Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa
File:                     71e37659-e7c7-3451-968b-7b80386600a8.roa (raw, json)
Hash identifier:          R/o4sKfC3Tdpk94J9Kk8RivoKTBf63ox8qUDdMc8s2Y=
Subject key identifier:   15:2E:7B:71:36:7D:BA:B3:C8:48:ED:71:13:76:79:6B:FD:5E:7D:21
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285849D594DDEDDAFD2EEC10D6C180
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     54238
IP address blocks:        209.151.220.0/22 maxlen: 22
                          209.151.220.0/24 maxlen: 24
                          209.151.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:dd:ed:da:fd:2e:ec:10:d6:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=e002d137-c94b-416b-9cbe-59bc666ed94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:b1:7d:d8:81:b0:da:a1:30:7a:7d:3b:ab:
                    f6:8e:6d:9e:96:67:87:be:97:89:07:0b:f7:30:12:
                    9f:7c:ea:17:2f:f7:63:30:33:f6:38:81:1b:e8:e5:
                    f3:2f:54:be:87:bc:5c:59:08:7f:8b:20:39:a2:f7:
                    96:52:2d:68:0f:c3:32:4f:78:97:21:a6:4f:f8:56:
                    f3:c8:f2:96:40:47:7a:f4:b3:dc:9c:0e:73:d4:6f:
                    b5:56:24:4a:91:09:c8:c2:12:10:80:db:6a:63:4b:
                    12:a8:59:a6:43:c4:3b:be:ba:15:39:2b:ac:fe:f3:
                    4e:81:74:5a:95:13:db:2d:fb:39:d3:52:e8:7c:9b:
                    be:e3:b5:12:51:e4:3b:e5:87:f5:e0:74:df:c6:30:
                    7f:e2:57:2d:4d:96:f9:1c:56:42:60:1d:61:83:f3:
                    96:d0:74:f2:14:b9:c5:46:73:5a:80:0b:94:66:14:
                    ff:ee:73:69:56:43:96:65:46:f0:c3:21:39:6c:e6:
                    2d:bb:b8:ac:6e:c9:2b:62:8a:07:2d:dd:e2:d9:6c:
                    b7:f6:8b:d7:a9:9d:a2:3b:63:6b:9e:b4:42:f1:d3:
                    b0:76:be:20:da:71:d8:fd:f1:d4:52:d1:17:6c:81:
                    32:b3:ce:fd:4a:11:ce:4e:1e:25:97:db:a6:57:31:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:7B:71:36:7D:BA:B3:C8:48:ED:71:13:76:79:6B:FD:5E:7D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:9f:92:fc:d2:90:78:a7:f2:ca:9e:1d:41:7e:f5:00:c1:
         e6:6b:2f:2d:da:76:c4:07:42:0b:5d:ef:4b:01:20:86:38:8b:
         5f:15:75:0d:66:2e:eb:1b:ce:99:4c:1b:f6:5f:46:db:d0:fa:
         48:81:0e:2f:fb:f9:e9:80:e8:15:07:29:eb:10:f7:71:14:66:
         a4:19:de:40:a1:45:c5:f4:9a:9e:3e:06:a3:93:f5:5a:57:46:
         75:9b:fe:a4:85:f3:88:cb:5f:f2:6c:b5:9a:a9:55:70:cd:4c:
         9e:5c:64:63:ba:fd:f8:ea:73:3e:10:f4:ea:4d:ec:40:d1:dd:
         08:16:55:cf:d1:4e:56:aa:2b:24:12:ec:62:33:9e:f3:e5:6c:
         9c:a9:78:46:4b:6e:aa:43:00:7e:41:e6:48:a1:7b:a2:ee:ea:
         c1:a7:dc:4f:de:f2:44:5e:26:a2:e7:8f:ac:24:19:2e:36:4a:
         90:8f:a0:11:59:43:e8:82:ae:5b:ce:30:e4:fa:52:de:12:f1:
         97:7a:06:47:f3:d2:6d:f2:19:8b:d6:65:bc:37:ca:a7:cb:2f:
         0c:bc:f5:4d:f9:d6:bf:8e:f2:3d:63:6f:94:33:9d:e2:a9:4d:
         b5:02:e1:14:91:e1:ce:0a:c3:30:fb:dd:37:85:e8:fb:1c:c6:
         ea:61:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:21 2025 by rpki-client