Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa
File:                     52325883-70f6-3b1a-84c1-4311d9418dbc.roa (raw, json)
Hash identifier:          0oxCafYK7MsphX55g3jZIGTTEg3utQ1hJAT3+0+DKTU=
Subject key identifier:   80:9F:2A:44:EF:14:CB:55:27:D2:06:E7:C6:4F:98:86:9C:6E:6D:26
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F43285849E654E895FBF0E3415EFF09E0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     1299
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:e8:95:fb:f0:e3:41:5e:ff:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=967f5c97-d3e7-4f0b-92e3-1abf11772936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:44:d5:25:12:d6:d4:38:87:0b:ea:49:e6:
                    62:3a:e3:b7:a2:8b:45:47:cb:04:a7:86:e7:50:94:
                    41:ad:07:66:5f:e3:db:ff:32:83:3e:2c:c9:84:05:
                    92:c2:34:c6:d0:85:75:14:7d:15:61:ef:2f:8a:53:
                    e2:14:24:bf:38:64:50:e6:79:e3:37:e4:dd:52:ec:
                    e7:f2:cb:09:ba:ca:76:8a:ed:e6:a5:42:bd:41:1e:
                    51:66:76:8e:23:09:b1:3c:d8:4d:dd:56:ee:c3:40:
                    3e:db:fd:d3:99:9c:33:46:57:cc:61:17:15:48:7e:
                    7d:4c:db:a6:aa:0f:ac:f6:b1:ee:f8:4a:de:5e:29:
                    b1:9b:57:15:f2:17:d6:3c:8a:63:7b:48:ab:0c:f8:
                    b9:59:6c:2f:fb:24:25:8b:aa:24:cd:23:e1:95:7a:
                    a4:cd:5b:ef:5d:ff:06:4b:7d:c4:6b:3c:f9:43:ff:
                    1d:9c:6c:84:c2:32:30:e1:c9:5f:b8:e5:09:b1:9c:
                    fa:e1:fa:9a:64:7b:0b:4d:97:01:16:4d:5a:60:7e:
                    72:90:87:82:b3:2c:ef:a1:78:ec:0a:9a:98:6c:e6:
                    24:57:f4:5d:65:70:00:dc:1d:7d:10:c3:96:0c:16:
                    fb:11:52:3c:e0:37:9d:43:41:e3:30:84:71:53:a0:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9F:2A:44:EF:14:CB:55:27:D2:06:E7:C6:4F:98:86:9C:6E:6D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/52325883-70f6-3b1a-84c1-4311d9418dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:05:7a:c0:cd:fd:7f:c2:74:2d:4a:ab:59:1a:a6:fd:1a:81:
         87:35:82:7c:39:0b:95:c3:88:2c:3d:8e:5b:60:b6:f8:92:cd:
         e0:56:20:ca:eb:0a:f6:0b:12:3e:0d:94:05:32:19:ed:5e:78:
         57:b0:10:22:d8:ec:4e:3c:66:c5:63:b1:5f:ed:c3:20:98:0c:
         aa:22:ef:68:21:8d:42:f6:36:5e:6d:62:6a:88:bf:92:f9:fe:
         df:4a:19:4e:ed:8a:ae:d0:be:eb:de:25:47:3b:0f:40:4b:38:
         ba:aa:8a:68:e1:71:7c:67:61:b0:96:8e:61:b8:69:c5:a2:ea:
         5b:42:d8:1c:7f:f7:09:0d:71:c1:42:24:85:e6:f0:0e:8a:63:
         5a:19:68:7b:71:3f:f0:44:7c:e3:d7:4f:f7:88:66:72:d2:fa:
         6c:51:37:de:60:9e:a8:17:39:c5:2a:1c:00:b6:bf:75:f1:b6:
         43:00:d5:9e:c6:10:b3:36:63:17:3d:46:52:02:c4:a9:9b:6b:
         12:f7:4c:72:70:fc:62:0a:dd:dd:1d:2b:e9:ad:1f:19:49:bb:
         f0:33:90:e6:2f:f0:34:ae:41:35:52:96:37:bf:2c:26:4f:ae:
         08:0b:0e:da:50:e2:3a:cd:b3:95:3e:6f:c0:1d:02:8e:7a:01:
         3b:43:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:43:58 2025 by rpki-client