Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9a0042a9-ba70-357c-84b1-90c84e309699.roa
File:                     9a0042a9-ba70-357c-84b1-90c84e309699.roa (raw, json)
Hash identifier:          If9YphrfBUcek5YCPSSR84W9AqsiyMSVKdpfyG7OLno=
Subject key identifier:   76:0A:0E:5F:CE:76:79:93:BB:21:78:EA:DB:4D:11:20:36:FB:4D:42
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285849A1EF73A06ACEC7C84A674360
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9a0042a9-ba70-357c-84b1-90c84e309699.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     137547
IP address blocks:        107.151.199.0/24 maxlen: 24
                          107.151.200.0/24 maxlen: 24
                          107.151.201.0/24 maxlen: 24
                          107.151.202.0/24 maxlen: 24
                          107.151.203.0/24 maxlen: 24
                          107.151.204.0/24 maxlen: 24
                          107.151.205.0/24 maxlen: 24
                          107.151.206.0/24 maxlen: 24
                          107.151.207.0/24 maxlen: 24
                          107.151.242.0/23 maxlen: 24
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:73:a0:6a:ce:c7:c8:4a:67:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=10525fac-2e8d-48d8-b2f8-e7741653a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:3b:32:52:6a:3f:90:2f:b1:03:e2:b9:4b:
                    dd:35:73:01:03:ce:f7:fc:55:1c:1e:2a:ec:3f:f1:
                    72:9d:cb:8c:67:3d:c9:b5:4e:da:5b:ae:0b:4b:87:
                    68:e2:04:b3:ff:f7:e3:a5:28:a2:b7:be:46:dd:de:
                    e7:ff:c8:34:39:2e:77:09:1f:51:42:1c:a9:89:d0:
                    af:0c:ff:83:30:3a:e6:2f:a9:59:25:34:d6:a0:9b:
                    d7:53:bd:1a:8e:0d:07:b0:cf:54:3c:79:f0:d7:dc:
                    f9:ea:9c:e4:00:e3:ff:9e:9e:69:9d:0b:f1:52:8f:
                    a8:78:94:7d:4e:7e:8c:98:04:cd:80:cd:6b:c6:c2:
                    36:07:ff:5a:62:b6:1d:d7:93:7c:ac:9c:46:ed:d6:
                    38:b4:e9:33:7c:79:ad:38:88:a0:6b:81:98:c2:28:
                    f5:2b:10:66:4f:13:de:48:20:b7:c6:21:aa:37:28:
                    43:f6:9e:26:4e:5f:d7:18:48:c9:df:81:67:bc:35:
                    0d:2d:19:94:08:49:13:95:66:6c:55:f1:86:5b:2c:
                    89:6a:33:83:c7:9e:c4:87:be:09:5a:cb:7b:de:1d:
                    a1:e2:11:87:8e:8a:f1:cf:b9:93:ff:4f:2d:0c:f8:
                    5c:2a:5d:e3:fc:6f:16:b8:32:0f:12:29:49:64:e3:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0A:0E:5F:CE:76:79:93:BB:21:78:EA:DB:4D:11:20:36:FB:4D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9a0042a9-ba70-357c-84b1-90c84e309699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.199.0-107.151.207.255
                  107.151.242.0/23
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:92:5b:8c:70:3a:c0:eb:84:9f:87:3c:38:78:94:e5:06:
         a2:a2:72:5f:53:a0:39:f7:c8:92:1e:f0:ad:cc:af:e6:d3:e5:
         3a:c2:17:77:44:9d:98:cd:04:36:04:f9:b1:a9:16:f4:8a:02:
         de:29:55:ee:b5:77:42:5e:ee:7f:e3:d1:1e:c8:ab:e0:d0:b2:
         ac:30:42:de:44:db:d0:19:31:68:94:aa:42:ad:fc:95:c0:af:
         c4:06:56:c0:fb:4f:cc:75:36:63:bd:e5:3c:12:e2:2d:52:fc:
         0a:8e:8d:a7:a2:a0:70:c0:12:96:7f:d3:78:69:c7:48:35:a2:
         d2:8f:7f:cd:bd:e8:46:4e:16:ad:bb:71:54:e2:6c:58:da:aa:
         ba:de:e9:f1:73:c3:1d:b5:a8:4d:73:6d:92:61:c7:f6:58:cd:
         e5:97:14:ed:4b:d3:0a:ef:d7:46:fa:01:6a:fa:99:bb:dc:f9:
         4b:fa:c6:28:4b:85:3e:de:1f:8f:b6:74:bf:96:f8:f3:f7:55:
         f7:7d:37:7f:96:a8:cf:b1:25:17:d3:8a:df:4f:c8:5a:08:5e:
         ba:f1:59:67:50:da:aa:89:ae:89:e8:2c:be:1f:82:43:91:0f:
         4a:91:72:3b:ae:fb:9e:75:3d:dc:a5:63:3b:01:e9:d2:e0:78:
         13:ec:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:50:32 2025 by rpki-client