Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa
File:                     6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa (raw, json)
Hash identifier:          FJNYA8fHXuBr+eGT8IZ+AjKi0+BSIcMxGRLO8DrijLg=
Subject key identifier:   63:F8:1F:37:94:2A:F4:CB:2B:42:2B:59:1C:B5:01:5D:E6:08:A2:6A
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584AB68AD05F3D3C6844B455D080
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     3842
IP address blocks:        23.226.224.0/21 maxlen: 21
                          107.161.16.0/22 maxlen: 24
                          107.161.24.0/22 maxlen: 22
                          107.191.104.0/22 maxlen: 22
                          107.191.116.0/22 maxlen: 22
                          167.88.112.0/22 maxlen: 22
                          167.88.124.0/23 maxlen: 23
                          168.235.112.0/24 maxlen: 24
                          192.184.88.0/21 maxlen: 21
                          192.249.60.0/22 maxlen: 22
                          2604:180:1::/48 maxlen: 48
                          2604:180:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:8a:d0:5f:3d:3c:68:44:b4:55:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=7fb5ef33-7a13-4046-b109-01d70bdadfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:c3:78:42:60:1e:b8:79:d0:61:b0:91:40:
                    22:e9:33:6e:7e:94:a8:74:a7:50:8b:65:f6:86:df:
                    06:bf:4f:f2:25:be:ca:4d:72:5b:48:d3:df:92:84:
                    ee:d7:4d:cc:8d:6d:47:8b:f7:1b:e9:4f:0e:7b:06:
                    93:1d:ae:bb:87:e4:62:91:c0:68:7e:60:c3:0d:ef:
                    d5:a4:10:b1:f3:90:52:e3:58:65:c8:25:1e:8c:78:
                    12:6a:58:63:e2:b1:e8:d3:b0:18:26:a8:c9:45:49:
                    34:28:79:33:ae:eb:f7:57:7a:08:d4:58:f5:15:a1:
                    35:64:eb:8a:43:d0:a1:31:71:ef:fc:4b:d8:8d:6b:
                    94:9b:8d:b9:dd:29:84:ef:f2:51:b2:f7:b8:73:b9:
                    a1:f1:34:63:6a:7e:81:50:9e:be:96:bc:9c:0f:1e:
                    2f:47:d4:0e:a6:fb:25:1d:a0:8d:18:00:ba:b0:3d:
                    1d:df:7d:6f:ca:b6:f1:9d:8e:1f:6e:fb:a4:a8:95:
                    79:ab:7b:e2:19:7c:1b:45:9f:b9:03:5a:8e:72:0a:
                    0b:a5:b6:cc:ed:73:5e:c2:c0:cd:79:d3:04:2f:d5:
                    ee:ca:61:b4:10:5e:39:8c:40:4c:77:7f:27:be:dc:
                    73:c8:71:a9:be:b9:fc:37:e8:9f:b3:30:5c:c5:1f:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:1F:37:94:2A:F4:CB:2B:42:2B:59:1C:B5:01:5D:E6:08:A2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/6ecd9eb6-2ccf-3b58-8f19-942ba50c91ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.224.0/21
                  107.161.16.0/22
                  107.161.24.0/22
                  107.191.104.0/22
                  107.191.116.0/22
                  167.88.112.0/22
                  167.88.124.0/23
                  168.235.112.0/24
                  192.184.88.0/21
                  192.249.60.0/22
                IPv6:
                  2604:180:1::/48
                  2604:180:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5e:a2:dd:13:f1:fc:47:a7:44:9a:be:21:de:ac:fe:8e:82:
         ca:40:e6:86:c7:0e:ff:8c:9c:97:ab:68:b2:a9:ff:e9:01:62:
         78:32:84:73:1a:08:11:d8:bd:26:7f:c5:d8:40:e9:12:9a:58:
         dc:a8:21:dd:5e:34:2d:33:91:3d:5d:8c:ba:1c:88:4f:48:9f:
         ab:ee:03:84:4b:a8:ce:68:cf:49:83:d9:a3:5b:5b:43:8e:c7:
         b6:2b:88:88:6f:9d:03:bc:d7:32:67:d3:58:82:be:80:29:f9:
         74:46:37:9f:fb:d8:a9:96:ec:eb:1d:0d:ff:e6:a1:7b:a5:d0:
         82:67:f1:34:97:fb:2f:db:b7:18:17:70:a0:55:08:c4:9f:cd:
         f4:b3:84:db:88:a2:c2:6f:9e:af:a8:f8:2c:c1:a1:bb:72:73:
         29:5e:bd:a3:a0:ab:f9:ab:87:5f:e0:16:93:02:1c:17:ab:8d:
         c8:65:19:10:e4:20:a3:77:b4:b3:ca:22:96:0a:6d:2a:ac:f7:
         da:a1:09:1d:8f:68:c1:51:b1:cb:78:57:7b:5c:5c:92:29:99:
         25:4b:3a:4b:30:e2:c1:c4:de:bf:f9:21:5a:57:ec:b1:26:21:
         dc:e5:05:a8:8a:64:ba:86:f8:9e:58:a8:cd:2b:93:f5:b1:59:
         e3:c1:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:31 2025 by rpki-client