Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa
File:                     d04e1e15-8183-3774-baf6-eca731f43d19.roa (raw, json)
Hash identifier:          IK9v1LOpMnTyOjCMo5kPHnF/SZmilQerNZYTzqQ0jN4=
Subject key identifier:   3F:7E:3E:79:46:5B:1E:FF:7E:06:E7:E7:1D:44:13:28:3E:2E:A1:48
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584988CF1ECD90B6AB5FE328E090
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     19871
IP address blocks:        50.116.114.0/23 maxlen: 23
                          108.167.161.0/24 maxlen: 24
                          108.167.172.0/23 maxlen: 23
                          108.167.180.0/22 maxlen: 22
                          108.167.189.0/24 maxlen: 24
                          108.179.232.0/23 maxlen: 23
                          108.179.234.0/23 maxlen: 23
                          216.172.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1e:cd:90:b6:ab:5f:e3:28:e0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=0037838f-a7b5-488d-bdc0-6ec6bfce04f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:34:6b:24:c4:f0:d9:c3:69:7f:fd:8c:c4:
                    3b:e8:84:e8:3f:7c:06:5e:1c:2c:c5:e3:e4:8f:03:
                    12:ce:ca:53:10:3b:89:1a:05:fa:90:20:2d:57:6d:
                    bb:27:da:3b:0e:d9:80:c0:1c:7b:73:d7:25:aa:c1:
                    3e:1e:46:ee:5a:2b:7a:20:ec:38:32:d9:7d:35:ff:
                    1e:34:62:cc:eb:cb:df:65:7a:1e:5d:fc:13:a1:cf:
                    9e:a0:4c:17:2d:d3:20:51:48:95:0c:a3:bc:bd:a3:
                    05:29:e0:1d:0b:81:37:b2:d8:2b:3f:5d:90:76:76:
                    f3:a4:9b:5b:5a:69:91:b9:5f:f4:f9:d7:1e:24:4f:
                    e8:14:21:2a:30:81:cd:24:84:cb:82:54:27:e0:4f:
                    c8:a8:fe:ea:16:78:ba:f3:b9:15:fa:1d:22:3f:e3:
                    38:98:61:3d:fe:19:70:cb:90:b6:c0:02:be:a4:e5:
                    6e:fb:d2:d9:cc:ff:b0:6f:33:56:48:83:cb:2a:9b:
                    05:1c:c9:65:f2:4e:91:ab:51:70:ba:f9:79:52:14:
                    48:90:56:60:85:cb:34:12:7b:0b:dc:5e:62:db:60:
                    a8:bf:8e:d4:cb:e6:aa:94:9b:c9:91:15:ff:a4:41:
                    35:71:f4:36:49:6b:49:05:4c:0a:45:1f:5a:ec:02:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:3E:79:46:5B:1E:FF:7E:06:E7:E7:1D:44:13:28:3E:2E:A1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.114.0/23
                  108.167.161.0/24
                  108.167.172.0/23
                  108.167.180.0/22
                  108.167.189.0/24
                  108.179.232.0/22
                  216.172.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:5b:ce:76:ef:83:bd:72:66:5a:e2:34:55:54:3f:cb:43:
         92:44:9a:5c:e2:b3:3a:60:df:2f:47:1b:45:94:02:75:50:bd:
         c2:95:21:40:b6:30:f2:1d:94:53:21:dc:cd:7a:52:e6:ca:90:
         3e:3a:05:fe:08:1f:39:56:9f:5a:64:cd:9d:55:78:6e:7b:9e:
         5c:dc:bf:f7:17:a6:f5:26:90:6e:70:8d:c7:87:87:aa:35:b8:
         59:a4:d1:f4:43:e0:f4:db:62:83:97:78:1e:cc:90:91:66:05:
         69:92:8d:c0:e3:3b:a3:c5:45:57:ab:c9:b8:f3:ec:42:e3:c0:
         30:3e:5a:ba:a9:3a:de:4a:36:53:bf:ee:7d:1f:55:8b:c2:e6:
         54:18:01:5a:3e:53:a7:05:51:71:8d:5f:03:11:dc:2d:3f:99:
         90:84:67:db:f4:ee:4e:33:3a:e2:69:17:36:9d:c6:80:dd:1c:
         c4:21:eb:0e:65:f2:ab:7c:f4:93:85:69:a9:d2:f0:3c:27:99:
         c6:4b:52:fd:1b:92:66:07:de:eb:70:33:90:2d:03:14:c0:3b:
         20:e7:04:f4:2a:aa:2e:2c:86:33:11:d4:dd:df:19:3d:82:84:
         fc:1f:fc:4a:df:00:5a:a3:6c:fe:78:eb:ee:47:66:f7:aa:90:
         5c:17:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:07:38 2025 by rpki-client