Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/33902424-72a6-39e9-96ef-cf40bbae7ae7.roa
File:                     33902424-72a6-39e9-96ef-cf40bbae7ae7.roa (raw, json)
Hash identifier:          CTkHFiq6SZkkLE0j1o+kgsEJrnasQt0OjKeOqxlcA3o=
Subject key identifier:   6F:EC:C1:78:92:E8:AA:BE:CE:1A:EA:FB:5F:17:62:95:28:B4:43:F5
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DEE4A98E6AB7E9A6A7CEF700
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/33902424-72a6-39e9-96ef-cf40bbae7ae7.roa
Signing time:             Fri 16 May 2025 09:04:00 +0000
ROA not before:           Fri 16 May 2025 09:04:00 +0000
ROA not after:            Thu 14 Aug 2025 09:04:00 +0000
asID:                     22370
IP address blocks:        169.145.145.0/24 maxlen: 24
                          169.145.147.0/24 maxlen: 24
                          169.145.148.0/24 maxlen: 24
                          169.145.149.0/24 maxlen: 24
                          169.145.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:e4:a9:8e:6a:b7:e9:a6:a7:ce:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 09:04:00 2025 GMT
            Not After : Aug 14 09:04:00 2025 GMT
        Subject: CN=903fe58e-8e8b-46bf-aac6-3dc217c41c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:99:41:ce:7f:85:ed:c3:d2:cb:ac:6b:4d:
                    22:79:87:63:b5:bb:1c:60:14:db:f3:c5:e0:29:9e:
                    d6:80:58:35:6f:94:16:3d:4d:28:5c:55:6c:83:93:
                    b3:6b:b0:79:b0:d1:a7:24:f2:3e:fa:3b:ee:97:e6:
                    a7:9f:f3:2f:0a:d1:be:50:7c:08:6b:c5:3b:1f:bb:
                    ea:00:b5:4a:a7:35:ba:1f:bd:f6:46:11:e9:90:77:
                    54:3e:ea:0d:f1:b1:5e:0c:08:89:c8:78:80:6b:71:
                    c1:56:14:c0:cb:ab:87:c7:33:b6:eb:5a:23:28:0c:
                    34:cb:b2:00:61:51:61:18:cd:d1:1a:d0:3d:e9:9f:
                    1e:48:5c:0e:47:dd:fd:76:38:bf:bf:8a:44:3d:56:
                    df:b9:d2:74:e3:56:a4:2c:fd:38:a9:0f:1c:5c:dd:
                    18:1b:ad:d7:43:f1:6a:24:bf:c7:e4:f2:d6:11:ca:
                    0e:af:9a:03:9b:73:ff:78:37:61:b2:d8:ef:13:fa:
                    81:28:52:c2:42:8c:e8:6b:80:b3:77:43:c2:ab:ac:
                    90:dc:b8:8c:66:7c:25:5d:7a:84:c2:8f:46:6b:e8:
                    ab:5f:61:a7:2e:e7:0b:67:c8:37:fc:23:f4:e3:de:
                    30:7d:36:dd:2c:78:38:61:c7:94:03:b2:9f:b5:e2:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EC:C1:78:92:E8:AA:BE:CE:1A:EA:FB:5F:17:62:95:28:B4:43:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/33902424-72a6-39e9-96ef-cf40bbae7ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.145.0/24
                  169.145.147.0-169.145.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:ce:30:70:ff:e7:c6:69:9a:78:8d:ae:db:11:68:41:93:
         d6:48:e4:39:da:5d:50:3f:4e:3a:3d:0e:e6:62:d0:dd:e3:81:
         f7:b5:61:82:29:d7:91:59:3e:ac:b2:37:11:a8:2f:b2:26:ba:
         d1:8c:9a:29:b7:43:b9:fe:1f:35:23:e9:ff:51:55:8e:12:d9:
         dd:06:01:13:41:e4:f7:78:e1:07:3c:23:4e:51:17:a9:e7:17:
         ff:7e:ec:b1:18:eb:79:dd:c2:65:ba:7b:f5:97:2b:44:d1:7c:
         d5:57:85:f4:c8:98:74:38:c3:1f:c8:30:fd:df:9e:fd:e5:0f:
         08:7a:18:4b:bc:25:ec:7b:62:2b:97:32:ba:b8:26:8f:76:b5:
         9d:a0:10:83:72:3e:fb:c7:70:16:c2:70:23:80:43:c7:41:71:
         d6:6c:40:77:3f:ab:4b:e3:c5:26:1d:62:85:fc:e2:e7:07:33:
         8f:71:19:18:cb:88:fd:55:38:1c:b7:8d:45:db:92:3d:ae:d3:
         9d:60:ca:eb:93:9e:ad:03:2d:ae:14:eb:cd:00:85:b7:9b:d2:
         f4:11:f4:d8:5d:16:7a:70:ed:09:8b:1e:e4:f1:87:ef:47:f3:
         2a:2d:7a:99:1a:a0:d4:12:e0:e3:82:c2:2f:1a:79:15:77:a4:
         c1:f5:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:38 2025 by rpki-client