Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
File:                     a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json)
Hash identifier:          VTdyY24G2sk8akrXEnsZ2TuFg1PFpKF8Y/LtTmdgSVY=
Subject key identifier:   D1:7B:49:0B:DD:F4:2A:03:BB:9D:33:AD:41:92:89:B5:0C:C9:B6:F1
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F432858499AF48C27966C68C953A39880
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     6079
IP address blocks:        209.250.11.0/24 maxlen: 24
                          209.250.21.0/24 maxlen: 24
                          209.250.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8c:27:96:6c:68:c9:53:a3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=05d8f5ba-ced0-4535-bd10-839cc65f3ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:74:05:93:fd:a1:25:52:4c:46:aa:99:21:
                    01:2f:31:af:86:db:73:45:a3:6f:cb:c1:ff:ac:18:
                    b4:03:15:02:d4:14:6b:34:63:b0:01:38:74:12:8c:
                    1a:ff:68:bd:4e:e8:9e:4d:a7:53:ad:65:62:7b:68:
                    70:52:0f:04:29:c6:fd:eb:31:4a:82:85:a8:f1:d2:
                    6b:b1:b9:1c:fc:1d:9e:2a:33:4a:fe:1e:d4:68:27:
                    08:fb:7a:34:1e:bc:35:6f:2c:14:27:a4:4d:15:5c:
                    75:13:29:8b:f2:eb:2f:bb:6a:80:5f:7c:3d:07:55:
                    66:48:63:d5:f1:9f:5b:c4:74:1a:fb:8c:2c:fc:b8:
                    76:4f:1b:60:f5:fe:80:3d:9c:f3:49:9f:70:91:bf:
                    10:65:7b:4e:a6:68:98:a8:fd:3d:54:30:4b:94:f8:
                    88:57:46:06:a2:c0:29:ba:e3:75:57:b7:f2:28:f0:
                    3e:93:71:5d:87:b7:61:e2:3f:47:15:b0:ab:0f:34:
                    d6:d3:05:c7:dc:67:fb:b8:74:18:a6:eb:ce:ac:a6:
                    3f:1c:c3:51:f2:da:08:00:92:35:04:7f:65:b7:36:
                    2a:23:81:7a:48:f4:1b:15:05:55:fe:78:94:01:9a:
                    e2:e6:2e:06:b2:73:7d:5b:b4:6a:23:b0:e8:79:67:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:49:0B:DD:F4:2A:03:BB:9D:33:AD:41:92:89:B5:0C:C9:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24
                  209.250.21.0-209.250.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:21:cc:97:c9:01:90:a7:a3:97:44:6e:eb:d5:88:4b:72:b7:
         5f:9c:a4:72:7f:86:e6:4c:bc:22:88:87:39:c9:ae:1c:16:53:
         57:90:5e:64:3f:d1:ea:ee:84:53:73:49:79:3d:4d:cd:b6:21:
         78:24:ba:25:fa:ac:22:b8:88:72:c4:fc:01:d7:b1:e1:d9:f6:
         2a:08:d3:64:02:b0:e8:5f:97:31:f3:85:7e:ab:59:f9:a8:62:
         6a:b7:09:0e:5b:e4:06:3d:51:12:b0:0b:2e:dd:a7:fc:bd:48:
         83:3c:33:14:6a:6f:7d:73:11:3a:31:6c:9e:63:39:5d:65:6e:
         2e:d5:8f:a8:18:6c:b4:64:28:40:7d:3d:9a:8c:21:07:2a:6f:
         a6:b3:a8:0b:57:33:1d:d1:8e:b1:a1:e2:e8:18:89:06:a4:15:
         02:0b:aa:02:47:55:fe:b7:86:1f:93:f7:e6:c7:e9:b5:e0:a1:
         74:7e:58:b0:4a:e4:df:cd:08:0b:2a:52:56:98:14:0a:50:ec:
         8f:12:c6:ab:6a:c6:9a:b7:96:62:0b:e2:bb:f4:85:98:0a:04:
         ff:9c:d2:d0:f3:32:3c:46:91:5e:79:ed:b2:6e:5d:00:9f:53:
         1e:cd:1d:0e:4b:02:03:dd:76:31:37:7f:37:94:db:30:0a:dc:
         ba:ec:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:03 2025 by rpki-client