Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa
File:                     0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa (raw, json)
Hash identifier:          u8KETC7Z0S3QSgFJ97CircOQBCH9OYoHFZINjvayPXw=
Subject key identifier:   06:76:80:11:AD:C7:9F:AF:19:64:AD:DD:20:B9:0D:9B:66:FA:E3:93
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849BDDA1D4BE6EAC122A3B714C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        159.124.64.0/23 maxlen: 24
                          159.124.66.0/23 maxlen: 24
                          159.124.68.0/23 maxlen: 24
                          159.124.70.0/23 maxlen: 24
                          159.124.72.0/23 maxlen: 24
                          159.124.74.0/23 maxlen: 24
                          159.124.76.0/23 maxlen: 24
                          159.124.78.0/23 maxlen: 24
                          159.124.80.0/23 maxlen: 24
                          159.124.82.0/23 maxlen: 24
                          159.124.84.0/23 maxlen: 24
                          159.124.86.0/23 maxlen: 24
                          159.124.88.0/23 maxlen: 24
                          159.124.90.0/23 maxlen: 24
                          159.124.92.0/23 maxlen: 24
                          159.124.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:1d:4b:e6:ea:c1:22:a3:b7:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=e8289622-64c0-4f2b-86a5-0e587efb3078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:0e:b9:1f:f1:3e:a9:d8:e4:5d:a8:06:71:
                    13:2a:46:6b:72:7f:0f:81:a7:59:19:5b:62:a5:cb:
                    54:3a:a6:c6:a7:76:17:bc:14:63:77:bf:84:70:23:
                    9b:55:de:0b:a5:ca:52:99:26:7e:30:3f:34:51:de:
                    b6:73:c8:18:fe:38:cb:f6:78:1f:f4:7d:20:ab:f7:
                    ba:25:d6:3a:50:af:fb:c0:1b:c9:a0:b3:7f:8b:df:
                    26:07:a3:a3:59:08:17:1c:68:41:a5:e8:5a:7f:51:
                    7c:3c:a9:3e:97:10:ab:c5:b9:90:12:2f:51:2a:0d:
                    89:01:ea:a4:3b:b7:d7:76:93:d5:b7:18:4d:47:48:
                    45:7b:b6:e8:79:ce:c0:7d:51:87:9b:4b:43:a8:bd:
                    ef:40:b4:3d:a3:79:48:75:1a:61:0a:49:e3:cd:85:
                    62:d4:84:e6:ae:6e:8e:fa:a2:5a:9b:0c:7f:31:f2:
                    8f:d1:7c:53:8a:35:b4:dc:0b:e1:8f:42:a1:a0:14:
                    cd:4f:dd:09:e7:a1:99:46:81:56:0d:0c:aa:59:21:
                    13:94:54:bd:cd:1b:2e:f9:28:98:21:36:a2:34:7e:
                    f1:a6:5f:d5:36:7b:2a:a5:12:7f:3e:6b:53:5c:91:
                    c7:c5:27:0a:be:c6:02:07:de:c4:c1:f0:c9:19:06:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:80:11:AD:C7:9F:AF:19:64:AD:DD:20:B9:0D:9B:66:FA:E3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:26:1c:da:61:12:1d:e2:21:dd:5d:e4:29:33:f6:a6:4d:ce:
         21:55:09:d6:93:7c:43:24:22:9c:f8:ec:cb:ca:ff:d5:2a:78:
         e0:cf:9e:c0:b7:95:4b:8a:8b:9b:e0:f3:12:e1:02:7c:40:78:
         e5:71:87:29:ab:51:ef:ae:c6:14:dc:c1:a7:72:67:47:5b:46:
         29:1c:1b:ae:f9:19:ff:9b:5c:2c:10:5a:23:6e:72:e2:b7:cb:
         36:e9:a4:d3:4b:0c:79:f8:1c:af:a3:98:39:0b:a9:c1:31:f1:
         ae:df:f5:9d:65:e7:2c:28:24:cb:5d:b4:ef:e0:72:35:02:15:
         da:65:10:84:7e:96:22:ce:3d:86:9a:a7:2b:bd:58:71:1a:e3:
         03:ba:4d:6e:87:ba:7e:d2:2a:da:f8:8d:b1:39:85:c4:15:81:
         e4:f0:26:e2:42:06:c9:09:a5:87:c5:2e:04:f5:c3:14:d4:e9:
         35:0b:4a:02:5b:f9:7c:51:02:e8:9e:a0:7b:84:0f:d4:49:b9:
         01:a5:1c:aa:97:0d:e2:0c:fa:a2:2d:d1:b8:6b:67:6b:dc:22:
         4e:d5:b9:ab:77:94:c7:2d:16:c7:18:b1:c6:38:b0:38:b4:fa:
         1a:1f:19:09:7d:74:bf:84:7c:03:81:f6:c0:84:39:80:3a:17:
         8d:a0:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:32:57 2025 by rpki-client