Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
File:                     e1165abb-cade-3c1b-99f7-08510de1fef6.roa (raw, json)
Hash identifier:          pGqKpWmiWf0j2VCHBjoIyWafVimKyi7JiW5Eh9pMTos=
Subject key identifier:   BF:BC:72:05:79:BC:01:BC:84:46:86:E5:13:BE:90:41:D4:C1:23:85
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F43285849EA851BD3461A69D4C93167E0
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     11904
IP address blocks:        24.204.160.0/19 maxlen: 19
                          24.204.160.0/20 maxlen: 20
                          24.204.160.0/21 maxlen: 21
                          24.204.160.0/22 maxlen: 22
                          24.204.164.0/22 maxlen: 22
                          24.204.168.0/21 maxlen: 21
                          24.204.168.0/22 maxlen: 22
                          24.204.172.0/22 maxlen: 22
                          24.204.176.0/20 maxlen: 20
                          24.204.176.0/21 maxlen: 21
                          24.204.176.0/22 maxlen: 22
                          24.204.180.0/22 maxlen: 22
                          24.204.184.0/21 maxlen: 21
                          24.204.184.0/22 maxlen: 22
                          24.204.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1b:d3:46:1a:69:d4:c9:31:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=cc87d8b4-3237-4daf-8679-3b80794b9bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:a8:3c:c5:db:49:c1:08:e5:e3:f5:c3:7b:
                    9d:35:9f:2a:29:dd:19:f8:77:6a:50:79:fb:0b:72:
                    59:a7:6d:66:b3:ca:f5:41:d4:fd:b8:8a:0b:2f:ea:
                    31:9c:88:59:35:8f:51:8f:55:96:bc:04:27:67:a4:
                    43:fa:e3:40:b4:84:74:6a:aa:d7:74:e0:45:88:b4:
                    4e:7b:3a:d7:23:52:b4:47:74:e6:30:30:1a:e1:b8:
                    6c:f2:cd:dc:79:a0:14:14:ba:78:2e:cb:8c:4b:1e:
                    59:b7:fc:3b:68:7b:21:40:cb:71:43:95:b6:83:29:
                    3d:46:2c:60:d3:70:28:25:53:3f:34:fa:be:38:ce:
                    00:51:cd:a2:06:05:34:02:dc:2b:5d:f2:37:04:d5:
                    1e:c1:90:ea:d7:f6:99:e4:88:e9:dc:b1:67:b8:62:
                    90:5d:5d:43:9b:13:b7:4c:4b:e9:c8:e5:ef:37:25:
                    39:fe:57:bb:a5:33:a0:29:4d:5c:2f:bf:a3:b4:80:
                    b8:df:5a:c9:e6:d8:85:c7:1b:ef:b3:fe:59:6c:ec:
                    cf:0d:6f:a3:a0:96:88:70:93:62:e4:0a:f9:96:8e:
                    26:93:80:9b:d2:99:9c:ac:a7:ea:a6:2c:22:20:91:
                    d2:e7:51:47:82:90:f6:90:14:dc:80:c7:be:29:35:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BC:72:05:79:BC:01:BC:84:46:86:E5:13:BE:90:41:D4:C1:23:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.204.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:0c:85:a1:6a:6c:91:4d:02:9b:65:85:65:46:59:08:71:
         37:15:a2:c0:1c:6c:cb:be:2e:46:b0:95:67:7f:da:1e:02:72:
         bb:e8:df:3e:23:28:8d:20:4f:8c:dc:2f:ee:44:82:8f:92:d6:
         49:99:bf:db:e5:72:09:46:36:32:e8:f0:c0:38:3f:f1:42:8a:
         9b:57:64:1f:f9:29:06:c4:fb:1b:a2:f9:e5:83:6f:db:1e:3e:
         5a:64:0d:a3:96:1b:47:28:ed:28:29:2f:73:dd:64:31:66:8d:
         12:e1:0e:33:c4:06:23:c5:53:66:79:9c:5f:7c:23:92:60:cc:
         7b:eb:dc:a6:14:6d:f1:44:25:b6:0a:45:32:d2:87:39:19:8a:
         a0:f3:25:b6:2f:5c:6a:ca:f3:ef:ec:a4:54:e1:32:62:ff:a1:
         7f:47:61:14:09:22:d4:9f:12:b6:fe:55:59:57:fc:c2:82:6a:
         d4:17:83:8a:e6:87:6c:0c:fb:94:36:98:2f:e6:98:29:ed:4e:
         9a:c5:65:69:22:32:7f:1f:21:7a:44:c7:d2:87:5b:5e:41:5e:
         c2:ed:1c:46:a6:6f:18:1b:5c:c5:80:a9:39:b7:0e:1a:2f:ca:
         23:a2:e0:32:0a:3f:86:0a:18:d2:b0:1c:58:4f:d4:7b:3a:c0:
         d7:6a:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:59:11 2025 by rpki-client