    78:de:f9:97:72:b5:13:cf:14:9a:f0:54:e1:bf:c2:
                    f2:dc:b1:1d:e3:69:d3:1d:31:b2:b5:86:ea:0d:a5:
                    28:07:9e:f3:32:70:4b:79:b6:34:6f:35:f5:c6:92:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:F1:71:DD:FE:EF:4D:0E:80:F5:E3:70:E5:3D:C2:EA:1D:C0:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.128.0/23
                  184.175.192.0/23
                  184.175.200.0/22
                  208.84.132.0/22
                IPv6:
                  2604:4600:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8c:0a:84:06:3b:95:cd:45:fd:99:89:4a:05:32:56:bc:a0:
         96:2a:4d:0e:a8:64:7c:20:d0:1f:c3:fe:4a:81:e5:c0:1e:2c:
         a0:61:f2:d0:c5:3e:4f:09:82:20:79:1b:9b:23:3b:ea:d0:2e:
         1f:e2:1b:88:92:70:6e:76:87:35:84:3a:52:7a:5a:7e:26:0f:
         73:d5:d9:ce:c1:17:0e:d4:cb:5b:20:ae:48:75:91:a6:99:9a:
         7e:ad:80:00:05:73:94:4e:6d:2f:2d:d5:6e:2e:a5:8f:0c:38:
         0a:93:aa:ef:7a:2d:91:b4:be:1c:76:35:35:4a:94:bd:e6:7b:
         d3:c5:4c:70:45:a7:47:22:2d:27:dc:4b:2a:00:74:b2:af:53:
         03:36:cb:ac:45:34:2b:3e:7a:3e:a1:0a:b9:5e:68:52:7b:1d:
         1e:47:ac:f2:97:0a:72:71:aa:60:46:91:4c:1d:55:46:37:42:
         53:5f:60:92:68:55:9b:d3:45:a2:55:a8:e2:88:1b:b0:fe:5f:
         2c:1a:4c:b8:14:5f:e5:aa:64:a6:c8:e6:e9:6d:01:64:fa:43:
         5c:9f:a9:e5:be:fc:b3:d7:3c:dc:c0:ef:d2:e2:66:cf:84:84:
         9d:27:ab:7a:f6:93:56:74:09:1c:b6:a7:2f:27:78:f1:5a:dd:
         a2:96:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:33:17 2025 by rpki-client