Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/43ccc856-98fc-3a84-b177-7d81508be29b.roa
File:                     43ccc856-98fc-3a84-b177-7d81508be29b.roa (raw, json)
Hash identifier:          JZ/IxU5cMKQqaXz76OkfnJxjcejR5xx1yrnkcC2Du8Q=
Subject key identifier:   99:28:68:09:A8:24:23:F9:64:50:A8:AF:03:30:98:B4:7D:2E:27:03
Certificate issuer:       /CN=1701ecde-5b4d-441b-badd-359ef0fbe0da
Certificate serial:       010D0C9F43285849BC74AD26A0D691E7FB534960
Authority key identifier: EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/43ccc856-98fc-3a84-b177-7d81508be29b.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     395194
IP address blocks:        147.92.48.0/22 maxlen: 22
                          149.19.104.0/22 maxlen: 22
                          204.77.164.0/24 maxlen: 24
                          204.77.165.0/24 maxlen: 24
                          204.77.166.0/24 maxlen: 24
                          204.77.167.0/24 maxlen: 24
                          2607:5480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ad:26:a0:d6:91:e7:fb:53:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1701ecde-5b4d-441b-badd-359ef0fbe0da
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=310c99db-2f94-4d46-a7eb-8697f1915507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:80:fc:42:58:d0:64:bb:b3:5f:7b:61:10:
                    70:09:4b:c7:b9:4c:55:11:f8:89:17:d5:7e:93:2f:
                    84:7c:20:ae:33:1b:e7:c1:ce:68:54:38:a9:10:f0:
                    8e:87:c3:fe:30:34:9b:3c:18:41:5c:71:60:76:43:
                    69:91:af:be:35:e6:5c:cd:a6:39:cc:08:bc:62:88:
                    1a:f3:96:91:f1:66:92:47:e9:82:45:85:26:5d:1d:
                    c0:f6:8e:0e:03:97:e3:96:11:2c:02:60:0e:54:6d:
                    92:ed:69:05:56:79:01:6a:71:2c:11:db:73:b1:d2:
                    5a:e8:84:59:46:3d:58:6c:b7:bd:c5:a7:60:44:3e:
                    8d:e5:75:a3:0e:2d:7e:39:25:d3:c9:f2:29:0d:dc:
                    45:e3:45:df:69:d9:91:d3:86:01:61:85:ca:77:88:
                    c8:26:5f:6e:91:ff:ee:22:1f:15:a6:5e:1b:e6:3b:
                    02:59:b0:f6:18:c3:a3:24:cb:d6:a7:a1:a3:6f:46:
                    67:27:b3:f0:8d:24:6b:db:a2:af:d6:34:a0:a7:cf:
                    0f:3b:88:f9:c1:0b:74:30:a5:56:41:b2:b2:38:e7:
                    f1:69:81:fc:80:a2:d4:ca:74:ab:4a:c9:c9:95:46:
                    a3:15:54:56:50:af:a9:99:42:e0:de:07:38:ba:03:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:68:09:A8:24:23:F9:64:50:A8:AF:03:30:98:B4:7D:2E:27:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/43ccc856-98fc-3a84-b177-7d81508be29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.crl

            X509v3 Authority Key Identifier:
                keyid:EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.48.0/22
                  149.19.104.0/22
                  204.77.164.0/22
                IPv6:
                  2607:5480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:11:a4:e8:8a:9c:48:3b:73:2b:c3:22:98:d1:b4:5c:51:47:
         3e:e9:14:97:8b:7f:ae:18:61:35:4b:ab:3b:e7:d6:a9:19:49:
         37:6f:0b:4d:e3:6b:09:4b:66:ab:4c:b2:e7:d7:6f:fd:82:8d:
         1a:2a:a4:b0:88:f6:d2:57:a9:64:34:f4:a1:27:e7:ca:94:52:
         f0:a9:06:45:5c:50:4c:81:f6:00:34:2b:53:f4:0a:d7:45:0c:
         5f:13:db:6b:93:7a:4c:07:34:7e:0c:83:46:79:d7:a2:3e:d3:
         ab:92:a9:76:29:5a:e0:d8:14:c7:4d:47:1d:13:0e:ee:33:a0:
         d4:cd:57:0f:d4:5b:98:2f:fa:53:17:b8:e5:f1:9e:c8:11:18:
         cb:aa:6d:61:eb:8d:5e:6a:2e:c8:49:2b:a1:91:70:0a:2d:8a:
         cc:8b:2f:80:16:f3:4b:f0:11:db:82:51:43:60:6a:85:f9:3a:
         15:e4:eb:a3:ef:b7:ab:8b:7a:c3:5c:83:14:95:1a:52:f4:c1:
         c6:cd:8f:97:47:e6:57:d8:24:99:07:19:ca:70:70:e4:a2:27:
         1f:6e:5d:0e:90:08:6a:42:5b:86:6d:ba:5c:2a:1d:86:5b:b2:
         42:7c:21:a9:44:52:23:82:80:b5:8e:95:02:32:2e:1e:58:14:
         48:a6:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:31:22 2025 by rpki-client