Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
File:                     d3887374-8545-34aa-837d-dd4cb2f0f338.roa (raw, json)
Hash identifier:          yTFtWSjGNqXNkBnaC2B33vOzheNOMdPAqx/QQBBuUJs=
Subject key identifier:   B9:4D:8B:34:25:75:6D:FA:E7:FA:F3:86:CF:ED:B0:F6:4D:6C:8F:8D
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A8575F028E717C922D5B51200
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        50.116.72.0/22 maxlen: 22
                          50.116.76.0/22 maxlen: 22
                          50.116.104.0/21 maxlen: 22
                          50.116.116.0/22 maxlen: 22
                          108.167.139.0/24 maxlen: 24
                          108.167.174.0/23 maxlen: 23
                          108.167.176.0/22 maxlen: 22
                          108.167.184.0/22 maxlen: 22
                          108.179.206.0/23 maxlen: 23
                          108.179.224.0/22 maxlen: 22
                          108.179.236.0/22 maxlen: 22
                          108.179.248.0/22 maxlen: 22
                          108.179.254.0/24 maxlen: 24
                          192.185.206.0/23 maxlen: 24
                          216.172.164.0/22 maxlen: 22
                          216.172.176.0/22 maxlen: 22
                          216.172.180.0/22 maxlen: 22
                          216.172.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f0:28:e7:17:c9:22:d5:b5:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=0703cbe5-5c1f-4a8c-b492-1d90a4e26abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:20:c4:a6:d8:c8:43:26:e1:fb:a5:0d:64:
                    3a:97:8b:f4:dd:2f:fc:6e:2f:0b:7a:c9:ca:57:97:
                    51:03:a1:7f:3d:fd:85:f7:fb:8e:27:f4:32:bb:e3:
                    82:13:3c:38:a9:6b:f8:3d:65:34:b9:d5:60:eb:8e:
                    d2:ca:33:79:b2:84:2a:77:16:62:d4:d2:6c:78:6f:
                    95:3f:2d:eb:0c:d1:e5:da:5e:88:70:bb:50:ad:a2:
                    f1:2b:3d:ae:d5:8f:cb:e5:7e:5a:b4:97:cc:26:ab:
                    de:27:58:1f:63:58:7e:9e:7a:88:b3:6e:19:6b:7d:
                    49:6a:41:ae:c6:46:55:7b:19:c9:8e:1c:3f:39:11:
                    29:01:50:45:4f:b4:66:0d:d8:c8:ac:70:a8:2b:24:
                    2a:98:e4:d8:20:a2:53:c3:84:18:96:08:70:1c:ae:
                    3a:47:73:e0:57:bd:42:0d:7b:32:2b:e7:c6:63:96:
                    2e:fe:92:2b:ec:fd:9e:73:9e:33:82:5f:c4:bd:b4:
                    07:01:64:20:c2:20:ab:2a:d1:66:25:66:d7:bb:ff:
                    0e:ea:4f:da:d0:f3:34:57:53:f9:b6:99:48:4a:c3:
                    f6:8c:7e:92:cc:36:f5:f6:9b:fa:6a:b9:13:fb:13:
                    f7:b4:9d:0b:7e:68:7d:6d:c2:7e:71:de:77:60:8a:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:8B:34:25:75:6D:FA:E7:FA:F3:86:CF:ED:B0:F6:4D:6C:8F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.72.0/21
                  50.116.104.0/21
                  50.116.116.0/22
                  108.167.139.0/24
                  108.167.174.0-108.167.179.255
                  108.167.184.0/22
                  108.179.206.0/23
                  108.179.224.0/22
                  108.179.236.0/22
                  108.179.248.0/22
                  108.179.254.0/24
                  192.185.206.0/23
                  216.172.164.0/22
                  216.172.176.0/21
                  216.172.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:66:8c:82:f3:bd:34:58:4b:61:b7:c4:c2:59:9b:db:10:
         d9:a8:cf:1d:68:4c:6a:28:f2:2d:ad:1d:ae:74:b5:52:05:65:
         3e:a1:7f:f8:43:b3:8d:3a:06:61:55:12:60:1f:64:95:d4:2d:
         6b:ec:8c:ec:a1:e0:98:22:5c:c3:c8:5c:fc:21:ba:7e:f1:6d:
         15:8b:c9:13:9e:b9:b8:be:78:a2:5d:8c:2c:54:65:12:f3:1d:
         e5:83:a0:61:e5:d6:1a:3a:64:94:d9:ea:0d:fa:72:6e:b4:cd:
         57:46:1d:96:cd:09:64:6c:76:b5:4c:09:02:66:69:e5:0a:64:
         92:57:17:de:ed:f0:77:d0:34:a9:3b:69:88:e5:0c:ac:ef:96:
         70:e0:b0:f1:09:c3:82:19:a8:68:3e:79:9b:ec:5d:7e:c9:61:
         1d:e4:c9:20:ba:b9:0c:6e:96:1a:6c:b4:26:49:cb:34:ad:4f:
         d7:39:17:28:bf:00:21:7c:65:58:82:1d:a1:db:e1:aa:df:16:
         1a:a7:15:92:a4:6e:c5:4d:24:81:08:07:50:16:0e:c6:4e:7c:
         24:88:a6:96:6c:a5:91:dc:9b:18:68:72:44:0a:7d:ec:12:66:
         b1:44:26:91:0f:b7:ae:75:23:77:4b:3f:c6:93:87:66:88:b2:
         40:9f:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:26 2025 by rpki-client