Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
File:                     fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json)
Hash identifier:          C539zVtLJrgMs4DY4neUXX4zHqUiyP9/LqcSkyJgnO8=
Subject key identifier:   75:FA:5D:AF:F0:36:03:B7:B9:D2:99:9C:E4:C8:47:9C:91:7C:C6:01
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F43285849F9DFD418DE7FFC093E47AFC0
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     19201
IP address blocks:        64.127.160.0/19 maxlen: 24
                          66.171.0.0/20 maxlen: 24
                          170.62.0.0/19 maxlen: 24
                          198.183.172.0/24 maxlen: 24
                          199.30.120.0/21 maxlen: 24
                          199.127.220.0/22 maxlen: 24
                          199.187.248.0/21 maxlen: 24
                          199.201.76.0/22 maxlen: 24
                          208.54.160.0/20 maxlen: 24
                          2605:27c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d4:18:de:7f:fc:09:3e:47:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=d1be1c18-605e-4a8e-b04e-eca5d6344fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:13:0e:cd:a9:e9:a7:64:a4:c2:a4:10:5d:
                    29:6d:86:61:9e:13:d1:09:0f:48:8e:f7:fd:13:cf:
                    ed:79:0e:b2:31:20:18:eb:cf:a5:74:8c:24:0e:d6:
                    07:b5:db:85:43:60:95:73:ab:68:c9:03:9a:fa:d9:
                    02:da:53:ca:1e:92:d1:fd:74:d7:96:e7:da:16:17:
                    d4:b9:1f:aa:a3:7f:24:8c:c1:80:53:3a:3a:84:68:
                    7c:60:7d:09:d9:7c:1b:4c:5a:71:78:e3:46:41:fe:
                    46:36:23:69:f1:d7:15:cc:13:ec:52:a6:f8:ae:d9:
                    c5:d4:78:f5:4e:cc:3e:50:9c:bc:05:22:cc:dc:b4:
                    67:82:cb:15:e2:8a:85:f2:34:ce:54:cd:69:39:2d:
                    41:44:f9:cc:0b:04:7f:21:2a:e1:5b:82:d0:bf:38:
                    42:37:01:00:17:c3:92:b1:c8:80:96:84:a7:25:60:
                    19:ff:12:e5:d1:f6:91:81:62:e6:7e:38:76:36:30:
                    7d:49:d8:dd:f4:c0:a6:0a:76:35:b7:63:a8:76:08:
                    34:81:92:21:fd:f0:ac:4e:6a:c8:57:12:08:da:75:
                    5e:16:eb:1b:78:c8:66:f6:cd:cd:cb:23:e6:61:40:
                    6d:df:5e:ff:d9:da:aa:b3:cc:6b:46:ef:ec:87:dc:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:5D:AF:F0:36:03:B7:B9:D2:99:9C:E4:C8:47:9C:91:7C:C6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.160.0/19
                  66.171.0.0/20
                  170.62.0.0/19
                  198.183.172.0/24
                  199.30.120.0/21
                  199.127.220.0/22
                  199.187.248.0/21
                  199.201.76.0/22
                  208.54.160.0/20
                IPv6:
                  2605:27c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:e7:02:c4:09:1a:fa:74:19:00:a2:d4:c6:85:ee:b1:40:
         70:a4:3f:7c:b7:3e:9a:87:35:7e:58:0a:90:74:98:06:b5:6f:
         b3:b3:c1:fb:42:5a:fe:24:09:5f:0c:a0:36:e4:1c:ea:79:e0:
         15:96:a3:00:c4:76:1d:48:d6:65:6c:a9:30:9f:75:b1:c6:fa:
         e9:af:5a:fe:28:4e:4b:be:d4:08:f5:86:cd:2b:11:20:a7:c6:
         e3:2d:c6:fe:d9:d3:88:76:14:41:a5:44:70:c9:8a:97:8d:89:
         fc:39:9f:ff:cb:52:5d:af:d4:9d:0b:ef:b7:3e:2c:45:ab:c7:
         92:4f:5a:8a:2b:04:60:ff:2d:e4:fd:2d:f6:a9:53:b7:f3:28:
         44:a4:5a:7e:5e:ef:f8:48:23:a7:e3:ae:b6:eb:3f:4e:cb:07:
         0d:6b:52:aa:87:79:4b:4d:9d:52:75:30:c0:96:12:87:be:d1:
         69:82:66:6d:dc:9c:c0:35:3c:df:7d:a7:82:f8:70:de:9f:e0:
         87:88:4e:22:f5:95:32:00:a8:1b:5c:98:a0:90:60:42:e6:39:
         d9:6a:ec:ed:28:ba:b6:df:71:f2:73:04:d1:29:49:0b:69:90:
         06:e0:53:17:c6:c6:95:08:9d:2b:f3:6c:2e:4e:17:8b:12:05:
         c4:22:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:02 2025 by rpki-client