Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
File:                     f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa (raw, json)
Hash identifier:          85bypxqrmlz9Q0aTMPm22WKre4kCBhsMMDoJ7xIILNU=
Subject key identifier:   46:C9:FF:6B:4F:91:EA:D9:BF:08:25:E6:15:65:51:93:CF:91:C5:21
Certificate issuer:       /CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Certificate serial:       010D0C9F43285849C20A13B078F4088BB8B51F00
Authority key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        69.59.224.0/19 maxlen: 24
                          74.116.144.0/21 maxlen: 24
                          216.115.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:13:b0:78:f4:08:8b:b8:b5:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d1b7dfa1-53c6-4c93-ba33-a786e6b5f2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:8e:05:46:e8:1f:6c:e0:4b:11:62:90:31:
                    2c:bd:58:a2:e1:24:0d:36:1a:03:10:c1:a7:9d:ce:
                    f6:4d:be:c2:8d:96:88:aa:85:fa:43:52:a9:a4:34:
                    16:34:29:8b:47:98:a2:b2:94:49:ef:39:b9:76:a7:
                    7b:08:9d:e5:78:db:b4:82:bd:10:5b:69:86:24:ee:
                    14:dc:59:1d:9a:d6:c3:40:3c:c9:dc:92:dc:81:9f:
                    25:93:ca:1d:69:f4:81:e4:3e:34:d7:83:94:c0:55:
                    17:4f:94:8f:77:80:55:c5:86:6b:de:82:a5:07:7a:
                    ab:81:13:8f:46:a8:a3:6b:3c:c4:f8:30:f8:b4:ac:
                    41:cc:ab:bb:ff:29:59:77:37:d7:11:2a:16:01:d5:
                    90:01:71:1d:33:07:14:30:b6:3b:da:cd:db:b2:5a:
                    82:5c:de:ca:2a:64:60:58:92:d6:94:17:9f:6c:d3:
                    c0:2e:92:d0:82:61:b6:cc:5e:38:3e:38:d2:c7:0f:
                    78:3d:91:fe:51:e5:55:30:db:e4:af:f1:93:af:6b:
                    30:d2:44:81:a5:73:ab:5e:77:ab:c0:40:bc:22:e1:
                    5b:35:bf:dc:15:c7:33:24:27:89:fb:e9:c0:53:fb:
                    cd:11:75:85:f8:d7:24:10:16:82:ef:8d:65:2c:5e:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C9:FF:6B:4F:91:EA:D9:BF:08:25:E6:15:65:51:93:CF:91:C5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.224.0/19
                  74.116.144.0/21
                  216.115.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:61:2b:22:7a:c1:a4:a4:06:0d:e4:66:b3:c6:4f:e0:c4:
         8d:cc:0a:55:ee:c3:44:77:55:53:51:7d:df:99:30:b9:46:17:
         68:ec:bd:8b:ae:a9:75:ad:31:b6:dd:2c:a5:dc:44:a4:74:26:
         7b:2a:d7:d2:91:f1:12:ef:77:2e:21:72:a2:51:d0:87:47:77:
         bb:f9:4a:a5:93:6a:d0:5e:a9:33:7a:f9:a7:0f:10:95:ca:cd:
         e1:3a:3f:37:d0:dc:1c:fe:18:96:ac:94:a2:c1:2e:da:35:8e:
         df:dd:83:45:e3:8d:31:0e:4d:ad:4d:57:32:0a:87:4c:b8:54:
         cb:b3:91:3d:fc:08:f6:d5:c9:93:2b:47:a5:f8:66:60:93:3b:
         b7:ac:81:a2:96:d9:b5:4a:9f:a2:da:58:27:6f:c3:5d:51:a8:
         b3:ae:3a:ff:65:e5:e4:b2:e0:eb:4d:6f:83:9a:57:bd:90:96:
         bf:e1:51:5a:4c:d4:24:67:bb:d5:3f:d8:62:c6:4f:98:45:84:
         aa:6d:f0:89:b1:a9:a9:c0:ef:a4:8c:6e:b1:08:d1:d5:6d:26:
         7e:97:3b:b9:86:94:c9:a5:e6:9d:26:ea:70:aa:6a:c2:b2:6d:
         dd:69:21:22:6f:e2:f7:4b:ba:95:7a:e6:5d:b8:14:7f:9e:9c:
         50:b6:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:25 2025 by rpki-client