Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa
File:                     44e22938-b46f-36b4-bcab-9758a3800112.roa (raw, json)
Hash identifier:          jqHkRtECnQwL22yiGEWTaM1p6G67XX1KSX78Gj2cSe8=
Subject key identifier:   8C:22:77:96:04:0B:58:5F:64:A3:8A:BB:A9:65:97:AB:D2:0A:AA:F0
Certificate issuer:       /CN=e987b11b-b307-4d95-abbc-a061ff00c004
Certificate serial:       010D0C9F43285849B9A9F7831D0ABCE2BAC931C0
Authority key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     11475
IP address blocks:        134.199.40.0/22 maxlen: 24
                          162.219.180.0/22 maxlen: 24
                          208.82.232.0/22 maxlen: 24
                          2602:ffe1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:f7:83:1d:0a:bc:e2:ba:c9:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e987b11b-b307-4d95-abbc-a061ff00c004
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=e85e2427-ff70-4c9e-92f6-1ebbf13e3a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:32:98:e0:35:07:ae:e5:00:44:4a:d4:0f:
                    2b:64:68:d5:be:5b:34:18:c1:e2:7f:15:57:0e:d6:
                    07:bf:0c:99:0b:56:75:78:c4:72:60:85:ce:da:98:
                    41:b1:3b:70:61:72:c1:08:68:63:63:1f:9a:8f:63:
                    10:cd:df:7a:68:ad:93:a8:43:76:fb:62:75:4c:df:
                    48:54:e2:e4:ed:59:17:c5:d2:76:0a:df:8e:d9:07:
                    d1:2f:77:33:ca:13:e0:bd:50:7c:3c:74:76:2b:74:
                    f7:6c:17:29:90:05:5e:47:7e:26:5c:60:a9:1c:2a:
                    4c:a7:4b:e6:d1:fb:51:9d:2d:5c:fe:58:77:84:9d:
                    67:d5:0a:d6:27:dc:70:8f:a1:d0:66:d8:39:47:65:
                    36:b6:3a:4a:ab:02:bf:ad:73:ff:6f:57:9b:6d:ce:
                    21:90:5b:64:65:33:bf:6c:13:dd:8d:0e:0c:af:a4:
                    11:80:13:6e:09:a5:e9:84:3e:c0:57:21:8a:c8:b7:
                    9e:2b:79:41:b2:39:86:3b:97:f4:4d:9f:41:10:99:
                    72:1c:28:04:2f:24:cf:30:a6:33:02:a4:3c:b2:0d:
                    2a:30:52:b4:03:e6:2a:6c:b0:d7:ad:0a:b6:eb:06:
                    b6:28:0b:45:35:4c:7c:35:2c:71:c9:2f:34:aa:59:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:77:96:04:0B:58:5F:64:A3:8A:BB:A9:65:97:AB:D2:0A:AA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/44e22938-b46f-36b4-bcab-9758a3800112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.40.0/22
                  162.219.180.0/22
                  208.82.232.0/22
                IPv6:
                  2602:ffe1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:26:0a:f6:c6:6f:92:f8:89:58:c2:8e:fd:ff:bf:ce:af:
         b2:9f:eb:b7:51:f0:51:cf:23:c3:31:fc:31:68:63:e2:68:89:
         2b:59:74:a4:05:09:a9:03:a3:84:4a:51:17:73:d0:2c:bb:c9:
         91:2f:df:1b:bc:98:ee:03:42:6e:a8:a5:44:a5:1b:66:29:f6:
         69:f4:0a:ae:1e:f0:13:af:a9:70:70:32:7c:41:97:00:dc:e1:
         08:62:d4:81:b6:31:3a:5a:ab:f4:40:fd:22:2c:62:33:90:23:
         11:30:be:3d:af:f4:f8:77:42:b0:29:f4:cc:5a:a0:2b:3d:f0:
         1f:e8:cc:01:fd:32:ee:ee:e9:ec:96:a3:16:14:a9:91:e8:28:
         df:ee:a2:ee:a1:29:60:5e:d3:2a:87:14:52:fa:99:42:b8:94:
         a1:31:a8:c4:08:b8:b7:0b:09:0f:3e:d1:6a:ba:96:da:c8:e6:
         55:16:2a:88:87:10:f4:83:e1:2d:d8:e2:51:c4:c9:8b:b1:22:
         8e:6d:cb:f7:47:ba:85:6e:39:a3:ba:9a:b8:13:43:58:d7:6c:
         23:6b:e3:15:dd:df:89:c0:20:ad:7c:1f:40:59:77:cc:98:69:
         c1:6a:70:ea:7d:c0:f3:bd:32:d0:ba:f6:f1:ea:58:71:26:0a:
         76:a2:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:19 2025 by rpki-client