Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
File:                     511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (raw, json)
Hash identifier:          KHzmObj5GESYTQX7kIz21IAFOe6sos5jDtHkaYMFbUQ=
Subject key identifier:   2A:15:D8:8C:31:D3:9B:12:4E:09:E4:BA:A3:2B:59:7A:CC:3A:B7:AA
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F4328584A2D858BE95E35EAC5C2277C00
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     46475
IP address blocks:        63.143.32.0/19 maxlen: 24
                          64.31.0.0/18 maxlen: 24
                          69.162.64.0/18 maxlen: 24
                          74.63.192.0/18 maxlen: 24
                          162.253.40.0/22 maxlen: 24
                          192.169.80.0/20 maxlen: 24
                          208.115.192.0/18 maxlen: 24
                          216.144.240.0/20 maxlen: 24
                          216.245.192.0/19 maxlen: 24
                          2607:ff68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8b:e9:5e:35:ea:c5:c2:27:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=eb881e23-0596-4f01-86d3-ea2f19bbc25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:27:c7:47:78:3b:f6:c3:1f:99:23:88:aa:
                    28:12:c3:31:81:cd:51:63:be:78:b9:4f:c3:8f:ba:
                    17:c8:3e:7a:63:a6:7f:52:8d:f5:a5:d2:32:f6:35:
                    97:87:de:73:61:d9:9a:b9:35:28:53:a0:2b:76:24:
                    de:70:54:21:b1:29:ee:17:ec:fc:20:86:f8:9e:c3:
                    c4:d2:40:22:5c:47:71:7d:7e:2b:dd:e4:7f:fe:80:
                    8b:74:f6:79:c9:2d:d7:3b:5c:30:8d:d4:f8:d9:06:
                    3d:55:06:46:09:44:d0:1f:75:8e:b0:0b:25:5b:10:
                    6e:42:28:ff:4c:bd:80:bd:87:f2:a9:8d:20:ec:8e:
                    ae:82:c0:dd:82:74:6b:cf:b7:4f:96:51:37:25:e5:
                    a2:9a:53:b9:01:c2:46:f8:fb:c9:40:d2:3d:fc:e3:
                    7a:a5:95:91:08:83:f9:b0:4c:cf:f3:e4:e2:03:1a:
                    8a:72:7b:52:c6:27:a1:33:ed:48:9d:3a:31:3a:f8:
                    0e:62:34:d0:85:b4:53:f3:10:81:56:71:54:8e:3e:
                    bb:f8:84:86:86:61:f3:7e:a6:31:89:86:3e:fd:71:
                    77:b7:c3:63:a4:8f:97:07:74:7c:74:2b:a1:ad:21:
                    32:bd:5a:68:9e:57:68:dd:79:ff:09:95:ce:b7:8d:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:D8:8C:31:D3:9B:12:4E:09:E4:BA:A3:2B:59:7A:CC:3A:B7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:03:0f:4b:f8:92:55:f5:3a:e3:46:c5:29:18:f1:34:f9:
         5e:21:8c:ab:f4:d3:11:23:01:6b:07:e1:77:60:5e:75:3e:7e:
         07:da:9d:65:76:d4:b5:3f:82:4f:14:d0:6b:e1:91:68:92:8e:
         a1:30:d3:15:1c:bf:4c:a3:5e:8b:0b:82:3f:2c:a9:94:1c:42:
         12:52:35:e0:3e:21:e5:d9:41:39:0f:57:f7:7f:5c:6c:2f:81:
         5f:d4:9e:91:33:6d:0d:73:eb:ca:65:38:e8:1f:ed:ef:b5:91:
         9c:54:af:0e:bc:94:f6:7b:2e:47:41:d5:c5:66:c8:bd:7c:3d:
         e0:af:04:bc:14:2e:88:04:25:5c:54:d0:af:0d:85:2b:3a:06:
         e3:38:72:e7:c2:7a:17:16:65:85:00:ed:7f:3c:28:5f:17:b1:
         83:be:64:1a:92:05:2b:f2:ee:cb:00:60:7e:69:85:50:53:8f:
         ce:32:f5:ba:4e:b1:f1:44:9e:d1:a0:e3:41:49:35:0f:36:76:
         55:7b:c3:bf:a9:39:aa:34:c9:67:af:ea:57:e5:83:f1:fb:d3:
         5b:b7:af:2e:82:6f:3a:0a:84:98:c4:91:20:9f:b4:1f:b3:e2:
         64:69:51:44:05:70:61:cb:5a:2d:95:c6:b5:bd:fb:fd:a5:91:
         33:1e:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:11 2025 by rpki-client