Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
File:                     8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa (raw, json)
Hash identifier:          fuinBoRN8KyPyjsigelf8xRkPTHorfSK/z0OPg7tSVY=
Subject key identifier:   40:6E:32:97:60:D3:FF:EF:C3:1F:AA:D6:81:B5:A4:70:69:32:06:16
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285849AA4F6E69689F8D708818C280
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     398101
IP address blocks:        50.62.80.0/21 maxlen: 24
                          64.202.184.0/21 maxlen: 24
                          72.167.20.0/22 maxlen: 24
                          72.167.220.0/22 maxlen: 24
                          72.167.224.0/22 maxlen: 24
                          107.180.68.0/22 maxlen: 24
                          107.180.72.0/22 maxlen: 24
                          107.180.80.0/22 maxlen: 24
                          107.180.84.0/22 maxlen: 24
                          107.180.88.0/21 maxlen: 24
                          107.180.100.0/22 maxlen: 24
                          107.180.104.0/22 maxlen: 24
                          132.148.164.0/22 maxlen: 24
                          132.148.168.0/21 maxlen: 24
                          148.72.20.0/22 maxlen: 24
                          148.72.64.0/22 maxlen: 24
                          198.12.224.0/22 maxlen: 24
                          198.12.228.0/22 maxlen: 24
                          198.12.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6e:69:68:9f:8d:70:88:18:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=d979f56a-faf6-451c-8e4b-7627f242fbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:d0:a4:6b:2d:fe:d9:77:6d:b0:e7:b9:ee:
                    18:f8:ee:75:4d:5e:3d:99:32:1f:ce:95:b1:87:40:
                    df:6d:8e:1b:2a:18:b9:65:65:93:3e:26:5b:d5:2e:
                    ee:f6:07:dd:4c:f8:24:90:64:05:9c:ac:75:f1:bf:
                    2d:5b:36:53:c6:42:d6:5b:29:d8:e4:32:83:94:6c:
                    0b:44:ae:f7:aa:ce:5e:36:e3:c8:08:c6:c9:75:df:
                    c8:06:52:a5:39:70:84:d8:ae:1e:c7:b6:3d:14:f1:
                    fd:35:01:69:97:45:a4:77:c4:11:06:8e:a4:8e:84:
                    0c:85:e4:7f:80:e8:d8:13:38:29:99:a6:08:d0:28:
                    8a:a9:8c:5c:5f:a8:ad:31:1e:a5:94:6d:b3:ec:b2:
                    88:38:6c:78:b4:ee:55:62:06:23:ce:1a:23:4d:8d:
                    03:19:a6:9b:13:ec:08:5e:cb:cf:dc:5f:02:3b:2d:
                    a6:09:72:a0:16:82:98:4f:10:af:1d:cf:30:8b:7a:
                    17:34:26:e5:c7:b5:75:30:2d:e8:11:63:16:f5:95:
                    6b:96:c6:b9:71:19:36:66:1f:fe:c7:f2:ce:cc:1e:
                    1b:82:b4:62:c6:60:9e:88:b9:b3:16:91:48:07:34:
                    2d:75:40:a5:d5:0a:1d:b7:e6:42:c5:2e:83:d6:8a:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6E:32:97:60:D3:FF:EF:C3:1F:AA:D6:81:B5:A4:70:69:32:06:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8bf51da3-4cb6-3a0c-a3d6-61a30f1c81a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.80.0/21
                  64.202.184.0/21
                  72.167.20.0/22
                  72.167.220.0-72.167.227.255
                  107.180.68.0-107.180.75.255
                  107.180.80.0/20
                  107.180.100.0-107.180.107.255
                  132.148.164.0-132.148.175.255
                  148.72.20.0/22
                  148.72.64.0/22
                  198.12.224.0/21
                  198.12.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:36:49:33:e1:bf:cf:50:a2:bc:a6:5a:b9:31:af:9f:3b:
         30:a0:5c:48:6c:66:a1:8b:e2:e2:8f:02:44:d7:39:d2:8f:bf:
         52:1d:17:60:1f:4b:8c:0a:51:12:87:20:20:55:f6:6e:b2:af:
         ed:a1:06:7a:5f:41:a0:83:54:71:55:37:9c:7e:a7:c0:9e:ee:
         4e:48:42:2d:e8:28:41:9c:ea:30:81:90:e6:8c:8d:8f:f1:57:
         a7:5b:b2:15:d0:cf:c5:67:cd:94:90:62:c2:06:63:b1:c0:71:
         8f:f2:52:ed:c2:64:56:6b:61:ec:32:bd:61:00:cb:7c:0c:92:
         19:f7:96:db:5e:3c:8b:1a:0c:b2:be:f9:4c:46:32:33:84:5b:
         32:b7:da:28:d9:9f:c6:3a:a7:68:54:e7:a7:a3:76:0a:64:35:
         92:18:59:cc:c9:60:e5:0a:6c:d3:72:9f:45:06:98:d8:2f:f4:
         ee:53:7f:0f:c5:67:a8:f9:49:37:a0:88:f4:9d:19:55:11:17:
         85:19:53:ab:01:70:50:5f:e8:f1:5e:3b:e6:3a:19:95:7d:6a:
         84:1c:8a:ca:f5:73:1f:9c:81:1c:37:fd:7c:f3:68:b8:ea:f8:
         3e:bc:58:bb:e5:61:59:b2:6e:e0:e3:49:ca:ee:b6:c3:b3:2b:
         24:c4:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:08:35 2025 by rpki-client