Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
File:                     18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa (raw, json)
Hash identifier:          rX4PA/M9A91Y1Ql0xtUL/pGvb/2JsnzlzSStCrvwR6k=
Subject key identifier:   79:7E:FC:B3:C4:7C:C0:27:21:B5:E2:CB:25:20:65:5C:97:87:FC:3F
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858499C59E3369235211339029F80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     134365
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e3:36:92:35:21:13:39:02:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=60684a24-5bd8-45da-b13d-5fc49e4e095a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:20:99:c7:c6:3c:fe:68:b1:5f:42:ac:ca:
                    38:f4:bf:7d:5c:1a:68:a8:12:28:c3:f6:98:ba:fb:
                    3c:f5:2d:c4:33:ec:89:a1:5a:7d:32:7a:5c:21:3f:
                    5e:14:89:0b:37:b7:ae:95:a0:19:21:dd:03:71:94:
                    25:e8:10:1e:65:47:ab:c2:a0:08:ba:a1:4a:4a:b9:
                    84:0b:9d:ba:8f:14:9e:ab:ca:6e:5f:87:fd:44:4c:
                    dc:9d:94:d4:67:f4:f8:ac:b2:0d:38:68:aa:70:9e:
                    e4:b2:7c:c1:fc:bb:a4:40:a6:42:10:9f:c1:bf:b0:
                    28:f8:f0:db:5f:91:9b:27:34:62:8c:55:20:b1:78:
                    cd:64:9b:a7:1c:68:fb:14:61:4c:af:69:59:ab:91:
                    31:17:3b:78:ea:35:9c:06:5d:13:c1:18:26:c8:56:
                    2b:25:8e:f9:7f:b4:1f:de:98:fc:4f:d3:b8:64:8c:
                    81:34:7d:aa:34:c8:45:a5:d9:89:5a:e5:f1:ed:d8:
                    a7:dc:b6:e1:f4:57:dc:18:19:52:a2:c5:ed:b1:3b:
                    e4:67:6d:30:55:b3:d6:78:61:02:7c:5c:1c:4d:68:
                    3a:f4:ee:44:64:ea:49:77:0c:c6:21:81:08:e4:cd:
                    b9:fb:05:aa:05:43:0e:22:f4:51:13:0c:d9:32:c5:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7E:FC:B3:C4:7C:C0:27:21:B5:E2:CB:25:20:65:5C:97:87:FC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/18dc1d41-a4bc-3a4d-80ae-9d598bec6ed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:30:2f:df:13:90:99:6d:08:99:00:98:2d:25:33:bb:df:6b:
         52:87:86:f4:aa:50:74:7d:db:57:b7:26:97:f0:8d:23:86:7e:
         f7:34:84:87:60:24:fe:b4:a3:f5:c1:21:bd:e8:2b:ad:7e:26:
         f2:ff:7c:7a:22:24:43:4d:9c:40:dd:7d:be:66:d9:c0:98:ca:
         78:5c:48:5d:f6:0e:46:ec:d2:8f:22:cd:6c:d1:32:2b:9c:e9:
         11:c0:57:5b:ca:29:af:e3:4e:9f:7e:91:bd:bd:58:a4:32:a9:
         87:9f:4a:a0:6e:77:01:2f:78:54:46:bf:ea:32:97:12:b0:05:
         d4:fb:98:e1:74:65:6e:45:be:6a:f8:78:ba:9c:e1:17:a5:ed:
         0b:b6:c5:ae:c0:e7:d7:cc:4d:eb:8a:c6:a7:2f:ed:fe:2c:22:
         92:17:a7:50:7d:d9:de:07:bf:61:c4:64:ab:03:6e:80:84:ee:
         4c:2b:53:e2:2d:27:06:8e:ce:92:be:7a:b5:1c:1d:87:4f:d3:
         6f:9f:7c:db:5e:94:35:55:2b:f0:e2:3d:05:bc:f4:c5:65:8e:
         98:b3:29:b2:d9:6d:34:01:36:32:70:44:a0:09:a2:2e:50:c1:
         c8:93:e0:c7:34:b7:4c:4c:86:43:53:f2:ca:44:17:4e:99:7b:
         06:b9:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:09 2025 by rpki-client