Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File:                     85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier:          6kgGakhf+NeU4y9aUQauB3VGf0S3MuRbynGdBh0r/Io=
Subject key identifier:   19:80:7A:3F:70:95:CF:46:B8:4C:02:22:42:4A:76:E8:1E:0D:5C:ED
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F43285849B6DF4EFCD46A757EE5B42A80
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36001
IP address blocks:        134.195.20.0/22 maxlen: 22
                          162.210.60.0/22 maxlen: 22
                          172.98.220.0/22 maxlen: 22
                          173.242.80.0/20 maxlen: 20
                          192.200.136.0/21 maxlen: 21
                          199.167.212.0/22 maxlen: 22
                          206.126.208.0/20 maxlen: 20
                          209.103.224.0/19 maxlen: 19
                          216.127.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4e:fc:d4:6a:75:7e:e5:b4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=fcc6fc89-0ebe-4db5-9038-24ddc052a188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:d1:6b:3d:ec:df:70:09:bf:e6:03:fb:28:
                    fb:7b:ed:d6:e2:df:a3:87:d6:f5:97:f5:0f:29:b1:
                    b7:71:1c:1e:12:8e:5a:e6:d1:c5:e2:f3:d2:36:36:
                    80:42:be:f7:b8:87:02:16:e4:c5:1e:63:d2:ab:5f:
                    f9:b4:c7:cd:f8:68:5e:12:27:f6:16:48:8e:6c:f1:
                    1d:72:95:dc:7a:a2:26:a6:66:34:49:9b:a9:95:1f:
                    5c:d5:5e:d8:e7:10:e1:6b:de:c9:80:27:e6:7e:0c:
                    61:73:2c:80:f2:7e:08:32:01:0c:d8:a4:b4:2e:4b:
                    60:96:d9:77:fb:a6:4c:bf:e0:70:97:aa:5b:c8:07:
                    43:2a:1a:93:ac:8f:cc:f0:8d:bd:d1:01:a6:af:2b:
                    c8:6b:b5:2e:69:51:80:4d:11:a5:63:7e:58:6b:7b:
                    bc:4d:03:6b:4b:0d:6c:31:b9:ab:4e:81:5e:35:b7:
                    10:fc:78:71:86:21:06:1a:f4:fd:76:8b:10:17:75:
                    eb:56:bd:10:09:7a:cd:7b:c6:a4:f8:33:1d:41:b7:
                    3d:45:e7:5d:03:ce:b5:a5:dc:48:a1:59:4a:d3:a5:
                    1e:15:98:c9:d3:c0:fb:4b:09:36:37:73:29:9d:0f:
                    1d:96:3f:e3:28:44:c1:d1:94:ad:8d:eb:9d:e1:e6:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:7A:3F:70:95:CF:46:B8:4C:02:22:42:4A:76:E8:1E:0D:5C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:f7:dc:93:36:5f:07:fa:51:28:66:f3:09:6d:20:26:65:
         c8:a9:38:e9:73:39:22:6a:3e:1b:f4:02:64:7b:f7:5c:de:2f:
         99:3d:3d:1c:cd:3d:33:9f:1c:e4:bf:3a:53:2a:61:ed:d3:2d:
         4e:42:2f:77:ec:20:83:92:84:d8:4d:cb:d9:65:43:7c:32:80:
         25:b2:51:c6:9c:57:c1:54:7f:e9:54:4f:e8:08:21:4d:b6:49:
         63:78:6b:76:ef:ca:66:0e:f3:a2:b4:55:cf:c4:de:d6:f2:60:
         d9:7d:07:d0:48:2a:15:50:3b:35:98:66:ba:25:08:52:69:03:
         e1:9e:01:45:8d:32:5a:12:ad:6d:2a:36:22:74:e3:69:ae:c4:
         77:47:68:79:32:39:75:02:c5:72:bd:9d:05:ab:06:63:90:47:
         2a:5c:31:69:43:94:20:91:fa:3b:35:21:43:af:2a:ce:a0:a7:
         72:4c:b3:68:8a:9c:6a:ad:d3:55:28:17:0f:9d:a6:6b:2f:09:
         6d:93:cc:32:2d:0c:d2:95:5a:d1:27:53:b4:17:28:2e:1b:9a:
         7c:ac:32:f8:3a:d9:53:2a:70:3d:7b:be:1f:8e:0d:6f:9b:6a:
         c3:f9:1d:f5:e7:4c:4a:73:4c:7f:30:97:0a:1a:44:67:51:25:
         c4:99:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:38:30 2025 by rpki-client