Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa
File:                     cda65907-ce3f-342f-b106-fe8256cae008.roa (raw, json)
Hash identifier:          U4nnw6nakODj1FT/12TfPUhQLDKjwy+Jfx05TNM8LzQ=
Subject key identifier:   1B:DE:65:C8:FC:63:EB:3D:22:E5:40:03:F7:BF:21:C8:D6:1C:DE:93
Certificate issuer:       /CN=25283898-2dc3-4477-af3c-b64dd3c800ab
Certificate serial:       010D0C9F4328584A23C015901B21A0D1E63A0B00
Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13692
IP address blocks:        67.219.224.0/20 maxlen: 20
                          100.42.160.0/20 maxlen: 20
                          108.174.176.0/20 maxlen: 20
                          192.86.0.0/24 maxlen: 24
                          192.175.50.0/23 maxlen: 23
                          198.100.136.0/21 maxlen: 21
                          208.77.176.0/21 maxlen: 21
                          2607:8600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:15:90:1b:21:a0:d1:e6:3a:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=848d50a2-0e97-4608-8fc7-1a263f3fcfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:e5:c1:9a:e9:8c:86:07:89:a7:26:33:71:
                    75:12:a8:1a:2d:6b:58:d5:f6:34:8f:5a:df:21:bc:
                    10:28:7a:40:6f:a5:87:6b:df:f8:25:4e:63:49:38:
                    21:d2:40:24:ae:b2:5f:12:09:6c:3f:bc:8d:6e:45:
                    6c:62:7c:2a:61:e1:57:31:7a:92:65:84:14:be:fe:
                    25:68:2c:32:4d:38:13:bc:59:40:9b:b8:c1:b0:d2:
                    42:2e:0c:4c:05:a3:a8:fc:ae:c6:74:1a:c1:eb:28:
                    d4:7c:81:89:68:6f:8e:25:39:8d:cc:7d:cc:34:95:
                    b2:df:e9:13:be:2a:15:db:34:3e:13:24:16:48:91:
                    b0:97:62:b4:40:db:c1:52:96:bf:78:03:f9:b0:c6:
                    25:d2:89:28:8d:b2:f4:1b:b6:e8:4d:be:e4:49:59:
                    34:f8:85:55:8c:78:bb:71:88:44:de:96:fc:17:42:
                    da:fe:e6:65:35:0a:14:9d:f0:93:88:0f:31:62:2d:
                    6e:46:c5:52:3a:97:eb:28:0d:81:5d:b1:37:a3:a3:
                    78:b2:50:c7:ea:64:c9:f8:13:5c:e8:b0:21:2b:cc:
                    0f:63:03:8b:42:11:fa:07:ca:fb:51:61:42:8e:f8:
                    9e:02:81:08:cb:2a:12:db:76:0a:0b:fb:83:5f:e2:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:65:C8:FC:63:EB:3D:22:E5:40:03:F7:BF:21:C8:D6:1C:DE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.224.0/20
                  100.42.160.0/20
                  108.174.176.0/20
                  192.86.0.0/24
                  192.175.50.0/23
                  198.100.136.0/21
                  208.77.176.0/21
                IPv6:
                  2607:8600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:8d:a9:bf:e1:c5:85:69:0d:70:2b:48:9e:fc:5a:a0:ef:
         dd:f3:43:1b:00:bf:24:d4:eb:17:bb:4c:a5:50:a0:a5:2d:c8:
         dd:09:13:7b:03:e0:ca:b1:f4:1b:ee:a5:e8:ce:71:25:78:52:
         a2:00:42:7a:0f:b9:7f:de:2e:cb:37:34:4c:dd:16:a2:c8:f5:
         da:ac:79:0e:67:cc:06:d3:31:3d:9d:ba:ce:20:8d:3f:f0:7a:
         2e:f8:00:eb:6a:04:b7:11:b7:d5:63:93:5c:ed:1c:a6:7c:2a:
         f6:e8:74:3d:11:72:9c:4f:a3:65:b5:79:15:4d:97:3e:c8:a3:
         06:86:80:8f:70:ef:1d:1a:4b:4e:a2:bb:7e:25:0e:bc:c4:9b:
         32:f3:e5:30:21:f7:95:8f:69:aa:4e:e8:b6:40:71:bb:cc:cd:
         c7:df:71:94:86:00:3b:f5:e0:9c:00:13:05:85:46:83:3d:a0:
         12:36:78:02:a9:36:73:f2:fc:c8:cd:6d:e8:be:2f:86:03:3d:
         aa:2a:86:db:00:bc:37:7d:c2:79:c6:f6:a6:c4:db:c8:ca:7a:
         55:57:69:88:a0:48:5d:08:e5:f5:bb:2f:82:c9:35:8f:1c:7f:
         8e:3e:5e:c9:f5:aa:a1:c6:ee:5c:d0:59:ac:b1:c5:33:16:70:
         f7:18:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:41 2025 by rpki-client