Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
File:                     5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa (raw, json)
Hash identifier:          mwT0DrnYJYxMvawFvdQAu1SGAJxMaFJ/mQg0+dYuNEs=
Subject key identifier:   86:4B:68:CE:C0:E8:3B:32:DA:C3:8F:96:11:9C:B4:21:7E:BB:1F:05
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584988CF1F019FDD08F2E3641780
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     396982
IP address blocks:        50.116.114.0/23 maxlen: 23
                          108.167.161.0/24 maxlen: 24
                          108.167.172.0/23 maxlen: 23
                          108.167.180.0/22 maxlen: 22
                          108.167.189.0/24 maxlen: 24
                          108.179.232.0/23 maxlen: 23
                          108.179.234.0/23 maxlen: 23
                          192.185.224.0/21 maxlen: 21
                          192.185.232.0/21 maxlen: 21
                          192.185.240.0/21 maxlen: 21
                          192.232.216.0/22 maxlen: 22
                          192.232.220.0/22 maxlen: 22
                          192.232.248.0/22 maxlen: 22
                          192.254.180.0/22 maxlen: 22
                          192.254.184.0/21 maxlen: 21
                          192.254.224.0/21 maxlen: 21
                          192.254.232.0/21 maxlen: 21
                          192.254.249.0/24 maxlen: 24
                          192.254.250.0/24 maxlen: 24
                          192.254.251.0/24 maxlen: 24
                          192.254.252.0/22 maxlen: 22
                          216.172.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1f:01:9f:dd:08:f2:e3:64:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=d45ff5cb-9971-4fa1-9cc6-ecd5c1fcaf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:85:12:c5:51:2c:61:ea:fb:ac:70:02:3c:
                    c5:97:c4:00:dc:56:4f:9e:95:04:a4:b1:78:2f:fa:
                    99:98:06:41:48:62:a0:37:74:a4:3b:83:b5:88:e2:
                    15:d2:95:45:c7:55:ff:ce:46:93:c1:58:e1:67:75:
                    10:d8:cf:6f:3d:62:5b:af:e2:75:de:d7:0f:3b:04:
                    a9:0e:16:02:d6:78:04:50:75:8b:0f:a6:5d:1b:21:
                    35:cc:6c:fd:c2:fd:a9:06:19:92:4d:01:7d:70:ab:
                    b7:c7:e1:2b:52:31:04:a7:6d:5f:c3:ce:45:ea:0a:
                    df:8e:ab:63:ed:fa:33:97:2e:11:73:1f:91:d4:1e:
                    58:75:8b:77:8f:39:3d:f5:e7:db:b5:53:08:54:7f:
                    d9:79:b1:ba:ad:ab:a8:e3:c6:37:07:43:1f:9a:6c:
                    6d:e9:96:b4:73:37:92:76:ca:4d:de:30:bb:bd:06:
                    ec:51:11:0d:86:4f:e4:ad:4f:c2:3c:c6:1c:6f:71:
                    35:7e:e2:52:7b:1e:3b:7d:d7:42:74:b9:76:0e:d9:
                    27:0c:06:7a:a7:ec:88:10:ca:7b:33:3d:c8:52:e7:
                    50:46:9f:2f:ae:e9:5f:0b:68:9f:41:42:7c:ad:e2:
                    25:e3:26:a6:7c:9e:0f:15:95:6a:74:d3:c0:37:84:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:68:CE:C0:E8:3B:32:DA:C3:8F:96:11:9C:B4:21:7E:BB:1F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.114.0/23
                  108.167.161.0/24
                  108.167.172.0/23
                  108.167.180.0/22
                  108.167.189.0/24
                  108.179.232.0/22
                  192.185.224.0-192.185.247.255
                  192.232.216.0/21
                  192.232.248.0/22
                  192.254.180.0-192.254.191.255
                  192.254.224.0/20
                  192.254.249.0-192.254.255.255
                  216.172.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:40:3b:06:18:ca:69:89:20:4d:a6:7d:38:5e:7f:eb:1b:3b:
         65:9a:b9:82:ad:30:6d:86:72:98:48:57:8b:6d:70:87:45:cf:
         64:c0:5d:6a:15:ee:c4:ec:08:e3:e6:75:59:3d:82:4f:8c:c6:
         ed:1c:ee:2c:52:b5:ba:09:46:7b:15:1d:a4:38:73:60:1b:00:
         bf:20:93:39:43:86:ea:85:09:5a:96:96:15:08:12:e7:cd:0d:
         7b:8e:07:c9:00:15:14:72:fa:b9:fb:3f:d9:91:3b:6d:27:a9:
         42:b1:11:ba:c1:fa:35:7a:fc:01:44:7f:6f:5c:eb:d1:1c:3f:
         7a:c2:d4:04:34:d7:1e:71:51:68:67:2d:a7:25:56:4f:e1:62:
         b1:fd:10:08:31:30:76:77:98:d3:c3:5e:fd:c4:19:f7:65:33:
         8e:3b:bb:aa:55:81:f0:23:52:14:5c:b2:bb:01:f6:e7:cb:6d:
         9b:eb:1e:23:88:b5:59:d3:2e:ff:b4:24:61:73:1d:d3:48:d1:
         be:cf:35:4e:49:27:6d:6c:e4:7e:70:f6:65:a5:87:63:08:ec:
         91:c8:3d:e6:a6:4b:de:62:f1:e1:c3:c6:28:ac:9d:b4:21:08:
         b2:1c:45:e1:c4:8f:5a:b2:44:1d:d1:ae:ac:6a:1f:e0:9c:3b:
         83:11:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:52:26 2025 by rpki-client