Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
File:                     7206b8e5-96b0-3b78-a114-38b6e087b13c.roa (raw, json)
Hash identifier:          9WDTjn6+Lvk3Po0wypeCHNHAWmJyY3Bl+6iNghlxJ80=
Subject key identifier:   BF:F3:E3:68:A3:BB:F1:30:2F:A2:14:6C:37:DC:18:07:75:DD:4C:4C
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584AB687F61A3EEB6C32FB276340
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
Signing time:             Thu 29 May 2025 16:23:17 +0000
ROA not before:           Thu 29 May 2025 16:23:17 +0000
ROA not after:            Wed 27 Aug 2025 16:23:17 +0000
asID:                     3842
IP address blocks:        107.191.96.0/24 maxlen: 32
                          107.191.98.0/24 maxlen: 32
                          107.191.99.0/24 maxlen: 32
                          107.191.108.0/22 maxlen: 32
                          168.235.64.0/22 maxlen: 32
                          168.235.68.0/22 maxlen: 32
                          168.235.80.0/22 maxlen: 32
                          168.235.88.0/22 maxlen: 32
                          168.235.100.0/22 maxlen: 32
                          168.235.108.0/22 maxlen: 32
                          2604:180:2::/48 maxlen: 128
                          2604:180:9::/48 maxlen: 128
                          2604:180:c::/48 maxlen: 128
                          2604:180:f3::/48 maxlen: 128
                          2604:180:f7::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:87:f6:1a:3e:eb:6c:32:fb:27:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: May 29 16:23:17 2025 GMT
            Not After : Aug 27 16:23:17 2025 GMT
        Subject: CN=55b3cfe8-e168-4b14-9bb4-e67417a59523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:9b:a9:67:18:a7:37:29:b8:aa:d3:d5:51:
                    42:b3:56:f1:f8:61:fb:08:73:6b:a4:13:68:1c:90:
                    38:38:bf:0f:ac:9f:8c:15:99:85:f5:3a:66:38:58:
                    38:e3:ec:9c:b5:36:b9:77:db:a0:ca:ad:70:2d:c8:
                    e0:09:e9:7f:97:f9:71:2c:9f:11:e8:68:75:8e:5d:
                    0e:02:c6:24:b8:e5:76:ad:e6:d7:c8:31:d1:b0:c6:
                    82:60:eb:8c:71:ad:b1:b7:fc:96:2f:46:a8:e9:95:
                    41:9c:dd:36:4c:6e:98:6d:56:40:75:f1:15:9e:48:
                    02:d4:c4:ab:89:21:2c:c4:ea:fc:70:5c:be:84:20:
                    9e:88:8d:24:41:b6:70:34:8f:0d:13:94:1b:a9:02:
                    02:32:4d:1b:b9:33:d9:be:48:70:6f:85:3d:f9:dd:
                    2e:d8:23:d5:90:ad:73:78:d8:f5:2b:9f:92:c2:51:
                    66:6c:0f:9f:f9:61:46:37:4b:91:7a:a5:b2:66:82:
                    66:69:bd:bf:51:4a:5e:8d:93:63:ef:b5:ba:16:8a:
                    11:5b:d3:1e:42:6d:fd:d0:82:0b:96:4c:db:33:b0:
                    34:3b:80:6b:81:d5:f4:86:8b:69:ee:7e:63:10:1d:
                    0b:8e:27:93:e5:8e:a3:41:02:8e:c6:fa:a3:c9:3a:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:E3:68:A3:BB:F1:30:2F:A2:14:6C:37:DC:18:07:75:DD:4C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.96.0/24
                  107.191.98.0/23
                  107.191.108.0/22
                  168.235.64.0/21
                  168.235.80.0/22
                  168.235.88.0/22
                  168.235.100.0/22
                  168.235.108.0/22
                IPv6:
                  2604:180:2::/48
                  2604:180:9::/48
                  2604:180:c::/48
                  2604:180:f3::/48
                  2604:180:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:4c:b7:bf:5c:4d:3c:f5:37:79:1e:38:4c:54:f3:dc:68:
         8c:94:f4:a8:98:17:8a:1a:32:a0:38:3c:92:b0:f5:5e:f7:7e:
         ee:c4:7d:2e:f3:d3:e5:49:05:88:9c:21:3f:f6:87:7f:0b:2d:
         49:6a:6e:80:7c:09:f1:c4:ca:46:5c:4b:d7:8f:bf:ba:3d:0f:
         63:cc:00:02:55:a5:75:92:6d:fa:dd:eb:38:06:fc:f1:b8:5a:
         a1:15:c6:95:ba:52:ca:b7:19:73:c1:44:3e:4e:5d:53:6e:75:
         49:b0:2c:c0:13:b2:aa:f7:04:71:aa:64:94:a6:90:94:db:c9:
         55:eb:5e:06:c1:49:7b:4b:a5:5d:fe:3a:1b:4d:80:a3:44:a1:
         f2:45:d7:70:e5:34:51:2f:8a:7c:ef:92:38:be:7e:58:f2:83:
         4f:1e:2b:5d:b0:e1:5d:f3:3f:3b:53:18:4d:b3:d8:37:4b:f9:
         5e:b3:1f:2c:4f:ca:d1:ca:11:67:1b:40:3b:41:f2:52:15:09:
         f0:bc:93:d3:3f:de:f3:ed:c1:09:39:7d:35:a4:cf:e2:a7:0e:
         83:5d:f6:66:2b:fd:9b:e6:61:7e:ef:a4:a8:8d:19:24:3f:a8:
         21:63:85:ce:bc:b0:4c:a8:90:1f:0b:03:01:6a:7d:a3:06:11:
         d7:15:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:29 2025 by rpki-client