Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
File:                     6ac34efc-b417-35c3-8e9e-422402db22ca.roa (raw, json)
Hash identifier:          mHLSs+w+f/n9wNDoB6Ioj9/EO7GRT8HBOLXx5BwKbhI=
Subject key identifier:   69:E6:0E:AB:9E:B1:A4:5D:AC:5D:CE:B3:22:28:BB:B8:8C:EB:9C:45
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F43285849BDDA17E0B1928BA1A686A180
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     138699
IP address blocks:        71.18.227.0/24 maxlen: 24
                          101.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:17:e0:b1:92:8b:a1:a6:86:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=d8e714b9-ef48-4901-b068-fc5822d1b626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:79:dd:75:fa:0a:af:b0:b0:b9:21:25:00:
                    32:20:fc:9d:ae:3b:42:3d:a8:b8:2b:29:34:a8:cc:
                    16:b3:43:43:48:90:89:d2:a0:99:85:51:86:aa:60:
                    90:b4:06:5b:9a:f1:10:dd:94:b9:58:20:f8:c4:24:
                    8e:95:db:be:97:15:67:80:66:c1:8d:51:b2:d4:82:
                    77:56:1c:06:58:11:67:02:58:03:94:fe:2a:c4:6a:
                    0c:f5:dc:00:0d:44:08:99:fa:9a:cf:e9:96:aa:77:
                    03:90:8d:d2:6b:a6:fc:73:c7:c2:27:d0:64:cc:7c:
                    ca:53:bb:fa:f3:79:db:07:89:da:01:3f:25:26:cf:
                    8c:e0:9f:35:1d:cf:9b:64:70:84:60:57:2f:9c:2b:
                    ee:91:bd:17:8f:15:42:48:08:a4:bb:fa:92:47:3b:
                    00:4b:f4:ce:00:81:73:e9:94:9a:04:ca:2d:72:bf:
                    74:ed:31:f5:8d:90:e9:c1:3d:30:75:f2:b2:cc:0e:
                    56:87:dd:53:5e:4b:44:19:13:df:83:74:d2:93:ea:
                    fb:86:66:3f:97:97:50:98:29:b3:33:12:3c:f4:4d:
                    ac:e3:35:cb:e8:c8:c1:f4:5d:f9:04:2f:96:d4:a2:
                    18:59:24:1b:a3:45:03:3e:ca:e0:36:90:8a:d0:42:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E6:0E:AB:9E:B1:A4:5D:AC:5D:CE:B3:22:28:BB:B8:8C:EB:9C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.227.0/24
                  101.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:ca:7b:10:db:7d:d2:4e:eb:93:d2:65:49:08:b1:fa:7d:
         ab:ec:b3:29:20:a8:9b:e5:27:00:b1:0b:75:05:bf:5a:bc:c8:
         5d:c3:50:5b:ba:ef:ae:6c:bd:37:68:65:29:9c:44:29:e0:61:
         2e:f9:7f:b5:63:94:22:e3:5c:77:4b:fb:0f:03:51:b4:7f:64:
         5c:87:6d:60:ff:1b:5f:61:8e:7f:92:b1:e7:08:f3:88:ac:34:
         1e:cb:09:cd:c8:23:dd:92:3f:f9:97:e0:d8:35:62:f3:6c:64:
         f1:47:aa:59:5b:77:69:a2:95:0e:6f:08:b1:b2:80:4e:1f:4d:
         18:7d:aa:5e:bc:72:f5:ce:e6:5e:9e:d4:5d:2e:cd:77:cc:56:
         04:dc:8d:d6:25:ae:0d:10:0f:c3:e5:9f:33:d7:7e:09:48:21:
         3f:3e:64:90:56:cb:2b:5b:6e:44:5e:6f:06:bf:ba:17:4e:cf:
         69:3d:71:99:a7:b4:cb:fe:35:79:17:a4:fd:59:a0:17:2c:ce:
         39:12:07:d1:a0:11:80:51:de:91:1a:64:fe:96:85:71:0c:d4:
         3b:ac:50:62:a8:7e:71:7f:d0:4b:2d:0b:2e:67:1e:a3:11:3e:
         13:3b:8a:a5:0d:52:a8:46:6a:8f:17:45:ee:1e:cd:fb:e6:56:
         6c:e6:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:00:46 2025 by rpki-client