Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/b9c76b95-5952-3eb8-8560-939f3d8ed467.roa
File:                     b9c76b95-5952-3eb8-8560-939f3d8ed467.roa (raw, json)
Hash identifier:          ciHfZXxHSRUotXIArxbsYmxV7/Ka2DgQ7vs8jdtoIC0=
Subject key identifier:   C7:F2:09:A6:6B:59:01:33:24:A8:F5:F5:1F:B4:63:C1:06:84:51:51
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F432858498769A9F78C7B3A9DFBA4F5E8
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/b9c76b95-5952-3eb8-8560-939f3d8ed467.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     7345
IP address blocks:        135.109.196.0/24 maxlen: 24
                          135.109.197.0/24 maxlen: 24
                          135.109.198.0/24 maxlen: 24
                          135.109.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:a9:f7:8c:7b:3a:9d:fb:a4:f5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=d5ab36a0-21de-469d-8405-1115279d096c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:b1:11:19:94:b7:79:58:65:69:25:0e:df:
                    59:a5:5b:7c:96:bb:01:ad:c1:58:b6:83:22:59:b1:
                    2e:28:34:4f:f9:41:2a:0c:5c:22:bc:e4:c1:6a:c8:
                    75:fd:d1:ab:2c:1d:58:eb:e2:5c:99:4a:8c:d1:42:
                    18:64:10:a3:13:20:41:67:dd:26:9c:d2:30:57:81:
                    11:67:82:e1:af:d6:1f:43:38:b7:99:35:e8:cb:59:
                    2b:f2:55:33:c6:10:50:89:8f:29:53:36:37:f8:cd:
                    55:56:37:20:70:c9:e2:6a:d3:67:e0:64:23:a5:b1:
                    3f:26:a9:f0:b3:7f:e7:bb:5b:de:81:68:27:b3:98:
                    82:77:76:be:df:bd:4c:d4:19:e2:cf:42:1b:69:40:
                    8a:62:18:84:a6:96:2a:13:5c:8d:60:61:46:8e:a3:
                    7f:11:df:58:db:6e:a9:b7:79:04:fe:b2:f1:f8:15:
                    a0:6f:b5:f1:4a:e5:6e:7d:15:a1:d5:0e:b4:d6:13:
                    83:bd:08:46:31:4f:d4:c0:20:e8:f4:8a:12:0c:92:
                    89:26:53:8b:8a:f3:9d:87:8a:2f:bd:5c:82:ed:c7:
                    8b:46:b5:04:c3:e4:9f:f3:b2:65:2d:d5:7b:2e:1b:
                    20:33:0a:57:d8:39:87:59:f8:28:45:f9:e3:d4:5d:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F2:09:A6:6B:59:01:33:24:A8:F5:F5:1F:B4:63:C1:06:84:51:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/b9c76b95-5952-3eb8-8560-939f3d8ed467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:d6:9a:6f:b1:99:9e:27:b0:b2:8c:69:51:ec:e1:83:ef:
         26:f2:48:04:5b:90:25:f3:4f:30:62:6e:b3:9d:82:0b:7a:6e:
         2d:27:9e:c3:de:3d:f4:92:d0:39:f3:ed:8e:a9:ad:e7:b4:1c:
         48:2f:ed:ae:f7:0d:11:bc:d7:e2:5e:93:1b:0d:d4:0e:a7:72:
         cd:e8:bd:1d:a8:d4:a2:6d:e8:87:67:8d:7b:50:95:7d:7e:95:
         98:8f:35:38:29:6a:9e:5f:35:9d:77:da:45:c7:0b:40:94:2b:
         ea:bc:f6:8c:ea:49:df:11:f7:aa:b9:61:49:61:8b:ed:ad:7a:
         f8:de:d7:7e:51:e9:89:87:c6:46:ab:2c:7e:d9:ac:d4:7d:1e:
         26:0e:30:ca:43:65:5c:e3:0e:d2:76:38:82:20:b5:01:76:a7:
         8c:8f:cc:3d:4e:1a:b2:5e:ca:24:5d:58:ed:7f:23:57:2f:e1:
         22:b3:e0:f9:1e:d6:9d:e9:ac:b7:3b:e0:50:bb:03:42:1e:32:
         1e:d6:4b:e9:55:59:d2:e1:0c:e8:4b:22:69:38:90:09:dd:79:
         ef:20:5a:c8:ef:54:7e:79:b9:0e:82:6b:f8:0c:1f:fc:19:ea:
         8a:ba:a0:d2:78:97:ad:18:f1:cf:45:45:15:21:e3:5a:ca:ac:
         17:91:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:09:30 2025 by rpki-client