Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa
File:                     e03dafb8-98f5-3740-8e33-54b03651c07a.roa (raw, json)
Hash identifier:          22G39N3x8Hv4UxuaqrOa7asE8KzuhdCCejAU3Sc0pTM=
Subject key identifier:   B7:A0:06:C1:EC:51:6E:69:D6:BF:A7:6A:6A:09:05:34:AF:D7:B5:4A
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F43285849955F20DE61336D3458249A80
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        173.195.225.0/24 maxlen: 24
                          173.195.226.0/24 maxlen: 24
                          173.195.227.0/24 maxlen: 24
                          173.195.228.0/24 maxlen: 24
                          173.195.229.0/24 maxlen: 24
                          173.195.230.0/24 maxlen: 24
                          173.195.231.0/24 maxlen: 24
                          173.195.232.0/24 maxlen: 24
                          173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:20:de:61:33:6d:34:58:24:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=130d39a0-eb07-47d0-8407-8ef53970cb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:c9:ef:48:81:05:5b:65:9e:53:5f:0b:0f:
                    88:59:c0:25:02:00:ac:f9:9d:2e:f0:20:41:7c:ab:
                    0e:b9:05:7a:53:d0:90:df:a6:69:96:dc:d2:3a:b4:
                    e1:fc:37:7d:7f:da:ce:71:a1:69:b3:49:5a:e0:48:
                    a8:f0:6e:c5:08:ed:b2:cc:b1:9e:f3:64:04:d1:48:
                    7e:2b:5c:db:05:87:09:22:76:fe:ac:68:10:a3:b9:
                    d1:9d:05:41:fa:7f:18:15:4d:8f:80:80:fe:c6:41:
                    b8:30:ec:a2:8b:d2:fd:7e:e6:e7:89:2e:8e:8f:6e:
                    7c:02:92:d7:38:f9:7c:23:a6:cd:73:47:51:47:d2:
                    d5:30:7c:8b:42:c4:57:a0:14:50:6f:24:61:62:79:
                    34:ba:84:5e:07:03:c8:10:58:3f:87:0b:11:f6:00:
                    f5:f2:88:c7:0e:88:ff:9e:91:b8:26:ea:d2:11:ae:
                    e5:09:05:9d:8b:12:f0:f8:11:3a:15:19:3d:ea:a6:
                    08:a7:34:f8:5f:c7:ce:72:05:e3:44:b3:57:e7:b3:
                    70:a0:dd:ce:1e:77:5e:a9:e2:97:de:6d:d2:ee:a3:
                    85:29:52:bf:cd:12:98:f5:b3:1e:96:f2:ed:c2:a6:
                    ac:b7:93:d4:8a:e6:c6:df:42:f7:6a:d3:18:15:cb:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A0:06:C1:EC:51:6E:69:D6:BF:A7:6A:6A:09:05:34:AF:D7:B5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:0a:76:02:ff:77:68:b0:51:5e:62:87:24:99:54:8b:be:
         92:27:26:b6:04:01:d7:6d:6f:d7:62:d0:b6:70:48:08:0d:47:
         3c:b5:46:5a:d9:e4:77:8c:d4:68:ea:e4:49:1e:31:26:b1:50:
         94:b0:ae:3a:13:3e:65:29:3d:68:a1:91:36:0e:27:c7:9e:39:
         cc:ef:b3:c2:8a:f8:2f:18:d3:d3:72:62:9f:2f:1b:be:15:d4:
         33:e0:35:2c:8f:63:76:17:7f:92:83:aa:eb:b5:10:fd:24:26:
         2f:c9:bf:c2:f6:2d:e7:8d:83:36:6b:2c:bd:b2:de:64:0f:c8:
         43:1b:30:a6:e7:5a:3d:19:d5:bb:dd:45:66:09:65:fe:3d:af:
         ba:6a:76:95:f6:6e:4f:3d:c0:71:d9:2e:d5:12:e7:04:91:ad:
         92:36:eb:cf:ff:38:35:01:5b:4c:44:60:b0:d3:18:bd:11:62:
         af:f4:82:84:3d:99:1a:2e:da:a0:0a:a3:70:cb:e0:73:93:d4:
         9e:11:6d:98:e7:6d:a5:5a:f5:51:83:3d:90:a8:83:75:66:a7:
         f6:ed:52:bd:f0:f3:45:83:39:be:2a:69:ea:fa:60:16:f2:fa:
         f9:35:71:fc:15:58:0b:50:50:ff:c2:1c:6d:b3:99:a7:92:5b:
         09:83:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:43 2025 by rpki-client