Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
File:                     f6cd7213-c676-3703-a01d-0a957230f88b.roa (raw, json)
Hash identifier:          oljFEultWm3Qf2Es2RnextJrVD/5oKiElOyhGxmEfsU=
Subject key identifier:   A7:31:FC:EB:3F:27:CD:29:D6:14:53:CA:28:EF:DE:D3:2A:8A:3A:9D
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F4328584A8146465ED4906CFF0598DE00
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     394977
IP address blocks:        74.114.8.0/21 maxlen: 24
                          139.138.224.0/19 maxlen: 24
                          184.75.160.0/20 maxlen: 24
                          199.48.104.0/22 maxlen: 24
                          209.204.240.0/20 maxlen: 24
                          2620:102:8000::/44 maxlen: 48
                          2620:132:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:46:5e:d4:90:6c:ff:05:98:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=301edcb4-e7b6-4ee3-90f0-62adfb038fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:99:a0:8a:2d:44:68:91:12:7a:b2:9d:ae:
                    91:9c:83:76:86:c7:22:65:d7:8e:55:1b:e0:28:f2:
                    91:8c:90:77:3f:f1:00:aa:c4:b8:b5:a3:5e:5e:18:
                    57:ac:6b:16:33:b1:15:1d:00:59:ab:f0:db:2d:49:
                    f1:d2:af:e2:c2:13:b9:00:bb:b4:b7:0a:c8:2b:87:
                    dd:ab:d8:8a:4f:27:fc:51:11:a4:e0:59:ef:c0:73:
                    ca:5b:86:66:e2:f2:da:dd:d3:cf:dd:59:0d:2e:b6:
                    72:61:32:53:67:7d:c4:26:3a:ec:11:ec:0b:8d:d8:
                    b3:44:d7:30:a6:67:88:58:10:ad:fb:e5:79:fc:5a:
                    ad:16:59:63:ca:ed:ba:b2:6c:9b:fe:15:56:53:d8:
                    e5:98:ce:d3:49:be:aa:a0:df:06:0c:5a:3d:5b:4f:
                    10:a4:16:e1:76:51:c9:9a:e1:60:39:c3:f7:86:44:
                    0a:f6:99:15:82:99:77:65:76:f0:ba:33:95:99:e7:
                    01:28:57:5e:41:bb:ae:af:78:04:6d:09:6f:1a:c8:
                    84:9b:50:02:63:bd:04:d1:9b:d9:c2:a3:a9:b8:94:
                    1c:d5:7a:60:f6:df:01:5b:e2:f4:22:a1:da:76:6f:
                    77:f5:0b:91:f1:86:d7:ab:4a:01:79:6b:b0:df:e6:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:FC:EB:3F:27:CD:29:D6:14:53:CA:28:EF:DE:D3:2A:8A:3A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.8.0/21
                  139.138.224.0/19
                  184.75.160.0/20
                  199.48.104.0/22
                  209.204.240.0/20
                IPv6:
                  2620:102:8000::/44
                  2620:132:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:a7:ea:07:a2:47:ed:49:c3:86:7e:82:5c:e6:58:06:eb:
         9a:fc:22:24:f9:39:ad:b6:b6:8d:dc:c6:2b:40:72:87:5a:36:
         7e:aa:df:df:1b:3a:27:86:5b:0a:c4:18:2d:e7:59:d6:5f:71:
         f3:b4:a9:e9:52:d6:0e:b7:f6:91:28:60:80:5c:7e:cd:ca:45:
         fa:48:17:75:0d:ca:73:21:45:55:7d:13:6b:85:20:0b:8b:bf:
         5a:06:b0:e9:23:98:27:de:9f:71:c2:d8:f4:eb:a1:d1:4f:e6:
         02:67:71:5e:8a:c8:8c:40:93:74:73:39:3f:82:73:17:d8:06:
         7f:4e:40:d7:04:98:15:fb:ec:6f:1b:2e:48:57:e1:de:4a:0a:
         16:bf:05:a5:3f:ed:19:0c:1d:ec:d8:67:4e:43:cc:00:6f:88:
         e6:54:b6:f7:54:96:fa:5a:de:ca:d0:17:69:65:e3:5d:4c:4d:
         d7:ae:2f:fa:b7:63:b9:67:f2:a9:e8:f3:19:4b:dd:94:66:d2:
         ea:87:e7:6a:52:ab:b6:fb:84:37:4e:bb:ae:d1:1b:3b:e4:e8:
         6b:06:ac:b3:24:77:f5:75:03:f7:61:00:01:6a:35:f0:28:7d:
         de:18:68:35:b1:c3:56:27:9f:ed:90:e9:68:04:c4:1d:f8:5d:
         6c:39:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:29 2025 by rpki-client