Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
File:                     73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa (raw, json)
Hash identifier:          LoWkudC+zOw+kYGn1PBUmI2U5JXLXFTex6gK4jKbb2Q=
Subject key identifier:   A5:8D:8B:4E:A4:35:4B:53:CE:E7:1E:63:FA:56:C3:F4:AA:AE:E6:64
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285848F22C6236ED59971F58363840
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        205.201.40.0/24 maxlen: 24
                          205.201.41.0/24 maxlen: 24
                          205.201.42.0/24 maxlen: 24
                          205.201.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:62:36:ed:59:97:1f:58:36:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=6b5b29c8-b0a6-4b65-8fe5-5812a0c649af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8f:d1:e3:f1:07:d8:e9:01:da:0c:48:00:12:
                    ba:87:18:ce:d0:11:6a:6d:f4:09:53:46:89:17:01:
                    23:18:27:04:d8:79:a4:89:43:25:c7:fc:94:09:5e:
                    7a:ea:87:ff:a4:83:dd:44:a0:6a:28:de:6f:4c:2b:
                    58:2d:c6:05:d1:80:fa:7a:ca:a0:bd:4e:5d:49:66:
                    ab:e3:ad:bc:37:a4:05:3b:e2:9a:f3:88:72:c3:a1:
                    34:59:99:09:e9:19:55:c6:de:a0:cb:69:2c:87:8d:
                    bc:85:c6:37:44:f8:bb:67:05:e4:8c:cf:45:37:f7:
                    a6:8c:49:9e:3c:e1:45:29:af:f3:a8:34:f0:7e:6f:
                    4c:73:1e:8a:96:ba:fd:a5:9d:13:ea:5a:3f:06:67:
                    8b:15:bb:b6:9b:22:c0:b2:1c:a8:7e:82:0d:1a:9a:
                    e2:2b:de:42:c9:7a:83:5d:42:33:02:f1:84:98:6d:
                    10:53:8b:25:3a:f1:8f:4d:8e:03:ff:e2:b7:34:8f:
                    44:bf:67:00:8f:49:71:87:c4:e8:c6:85:e0:05:27:
                    ca:47:e2:a4:a7:6c:52:0d:d1:ef:bb:c6:da:59:3e:
                    d5:dc:b7:f6:8a:5b:6e:17:55:75:f2:75:16:4a:5a:
                    e1:f2:0f:8d:18:13:f5:b7:ee:3b:45:ef:2f:45:0e:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:8B:4E:A4:35:4B:53:CE:E7:1E:63:FA:56:C3:F4:AA:AE:E6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:d7:0a:d6:e6:54:02:5e:71:37:12:ef:fa:5e:e3:3c:c9:
         04:2c:a0:32:07:06:be:47:a5:bf:22:58:8f:ef:d1:96:1c:d0:
         18:e5:c6:02:c3:d1:fc:70:15:8d:7b:8b:f5:1c:25:87:3e:64:
         9c:e8:e1:21:28:ed:41:b2:bb:b9:af:bb:f6:88:bf:ad:dd:4f:
         df:88:ce:68:13:ec:82:51:9e:cf:88:03:a7:7e:13:02:28:7a:
         51:d6:9d:59:ac:07:48:f0:e0:f9:83:23:4f:36:c3:02:40:76:
         b2:df:07:4b:e4:01:00:9f:b2:88:e1:ff:1e:d7:3b:6a:70:a0:
         e5:eb:9e:65:83:30:6c:b5:b9:8c:8f:60:a1:f1:73:52:5f:d6:
         44:5e:ec:f8:88:c6:6e:0f:ad:7f:fe:33:7a:1c:d6:19:75:ac:
         6a:aa:10:02:2b:c5:49:93:9b:e9:bf:dd:84:cf:25:1e:c9:d2:
         55:a0:48:0f:d0:6e:77:66:a7:11:b8:49:ba:82:60:86:2e:42:
         0e:f1:e6:4a:5a:f4:5d:8c:eb:3d:96:5c:4b:43:e6:90:67:7c:
         68:d7:5d:65:9a:46:2b:ba:56:25:c3:93:02:a1:ea:d3:45:d3:
         7a:80:ed:2b:4a:bf:c6:f0:66:d6:91:64:de:fb:d6:13:cc:89:
         40:c7:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:16:05 2025 by rpki-client