Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/09cff432-71e7-34f7-941b-ef7311946b49.roa
File:                     09cff432-71e7-34f7-941b-ef7311946b49.roa (raw, json)
Hash identifier:          6V71BN+hRoILQDwoaFitwjOFI3cGouFFS5VFNxnnk30=
Subject key identifier:   2C:95:B4:3A:39:16:2F:44:E8:7E:23:E9:0F:8A:B7:A2:D1:83:C5:2C
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285849E7BA7A2C1F80AD66939884C0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/09cff432-71e7-34f7-941b-ef7311946b49.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14340
IP address blocks:        66.231.80.0/20 maxlen: 24
                          68.232.192.0/20 maxlen: 24
                          136.147.128.0/20 maxlen: 24
                          136.147.176.0/20 maxlen: 24
                          198.245.80.0/20 maxlen: 24
                          199.122.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7a:2c:1f:80:ad:66:93:98:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=8d94776e-d728-4424-9bbd-59c5cc5cbcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:d6:29:df:cc:1c:67:9c:99:9f:ab:8e:a0:
                    b5:c0:4c:ac:32:7e:1e:97:c7:00:c4:3d:cd:89:1d:
                    e8:68:9d:a6:ae:5b:b7:07:c5:61:e3:4d:cb:07:b2:
                    76:f5:32:fc:0d:d8:5c:66:d5:f7:e7:9b:63:39:42:
                    65:ca:17:2c:ff:79:4d:f8:ab:45:bb:ec:e8:03:df:
                    d7:e6:61:9c:e9:31:48:4d:02:32:d9:f8:c8:a6:4e:
                    65:ca:c3:3e:80:3c:c8:2a:44:8f:9f:1d:91:18:f9:
                    7d:b8:e2:76:13:d5:5a:c8:ee:07:11:d9:3a:30:d6:
                    3e:07:3f:87:77:0e:b0:3b:00:90:ec:aa:69:95:1b:
                    ff:89:c1:84:ba:1f:7e:a9:ef:33:33:9b:17:fd:ba:
                    10:41:90:3c:e2:f1:7e:07:9c:2d:c3:e2:b6:cf:fa:
                    7b:72:87:dc:1c:04:40:98:86:ac:f7:f5:b4:d6:c9:
                    bb:4e:24:da:cb:e3:ed:f4:4a:e8:7d:5b:df:d6:ce:
                    dc:96:fc:6d:65:15:3f:24:4d:9f:73:f5:8b:a8:5f:
                    b9:6b:08:f1:cf:92:09:6d:c3:98:9c:e7:a8:fe:b6:
                    e6:89:0a:7e:b9:09:f0:0d:9e:ae:e6:56:99:22:9b:
                    ec:ac:50:5a:07:31:4b:22:74:97:e3:94:1b:8f:c7:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:B4:3A:39:16:2F:44:E8:7E:23:E9:0F:8A:B7:A2:D1:83:C5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/09cff432-71e7-34f7-941b-ef7311946b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.80.0/20
                  68.232.192.0/20
                  136.147.128.0/20
                  136.147.176.0/20
                  198.245.80.0/20
                  199.122.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:34:7c:79:95:5c:8b:14:33:ef:a7:c3:5f:fa:b5:f8:fc:54:
         87:b1:f2:03:f3:50:49:a0:d1:14:2e:03:67:6a:3c:12:18:14:
         e0:5a:56:03:18:74:a6:36:8f:95:5e:46:3b:0d:66:88:04:a9:
         c9:3b:b0:e9:bc:0f:45:f1:c8:a1:22:51:ad:b6:ff:1b:fc:f4:
         cd:6a:ba:3a:23:02:c4:3f:06:bd:16:60:4c:eb:1a:05:c5:44:
         ce:c9:d5:5d:0b:86:3a:93:87:6d:72:eb:0b:b9:58:62:ae:a4:
         ec:b7:df:0c:7c:f6:58:41:b7:56:5a:d8:25:f2:33:88:b3:db:
         09:9b:60:60:b9:86:9c:34:a7:16:fd:fb:2e:9c:c2:3d:b3:26:
         cc:87:ef:9d:ec:59:3e:39:d4:5f:20:03:35:77:e8:20:79:88:
         b8:30:da:31:e4:a9:ec:64:0c:6d:b7:95:30:89:a2:21:8c:09:
         a5:e4:7d:6a:d3:be:27:33:02:51:21:e4:1e:8a:82:40:e3:d0:
         48:cf:cb:1d:0c:f7:08:91:f7:a8:80:a3:e2:25:20:6a:79:f9:
         a8:51:dd:c8:e3:67:54:7f:80:17:63:3e:47:92:c7:e0:10:e1:
         d5:af:b0:17:fd:e0:17:f7:97:f6:45:89:1e:ba:9c:ed:d3:b2:
         ee:9d:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:55:16 2025 by rpki-client