Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa
File:                     4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa (raw, json)
Hash identifier:          SnJdcyyspkvzvPNsin69gX93McJ7vO3Q0ertg6v1oic=
Subject key identifier:   E2:E1:58:03:7D:64:65:47:43:59:EF:71:97:6F:D8:B4:52:BB:17:24
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F43285849F01A82653B81B0341EAABF80
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        205.156.64.0/21 maxlen: 21
                          205.156.68.0/22 maxlen: 22
                          205.156.72.0/21 maxlen: 21
                          205.156.80.0/22 maxlen: 22
                          205.156.84.0/24 maxlen: 24
                          205.156.85.0/24 maxlen: 24
                          205.156.86.0/24 maxlen: 24
                          205.156.87.0/24 maxlen: 24
                          205.156.88.0/21 maxlen: 21
                          205.156.96.0/22 maxlen: 22
                          205.156.100.0/23 maxlen: 23
                          205.156.104.0/21 maxlen: 21
                          205.156.108.0/22 maxlen: 22
                          205.156.112.0/22 maxlen: 22
                          205.156.117.0/24 maxlen: 24
                          205.156.128.0/22 maxlen: 22
                          205.156.132.0/23 maxlen: 23
                          205.156.134.0/24 maxlen: 24
                          205.156.135.0/24 maxlen: 24
                          205.156.136.0/21 maxlen: 21
                          205.156.144.0/21 maxlen: 21
                          205.156.152.0/22 maxlen: 22
                          205.156.160.0/23 maxlen: 23
                          205.156.164.0/24 maxlen: 24
                          205.156.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:82:65:3b:81:b0:34:1e:aa:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=d64b8061-3208-40df-b395-bbddbf219221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:d8:bf:a6:9b:fb:f9:0e:4e:9b:99:f3:0a:
                    ea:2d:39:9b:0a:9d:a9:38:62:f5:3f:ef:a7:33:13:
                    e1:43:56:93:d4:6b:74:87:28:b1:d9:70:da:9f:a6:
                    42:91:98:8a:18:c7:0a:49:4f:62:0d:d5:cc:32:53:
                    ae:3c:cf:4f:ad:e1:65:29:0f:b0:42:4a:5c:bd:22:
                    a5:b1:ea:0f:49:9f:63:e5:b1:58:62:ae:15:93:84:
                    77:72:67:ea:02:9e:e4:b9:82:81:e5:39:b6:cb:56:
                    a9:c4:e0:f3:ff:37:3e:9c:6d:9d:5c:b8:35:8b:db:
                    76:03:81:6d:12:ce:74:81:0c:be:29:aa:9f:19:45:
                    f2:90:ce:f3:7f:8c:5e:b2:55:7d:d9:06:2d:e4:bf:
                    86:e9:b2:4d:ad:89:f6:ee:95:74:18:a9:bb:7a:34:
                    13:7f:43:75:43:f7:5e:a9:45:29:95:08:01:6f:b4:
                    8b:9b:10:38:8d:30:e6:a4:1c:16:63:4a:1f:cc:b7:
                    87:cd:3d:45:c7:8f:0f:1b:1e:08:ec:cc:1d:49:94:
                    46:85:36:5a:eb:e2:89:ce:71:cb:58:a3:2c:5a:65:
                    cc:87:27:46:9a:50:5b:a3:e3:3e:74:5a:b3:57:ba:
                    a8:25:d1:b4:1e:69:5a:b4:3f:7f:07:1f:36:00:65:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:58:03:7D:64:65:47:43:59:EF:71:97:6F:D8:B4:52:BB:17:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/4686f9ed-33dc-3c91-aed1-6ce959e1ccef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.64.0-205.156.101.255
                  205.156.104.0-205.156.115.255
                  205.156.117.0/24
                  205.156.128.0-205.156.155.255
                  205.156.160.0/23
                  205.156.164.0/24
                  205.156.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:15:e3:b0:48:81:21:b3:0e:c5:b3:c6:f6:ca:ff:69:8e:
         6e:45:ec:1c:75:b6:4b:cc:e6:e7:3f:2d:61:91:b2:cb:81:90:
         23:23:6f:ee:5a:ff:a7:4f:4a:f8:38:d6:f0:03:ae:35:f1:25:
         a5:e4:31:e3:60:54:31:55:ff:ce:47:d1:ea:e9:d7:49:fd:91:
         aa:bf:8f:43:01:33:92:b8:de:56:11:e1:ff:23:a8:68:23:e0:
         78:ea:c6:50:55:b3:9a:36:31:c6:73:e6:6a:1d:63:75:03:51:
         37:dc:d1:0d:bc:bf:8b:ad:fe:42:28:06:15:21:2a:48:47:a0:
         c5:2a:af:1b:ee:dc:47:17:49:d0:8a:15:94:9c:60:32:85:c7:
         c0:6f:7c:89:a5:db:a8:c7:5f:49:24:3a:fa:2f:9c:d6:f4:71:
         f5:81:83:86:ae:ed:bf:1c:a9:e6:87:8d:4f:0a:10:f8:4c:fc:
         73:4d:c0:d4:89:95:e6:43:c9:34:68:fe:06:4c:7f:c4:ac:bf:
         a0:b2:ed:7f:bb:c1:dd:79:d1:8a:35:4b:24:36:6c:38:3e:34:
         32:5b:79:a5:e8:1c:93:e3:b8:34:80:38:15:70:8f:7e:7e:1a:
         7d:23:f4:cd:70:aa:1a:42:ad:89:25:54:c1:9b:97:41:ba:26:
         9d:fa:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:00:03 2025 by rpki-client