Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa
File:                     32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa (raw, json)
Hash identifier:          P+S6hHqxshBLOHxmj/7Hvf7Y1a6iONMIaQNEtpPG3EQ=
Subject key identifier:   09:1F:1B:13:3B:A1:B5:EB:CC:D1:9C:F5:84:62:68:F5:2E:97:2E:8F
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285849C0A4E5F85BAA1FD12694ADD0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     13916
IP address blocks:        67.231.144.0/20 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          208.84.64.0/22 maxlen: 24
                          208.86.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e5:f8:5b:aa:1f:d1:26:94:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=134722b1-a46a-4ac3-b3a0-d641f0504e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:f4:39:c9:3c:07:b3:88:48:21:6e:d2:e9:
                    be:ba:a1:6e:aa:88:4e:c5:6e:df:a5:89:55:98:89:
                    3b:25:ac:1b:cb:78:5b:e8:ab:23:a7:3e:45:54:cc:
                    95:9a:eb:98:37:d9:c4:2d:86:9f:35:bb:b8:06:5d:
                    20:98:df:9c:08:84:69:84:93:ee:54:10:34:68:81:
                    b4:33:e4:db:78:59:0f:99:71:a5:1e:cb:09:1d:60:
                    60:48:bb:50:46:9c:7f:d4:4f:e0:df:db:14:54:0b:
                    54:a4:9c:a3:51:48:07:8b:2b:3e:ab:8a:7d:85:35:
                    f2:1a:6a:69:74:c8:4b:70:e1:35:8b:e9:f7:69:ea:
                    e1:36:ae:12:20:42:e3:95:f7:d2:aa:16:5e:b1:43:
                    fa:80:cb:bb:e6:29:c7:a7:87:98:35:b6:e1:9a:c5:
                    87:b5:bc:0d:13:01:02:89:51:ba:88:3a:1b:d2:70:
                    dc:50:87:ca:f6:20:5f:13:02:28:02:9b:c3:18:26:
                    74:8f:eb:23:cb:6d:be:bc:a9:90:22:06:35:da:ac:
                    e5:61:20:de:36:56:7d:e2:24:92:fd:f2:a5:34:a9:
                    b4:48:0d:40:8e:ba:9c:0f:cc:15:6b:19:12:9d:db:
                    8c:d8:9e:c0:30:00:48:40:c7:8d:15:d3:fb:a6:83:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:1B:13:3B:A1:B5:EB:CC:D1:9C:F5:84:62:68:F5:2E:97:2E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/32866b03-f9d0-342a-9c69-0c11b3ce19eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:21:6b:c1:23:b7:cb:b0:a9:9e:73:9f:28:3f:25:9a:8b:75:
         28:03:32:24:c8:7c:bd:a4:20:19:78:93:dd:51:e9:e7:ea:8b:
         2d:be:7c:69:a9:87:f2:0c:c4:9f:a6:ca:17:60:2e:71:cd:ad:
         88:d0:b1:c9:e9:4a:2e:1b:f1:33:99:fa:e2:da:b0:ab:de:a0:
         81:4f:22:b5:71:a6:bd:2e:0f:58:b2:36:70:0f:f6:dc:bc:f9:
         fa:15:7c:f8:7d:ea:ac:7c:04:02:bd:57:52:d4:a6:b2:ab:c0:
         03:28:2b:f8:d7:80:10:fb:0d:27:ba:75:c7:9e:e8:4e:ec:e0:
         df:df:69:b0:15:18:9c:49:3c:58:e2:7b:e7:fd:18:b0:6d:22:
         7f:09:89:66:e0:1c:4e:0b:57:7b:3d:97:6c:d6:9d:b5:7f:b2:
         fc:7a:1c:d4:24:80:77:ff:15:c8:d4:6e:a6:a9:41:f9:a9:2b:
         f4:17:da:e9:4e:b7:07:d3:44:2b:27:41:f3:10:1d:69:06:e1:
         ab:5e:31:5b:c8:89:bc:81:df:dc:8f:c5:0a:3f:be:7d:fa:cb:
         88:6f:4c:3e:61:19:48:9c:ca:4b:64:09:83:47:7c:91:9a:30:
         e6:27:11:06:83:c4:de:76:62:66:61:68:73:37:3a:c7:d7:d3:
         c7:56:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:48:35 2025 by rpki-client