Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa
File:                     c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa (raw, json)
Hash identifier:          dxC0GzfF8QW8kAeNB2MEi4K1mZklZo3P7J537GGq/CM=
Subject key identifier:   F5:F1:36:BE:DB:6F:95:50:61:CE:ED:14:B1:BB:39:E9:7D:AF:51:33
Certificate issuer:       /CN=7470f73a-61d0-4b9c-80ff-a407cc438710
Certificate serial:       010D0C9F43285849C4D4C2E7C886803F80411A40
Authority key identifier: 1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     10821
IP address blocks:        24.224.0.0/19 maxlen: 24
                          206.253.32.0/19 maxlen: 24
                          209.42.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c2:e7:c8:86:80:3f:80:41:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470f73a-61d0-4b9c-80ff-a407cc438710
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=9e76b6c7-03f5-4a81-a27e-2551dba15d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:a1:a7:c6:34:1e:6c:f8:8c:82:ce:4b:c2:
                    6d:3c:28:8e:b3:cf:ec:b7:24:d6:03:45:90:51:e5:
                    d5:bf:2b:04:c6:3d:ca:ab:36:10:4a:80:00:23:8c:
                    d6:d1:57:4f:85:43:92:69:bb:59:6e:4a:03:c1:f1:
                    c5:8c:3f:9e:2b:93:f3:59:b6:94:dc:11:b3:85:07:
                    21:66:48:db:49:a0:14:f3:ca:c9:87:13:5c:44:49:
                    62:4e:67:1b:62:89:a3:61:4a:d8:86:cb:e7:5f:e0:
                    22:81:e3:3c:c3:95:de:d8:ca:da:58:8e:78:84:41:
                    3d:57:9a:ce:1a:1c:0a:c3:b0:ca:42:6c:e9:f7:42:
                    84:a3:ef:fd:d2:e2:f0:15:ef:98:24:ba:aa:9f:79:
                    7a:18:d8:52:02:90:cd:ad:17:6a:20:8f:41:a4:de:
                    27:e2:88:9d:40:cf:d3:68:43:70:b2:99:78:1d:40:
                    78:a1:79:ff:01:d6:92:68:8b:27:cc:d6:46:fc:70:
                    39:7c:29:ec:81:ba:23:8d:cf:f1:17:29:f8:cd:1e:
                    3a:3b:b1:3b:dc:8d:7e:51:ed:9b:7e:12:80:2f:2d:
                    13:83:ac:4f:c7:d2:05:c7:6d:a9:fc:29:26:39:3e:
                    3c:9b:9a:32:84:f0:a6:1e:c0:95:5e:26:67:6a:8d:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F1:36:BE:DB:6F:95:50:61:CE:ED:14:B1:BB:39:E9:7D:AF:51:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl

            X509v3 Authority Key Identifier:
                keyid:1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.0.0/19
                  206.253.32.0/19
                  209.42.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:51:34:80:40:fe:b2:5b:ae:9e:16:87:85:59:e4:ff:d7:3e:
         2a:c6:d5:e7:25:5e:6b:ab:fe:be:1a:6c:28:46:4c:a1:82:e9:
         d4:03:fe:2d:83:24:9b:46:7c:1f:18:4f:5a:fa:98:d5:04:df:
         d3:8b:19:63:d1:f5:8f:75:f0:b1:37:d8:4a:a4:48:4d:bc:ab:
         44:e2:da:6c:6d:18:e3:89:2b:0b:35:33:c4:28:4a:9f:fd:26:
         56:24:38:ff:df:22:d4:87:5a:d9:72:8b:a7:a7:f0:fb:4a:5c:
         75:81:4a:cc:dc:33:f1:63:82:9e:17:d2:1c:dd:59:f2:d3:2f:
         b1:bb:b1:51:0c:f9:48:fb:97:77:f9:36:85:d9:0a:ba:2a:e5:
         b7:dc:56:4f:f3:d1:f0:b1:fa:ee:bb:a0:97:57:f1:f5:97:9b:
         59:b7:fa:27:2a:6c:a8:92:ef:9b:b4:28:64:98:19:43:05:40:
         e5:c4:94:2b:1a:78:ea:82:7b:79:73:ab:70:f7:00:72:67:4b:
         23:ba:39:a2:fe:02:02:0c:2e:dd:5b:d4:5f:d9:38:ee:c4:b4:
         17:8b:1c:fd:a6:4f:f8:3c:ba:c8:b7:23:2d:ee:e6:b0:e6:ba:
         5d:92:8e:18:30:1d:29:af:f3:33:0a:5e:e9:e1:20:97:45:5c:
         bc:52:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:13:52 2025 by rpki-client