Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa
File:                     bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa (raw, json)
Hash identifier:          yvOYhSHZfMTLi/iKspQXdYwksXKhzan7RQvief7oM7A=
Subject key identifier:   42:BC:F6:01:2C:41:26:7D:88:AF:EA:C7:79:55:58:80:29:84:D0:8B
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F432858498769ACEBC9E74D2DA2803E00
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     6233
IP address blocks:        65.49.224.0/22 maxlen: 24
                          65.49.228.0/22 maxlen: 24
                          65.49.232.0/22 maxlen: 24
                          69.171.64.0/20 maxlen: 24
                          104.129.180.0/22 maxlen: 24
                          172.93.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ac:eb:c9:e7:4d:2d:a2:80:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=e833d3c7-5bc6-49c0-82d0-c63af50f833a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e5:fc:16:83:96:7f:5c:cd:65:e0:4d:04:a7:
                    56:df:47:7b:dd:34:b2:87:9d:59:1b:6f:83:f2:b5:
                    fc:02:e7:48:d5:cb:51:2c:60:ec:5c:79:57:8c:03:
                    74:05:36:2f:5b:6d:57:0d:95:7b:72:1e:f2:58:98:
                    05:82:e9:2b:3f:cf:07:95:7f:e7:a6:4e:48:74:41:
                    b2:46:fd:2d:93:c5:d8:ce:03:8b:41:f3:d9:6b:7c:
                    6e:0a:ea:5a:1e:89:48:a8:e6:e6:b1:9b:24:3d:3b:
                    be:03:ec:4d:be:01:0b:e3:0b:5f:9c:1e:eb:74:50:
                    e4:41:0d:82:48:68:1b:2d:49:ca:bb:ae:c6:04:ee:
                    94:60:f2:c7:1c:03:ad:31:65:19:ea:4e:5e:76:f7:
                    07:8a:dc:0f:71:4b:c3:d4:5a:29:04:5f:e8:51:4c:
                    2a:e7:b2:35:bb:15:0d:9f:03:a8:09:02:d6:75:ab:
                    68:f2:f3:a5:d5:4e:f3:f9:c0:b8:b7:7d:95:27:11:
                    75:0b:c7:11:7b:8a:cd:35:db:a2:65:b2:31:e8:75:
                    45:bf:48:8c:45:81:85:e2:1e:db:3a:6a:30:fa:77:
                    fc:d4:71:33:82:88:30:1b:1a:40:05:ce:a6:a7:98:
                    03:92:e7:44:bb:0f:ab:ee:c1:a4:cc:9f:fe:d6:80:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:F6:01:2C:41:26:7D:88:AF:EA:C7:79:55:58:80:29:84:D0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/bd07a546-d7c8-3272-9b6c-9f65fcf7cbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.224.0-65.49.235.255
                  69.171.64.0/20
                  104.129.180.0/22
                  172.93.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:3b:ba:eb:73:c9:19:ca:c3:74:69:10:33:ab:8c:e0:26:
         4f:3d:a0:5f:3e:e8:17:88:55:49:97:80:57:05:25:2f:37:14:
         04:e7:3f:0d:0f:f5:1e:71:37:14:fc:89:a8:62:46:b1:3f:66:
         dd:b5:39:62:87:df:89:66:53:2b:36:5b:53:10:cc:2f:d1:4b:
         0a:52:8c:76:81:41:77:57:f4:fc:89:aa:9c:61:69:f7:ef:80:
         68:2e:bc:ba:93:d5:48:82:05:42:be:30:7f:d3:e9:50:37:f6:
         20:e4:9e:4b:83:e7:8c:9c:0f:de:d4:c6:5d:86:14:61:30:57:
         d8:4a:d4:11:66:e0:87:ea:9b:e5:7a:98:cc:4b:41:52:1c:55:
         f7:2f:d8:b6:db:73:94:84:d0:0f:7a:0b:a1:44:f1:ee:a0:a6:
         45:8f:23:13:71:1d:fc:81:68:cb:4d:00:a8:cb:6f:08:e0:47:
         00:d3:fa:68:53:d9:b0:e7:ea:1c:df:0f:c3:e3:b6:9a:12:18:
         a5:22:4f:ac:ec:28:57:71:68:0a:1e:4b:66:e2:6d:51:c1:36:
         1a:d5:e4:5d:6a:0c:26:90:36:c0:c3:47:a7:12:e6:11:b9:eb:
         ef:04:88:ee:3e:2d:a5:57:69:f1:5e:8c:90:10:3a:fc:18:ec:
         7a:43:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:43 2025 by rpki-client