Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa
File:                     6f421393-c698-3e4b-abfd-c83e9ab760dd.roa (raw, json)
Hash identifier:          q5fJS1c0I+SffT6sRV9STjcIuAPIiteDi14T1RU5PFQ=
Subject key identifier:   67:23:0E:6B:09:D5:82:51:87:97:7A:3B:45:6C:79:22:10:86:B2:8F
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F432858499F9BF19A79C98442AD5DBBE0
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa
Signing time:             Wed 23 Apr 2025 17:01:34 +0000
ROA not before:           Wed 23 Apr 2025 17:01:34 +0000
ROA not after:            Tue 22 Jul 2025 17:01:34 +0000
asID:                     6407
IP address blocks:        216.181.0.0/24 maxlen: 24
                          216.181.3.0/24 maxlen: 24
                          216.181.5.0/24 maxlen: 24
                          216.181.6.0/23 maxlen: 24
                          216.181.8.0/21 maxlen: 24
                          216.181.16.0/23 maxlen: 24
                          216.181.18.0/24 maxlen: 24
                          216.181.21.0/24 maxlen: 24
                          216.181.22.0/23 maxlen: 24
                          216.181.24.0/21 maxlen: 24
                          216.181.32.0/19 maxlen: 24
                          216.181.64.0/19 maxlen: 24
                          216.181.96.0/23 maxlen: 24
                          216.181.109.0/24 maxlen: 24
                          216.181.110.0/23 maxlen: 24
                          216.181.112.0/21 maxlen: 24
                          216.181.121.0/24 maxlen: 24
                          216.181.124.0/24 maxlen: 24
                          216.181.126.0/23 maxlen: 24
                          216.181.128.0/23 maxlen: 24
                          216.181.131.0/24 maxlen: 24
                          216.181.132.0/22 maxlen: 24
                          216.181.136.0/21 maxlen: 24
                          216.181.144.0/21 maxlen: 24
                          216.181.152.0/22 maxlen: 24
                          216.181.156.0/23 maxlen: 24
                          216.181.166.0/23 maxlen: 24
                          216.181.168.0/21 maxlen: 24
                          216.181.176.0/20 maxlen: 24
                          216.181.192.0/19 maxlen: 24
                          216.181.224.0/22 maxlen: 24
                          216.181.228.0/23 maxlen: 24
                          216.181.232.0/21 maxlen: 24
                          216.181.240.0/21 maxlen: 24
                          216.181.250.0/23 maxlen: 24
                          216.181.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:9b:f1:9a:79:c9:84:42:ad:5d:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Apr 23 17:01:34 2025 GMT
            Not After : Jul 22 17:01:34 2025 GMT
        Subject: CN=010689ae-1f97-44b8-a33a-622735fa9ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:58:4f:52:12:3f:93:a7:5d:de:af:fd:0c:
                    1a:c8:9e:ab:5b:14:9c:af:c4:93:2b:fb:ca:74:2a:
                    7d:ca:fc:4f:0f:92:93:71:b5:4a:ae:17:c1:4c:be:
                    11:6c:23:0b:27:c4:01:68:81:31:1f:4d:33:22:e3:
                    3d:fb:82:3e:6c:1c:9a:f0:55:ac:5f:91:56:a0:b4:
                    97:01:1b:c4:64:d7:39:c2:a3:63:94:4d:8d:8c:d0:
                    c8:29:83:eb:da:d4:4a:59:f3:bf:14:28:e2:75:bc:
                    82:8d:89:5d:6a:3d:61:db:90:cd:1c:65:a2:f4:6c:
                    35:3f:8e:60:49:56:72:3f:1d:ea:06:6a:93:96:74:
                    21:06:aa:e7:61:33:61:f9:95:15:b0:80:04:18:d1:
                    84:eb:7d:5e:aa:e3:17:7c:7f:ac:b4:77:fe:d3:dc:
                    66:a2:b5:16:a7:29:b2:86:5f:d5:28:e3:2e:fb:66:
                    02:cc:3c:10:89:a7:51:a0:b5:5d:23:20:e0:34:be:
                    06:ed:b1:bc:6b:49:d1:be:88:81:e9:6d:4b:83:17:
                    f1:02:54:7c:b5:d0:6c:b5:eb:a5:11:b5:e5:20:f8:
                    e8:8a:ab:ad:a8:4d:89:4e:2d:2e:47:58:ff:b9:5a:
                    32:04:4d:86:9a:2c:f1:aa:8f:e2:16:ec:48:fb:e0:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:0E:6B:09:D5:82:51:87:97:7A:3B:45:6C:79:22:10:86:B2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/6f421393-c698-3e4b-abfd-c83e9ab760dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.0.0/24
                  216.181.3.0/24
                  216.181.5.0-216.181.18.255
                  216.181.21.0-216.181.97.255
                  216.181.109.0-216.181.119.255
                  216.181.121.0/24
                  216.181.124.0/24
                  216.181.126.0-216.181.129.255
                  216.181.131.0-216.181.157.255
                  216.181.166.0-216.181.229.255
                  216.181.232.0-216.181.247.255
                  216.181.250.0-216.181.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:d9:5a:d6:5f:48:14:b0:83:30:f7:fd:ee:57:d6:e0:5c:
         bb:ac:93:9d:f5:c5:10:01:fa:01:38:3d:b3:61:ee:43:17:8c:
         2a:9c:ea:c4:05:68:20:86:fc:60:7b:af:ce:b5:8c:0f:95:10:
         52:ec:9c:81:07:54:92:85:8b:1d:8e:4e:27:a4:ff:45:ea:c1:
         5e:60:3f:a4:9c:56:37:e3:ef:bb:c6:9f:75:00:29:b2:8b:bb:
         e9:2c:18:3e:f5:4e:21:b7:e9:0a:88:00:33:41:0d:d4:ff:89:
         2a:34:3d:91:98:01:72:64:91:22:12:fd:2b:3d:7b:69:a2:41:
         6d:6b:a7:80:45:7a:b0:ac:06:db:6d:17:71:be:a9:e2:e5:29:
         a5:21:60:4d:d8:76:62:9c:29:d0:a4:cb:43:fa:cd:6a:70:d0:
         08:79:25:36:2f:6c:57:42:51:88:93:65:c8:56:74:03:3c:92:
         08:ab:9c:e6:7b:26:29:15:b2:ba:48:1e:59:82:81:af:7b:55:
         fe:03:c2:52:65:c8:49:02:d1:48:af:d7:e7:14:17:69:e4:61:
         ec:36:1e:28:77:67:67:f0:40:56:d9:27:e8:25:ac:fa:e9:7a:
         fa:91:d3:89:47:19:ce:67:4b:da:bb:0c:ea:51:9b:11:19:f2:
         4c:4a:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:02:29 2025 by rpki-client