Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
File:                     7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa (raw, json)
Hash identifier:          bjUGUnlHNx25MEokz5g6Nb0SNOilN/WEkEB4ARIE47M=
Subject key identifier:   A3:03:E0:99:E7:B8:D8:46:AF:C4:9F:65:5C:53:58:B9:F4:2C:05:62
Certificate issuer:       /CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
Certificate serial:       010D0C9F4328584961B99EACFD5EB5D0AADE3580
Authority key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     40864
IP address blocks:        74.116.156.0/22 maxlen: 22
                          209.142.84.0/22 maxlen: 22
                          209.209.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9e:ac:fd:5e:b5:d0:aa:de:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=d55011d3-5645-4cd8-b182-8656d8769704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:09:4f:18:3f:61:a3:c0:b0:67:9a:33:3f:
                    7e:96:ab:1e:79:bd:88:eb:d2:be:48:19:8b:96:d6:
                    f1:b4:c1:85:ac:f3:ab:60:86:c7:0d:26:a6:d9:b9:
                    27:c8:f8:49:2d:48:ef:cc:83:8f:1f:b7:67:ac:fb:
                    62:73:9f:fb:8c:30:64:09:82:bc:88:58:88:1c:83:
                    bf:10:b4:82:7e:dc:c7:be:08:e9:4c:4d:3a:be:54:
                    5d:2b:b9:a3:44:af:b8:0a:6d:ea:fc:34:3d:f9:3a:
                    7c:dc:26:ad:4f:5a:53:a9:4a:a5:99:a3:e5:4e:f3:
                    76:a2:55:89:1a:92:28:3a:f2:c9:e8:5e:1d:42:18:
                    51:b5:51:c8:d1:7c:f3:7a:79:bd:43:88:01:92:a1:
                    20:eb:d7:93:a2:75:66:f6:ce:d0:8c:1c:26:45:8c:
                    80:ac:57:40:16:5b:a3:90:9b:57:45:25:3e:16:5f:
                    07:76:32:30:3e:fd:ba:67:ac:ef:55:c2:ca:f5:ac:
                    52:73:42:6b:8d:93:04:fa:63:d5:c4:88:ff:3f:5c:
                    68:fd:3c:1f:56:c5:05:08:2b:15:b2:f3:98:b0:01:
                    8a:b4:0a:57:82:df:ba:27:dd:42:6e:d8:ec:76:e8:
                    04:a7:47:f8:e4:97:bf:e2:16:56:a9:b5:f4:eb:60:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:E0:99:E7:B8:D8:46:AF:C4:9F:65:5C:53:58:B9:F4:2C:05:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl

            X509v3 Authority Key Identifier:
                keyid:FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.156.0/22
                  209.142.84.0/22
                  209.209.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:99:09:57:a2:a3:28:8e:eb:8f:0d:da:44:12:fb:d3:73:
         ac:98:b2:5c:ff:c7:db:b7:bd:2e:47:f0:57:80:fe:90:09:c8:
         25:2c:52:12:7f:11:d2:d0:89:08:f8:44:1c:8e:01:55:23:15:
         73:56:06:4c:e4:40:c9:05:d6:f0:df:c2:ef:97:33:60:25:65:
         f9:43:b5:46:8c:41:f5:83:25:a0:45:15:15:d0:92:73:34:c1:
         80:a9:91:6a:18:83:1e:9a:7d:77:99:e6:76:25:57:a5:b4:d5:
         e1:d7:f2:74:fd:1b:f5:ce:3a:a8:6c:f1:08:8d:b5:13:51:f5:
         85:93:6f:6c:f6:70:29:dc:b1:bc:82:14:ba:b1:1e:87:d3:c2:
         28:68:50:ca:17:18:5f:3a:a9:e6:7b:41:d1:0f:bd:9a:8c:38:
         13:ca:b9:08:f3:d1:f0:61:de:2c:84:c8:ff:b8:f7:4d:b5:76:
         c6:95:20:df:77:e7:f7:f7:20:ea:92:d6:82:63:8d:2d:b4:87:
         db:6c:a8:0c:40:df:41:3b:68:ec:e2:c9:34:12:38:33:7f:81:
         62:e1:ac:16:bd:b3:e2:39:b8:ea:ca:e2:81:5f:7a:14:41:2c:
         5a:f2:e1:80:4d:a8:d4:0f:44:bd:76:00:3d:75:de:a6:d8:2f:
         0f:7b:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:49:55 2025 by rpki-client