Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa
File:                     8c8e0628-57af-3f92-9289-26932712e04a.roa (raw, json)
Hash identifier:          3OzegmZ/fNI9n28QiQ98ChT3kTUuIWRQRYgIbPhc6KE=
Subject key identifier:   00:32:19:55:38:AC:2C:13:84:20:E1:5B:D7:15:61:D9:7C:43:65:92
Certificate issuer:       /CN=757f9f4f-7bcb-4918-ad77-cb1331456bac
Certificate serial:       010D0C9F4328584A07D533ACF8067C9D44764380
Authority key identifier: DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     13953
IP address blocks:        108.59.144.0/20 maxlen: 20
                          2620:103:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:33:ac:f8:06:7c:9d:44:76:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757f9f4f-7bcb-4918-ad77-cb1331456bac
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=5cc22aa5-d017-48c3-87da-4a4673703711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:3d:2d:00:e2:d1:60:e6:cb:24:89:ce:a8:
                    1a:ec:6d:4f:4a:af:09:60:10:16:7b:a9:21:e0:c6:
                    de:91:5d:2b:56:15:49:fb:e9:46:46:06:73:a4:f6:
                    76:eb:03:b6:9a:cf:6a:85:f2:f7:fc:58:27:78:00:
                    99:b8:04:1c:02:73:27:a7:15:80:a2:69:40:58:30:
                    80:92:77:95:53:68:16:6f:ce:e1:86:e5:87:63:03:
                    af:02:6e:59:d9:df:cc:1d:c0:27:0a:34:71:57:67:
                    3d:f6:fc:91:d9:0d:07:d1:e8:e6:95:52:f0:e3:88:
                    a6:57:b9:25:15:79:8e:61:5b:59:5a:1c:79:68:77:
                    76:68:48:93:cd:0b:1c:74:66:fd:9c:c2:96:6a:94:
                    bf:76:7d:85:ca:3d:23:10:24:95:f1:70:98:e5:2c:
                    14:2f:31:1a:ae:c1:48:dc:ba:47:a7:0d:5c:d2:a2:
                    9d:84:95:0a:46:9b:02:57:8a:ca:c9:c1:a8:99:8f:
                    a7:3d:8c:32:91:d4:45:ec:a9:ab:81:39:ce:c6:ab:
                    8c:a7:e7:79:61:72:ac:e0:ef:92:15:f5:26:f0:2e:
                    cd:8c:f8:2d:33:60:67:cd:6c:e9:24:da:cc:6c:18:
                    93:3d:9d:08:7a:cb:ab:83:c6:1b:d9:58:b3:d7:11:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:19:55:38:AC:2C:13:84:20:E1:5B:D7:15:61:D9:7C:43:65:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/8c8e0628-57af-3f92-9289-26932712e04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.crl

            X509v3 Authority Key Identifier:
                keyid:DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.144.0/20
                IPv6:
                  2620:103:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:75:2f:3a:78:30:d1:24:00:de:a6:6f:01:3a:0f:f0:17:98:
         6f:47:0f:a0:70:df:c0:e0:4f:07:29:89:ba:ce:99:a4:a4:5e:
         34:c7:99:98:c0:e3:73:f3:cb:74:b7:61:3b:38:af:0a:3d:1f:
         ed:bf:81:3f:6d:92:77:97:7d:62:8a:b8:a2:b2:31:e9:9d:44:
         34:63:0c:22:94:75:23:9b:bd:90:71:02:a8:fa:40:c8:7c:14:
         2c:86:b9:1c:6f:49:37:0d:de:66:0d:62:1a:14:27:fa:0a:49:
         87:89:36:c7:f0:fd:df:0a:6b:9e:ac:71:a0:e7:0c:1b:73:38:
         0f:07:f7:d4:aa:0a:5d:cb:54:43:64:82:fc:b7:ab:39:30:7d:
         bb:d0:99:e4:54:b6:51:b2:00:6a:cf:e1:be:4a:d5:fd:c0:a3:
         06:e4:ee:65:52:51:54:7c:5f:a0:65:13:47:8e:12:44:0d:b6:
         9b:89:a4:ee:8b:ff:bc:fc:6d:98:1b:24:4f:1e:4e:ca:7e:3c:
         c0:a5:cb:c0:16:9b:d7:89:d3:f6:44:0e:f6:7f:87:4e:b4:4a:
         43:83:29:c8:f4:7b:fe:69:24:f7:fa:62:f1:f6:c3:f8:97:7a:
         84:c3:fc:9f:80:33:ae:23:fb:98:08:84:38:88:96:c9:ef:c7:
         8b:eb:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:23:44 2025 by rpki-client