Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e511c38a-9bd6-3bb4-91d8-89d4206be759.roa
File:                     e511c38a-9bd6-3bb4-91d8-89d4206be759.roa (raw, json)
Hash identifier:          waYWl3C1sgPnHqgp50grhvLuhQwusTd8ribKR8Cg4zY=
Subject key identifier:   4E:95:A1:80:3A:2E:BA:B2:7E:E0:77:CF:92:73:40:8F:E5:E1:D9:20
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584A81464530609D9C5EFAC8D300
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e511c38a-9bd6-3bb4-91d8-89d4206be759.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19871
IP address blocks:        50.87.0.0/16 maxlen: 24
                          66.147.240.0/20 maxlen: 24
                          67.20.64.0/18 maxlen: 24
                          69.195.64.0/18 maxlen: 24
                          70.40.192.0/19 maxlen: 24
                          74.220.192.0/19 maxlen: 24
                          162.144.0.0/16 maxlen: 24
                          162.214.0.0/15 maxlen: 24
                          162.240.0.0/15 maxlen: 24
                          173.254.0.0/17 maxlen: 24
                          198.57.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:30:60:9d:9c:5e:fa:c8:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=731a05d8-320d-42ca-8bc7-769e88832b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:c9:23:47:f1:ba:89:85:3d:54:21:5a:06:
                    45:19:78:b7:2d:d0:5c:c0:d6:fb:a8:df:32:12:db:
                    a9:ff:da:ac:be:7e:d8:09:8e:9c:7c:03:83:c9:dd:
                    eb:66:12:a6:99:3d:03:09:0e:19:c0:cb:6f:06:e8:
                    e2:97:f3:a6:bc:34:71:49:2e:e8:eb:26:b5:13:d8:
                    c4:1c:f0:ab:33:88:b7:e0:3d:04:92:cc:3d:e3:53:
                    4a:68:2f:36:cd:aa:c1:fc:52:a1:6d:36:50:c9:b5:
                    22:0f:ff:99:25:97:db:11:ce:0b:a2:38:c1:10:6d:
                    1d:45:71:dc:de:84:b1:4a:5a:4e:89:bb:1e:63:5f:
                    8d:1d:bf:56:bd:f7:98:a1:77:ec:fa:d9:74:77:a0:
                    24:64:c6:52:ee:eb:20:38:0b:55:2d:ac:b8:2c:5c:
                    ac:94:29:a5:76:b0:70:9a:c7:63:3a:71:78:d7:ca:
                    25:55:97:47:3d:00:e6:bb:cb:27:f8:9e:be:3d:0c:
                    2b:e5:9d:20:8e:6a:4b:70:df:c5:5a:9e:1c:0f:9b:
                    54:10:dd:ff:17:f3:29:3c:ed:b3:cf:ec:d6:64:ee:
                    3b:87:a8:82:a6:69:2f:0d:3e:6d:b8:9c:1c:fc:b4:
                    94:5f:01:3b:60:2e:a7:0c:89:a6:94:84:39:5f:11:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:95:A1:80:3A:2E:BA:B2:7E:E0:77:CF:92:73:40:8F:E5:E1:D9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e511c38a-9bd6-3bb4-91d8-89d4206be759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.0.0/16
                  66.147.240.0/20
                  67.20.64.0/18
                  69.195.64.0/18
                  70.40.192.0/19
                  74.220.192.0/19
                  162.144.0.0/16
                  162.214.0.0/15
                  162.240.0.0/15
                  173.254.0.0/17
                  198.57.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:62:8e:0c:b5:8e:9e:60:59:a1:67:0d:94:1a:08:3b:be:e2:
         e8:19:7e:a2:e7:67:f3:f4:29:69:4e:e2:01:9b:06:4d:8e:47:
         eb:98:e7:93:43:01:1c:5b:a1:7d:db:ce:e2:3d:0f:87:c2:ee:
         b4:a5:4d:d1:3c:cd:32:71:32:f4:09:94:df:fc:19:d6:ae:13:
         99:19:2a:e0:4e:ad:1f:17:24:fa:c3:3d:0b:01:15:af:bb:9a:
         15:a8:fb:b8:fb:12:01:7a:4e:59:57:53:87:8c:b6:9f:9b:13:
         23:e5:cb:1d:0d:1c:6d:1f:25:cd:d0:58:1b:bc:87:d8:b2:7e:
         a9:86:c4:f7:cb:b2:38:21:d9:61:c4:3f:e7:d0:2e:52:c0:8d:
         6c:a5:21:98:44:d4:ad:1b:33:f3:c5:3c:0d:8b:a2:71:67:de:
         a8:c5:0a:e9:44:c4:13:04:3c:42:de:b8:9a:18:98:77:60:ac:
         e7:fd:6b:67:c7:95:9d:1f:8a:b3:86:b1:17:51:0e:b3:0e:3c:
         37:31:f1:54:3f:dc:bb:a6:67:9c:64:ef:31:c7:fa:db:82:f6:
         86:cf:40:06:72:59:a9:d0:09:50:0b:56:d2:60:83:2c:39:b9:
         74:2d:c3:eb:6e:ab:65:23:ce:03:a3:f1:89:66:bd:6c:0c:31:
         97:3d:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:24 2025 by rpki-client