Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa
File:                     f86b6f27-de96-3aed-b000-0f261ccc01d7.roa (raw, json)
Hash identifier:          ZmZ+aCE/DU1j2aarIuYMU+Msz7n1a/Ds6lVCUgE2CRo=
Subject key identifier:   21:22:58:3C:97:C6:4F:C3:65:CF:3F:7E:70:AC:78:CE:05:3E:4A:EC
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584A2E901532F676D494909472C0
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa
Signing time:             Mon 19 May 2025 16:55:29 +0000
ROA not before:           Mon 19 May 2025 16:55:29 +0000
ROA not after:            Sun 17 Aug 2025 16:55:29 +0000
asID:                     13415
IP address blocks:        65.181.48.0/20 maxlen: 20
                          66.7.112.0/20 maxlen: 20
                          66.7.116.0/24 maxlen: 24
                          66.60.96.0/19 maxlen: 19
                          66.85.16.0/22 maxlen: 22
                          66.219.224.0/23 maxlen: 23
                          66.219.248.0/23 maxlen: 23
                          67.206.160.0/20 maxlen: 21
                          67.214.224.0/19 maxlen: 19
                          68.66.160.0/20 maxlen: 20
                          69.27.0.0/19 maxlen: 19
                          69.169.128.0/18 maxlen: 18
                          76.8.192.0/19 maxlen: 19
                          97.75.160.0/19 maxlen: 19
                          104.153.124.0/22 maxlen: 22
                          104.244.84.0/22 maxlen: 22
                          162.219.20.0/22 maxlen: 22
                          162.223.32.0/21 maxlen: 21
                          162.247.176.0/22 maxlen: 22
                          172.83.4.0/22 maxlen: 22
                          192.34.248.0/21 maxlen: 21
                          192.92.200.0/21 maxlen: 21
                          199.30.68.0/22 maxlen: 22
                          199.96.116.0/22 maxlen: 22
                          199.115.244.0/22 maxlen: 22
                          199.127.120.0/21 maxlen: 21
                          204.15.84.0/22 maxlen: 22
                          205.204.32.0/20 maxlen: 20
                          208.72.160.0/21 maxlen: 21
                          216.10.236.0/22 maxlen: 22
                          2607:f898::/32 maxlen: 32
                          2607:f898:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:90:15:32:f6:76:d4:94:90:94:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: May 19 16:55:29 2025 GMT
            Not After : Aug 17 16:55:29 2025 GMT
        Subject: CN=f0c46411-1606-4642-95bd-b005882b7599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:ef:fc:c3:fa:8e:33:7e:cd:bc:a6:2b:d7:
                    d1:40:b0:42:0b:45:67:68:87:38:14:58:40:a2:f2:
                    7f:9e:8d:af:54:8d:08:d3:b8:70:3e:16:dc:cc:c1:
                    33:1f:84:d6:9e:c3:2f:40:9f:c9:c9:21:a6:c0:23:
                    7d:2b:3d:f2:0c:25:96:4f:93:e0:55:7d:0e:90:cb:
                    11:77:54:7f:fe:f9:27:a3:8d:87:4c:cb:40:63:e7:
                    f2:98:c1:75:50:f5:43:50:4a:b8:d5:7e:3f:bc:31:
                    a1:6a:12:79:43:d4:a3:c7:36:25:a1:f3:09:13:91:
                    f8:5d:75:b9:dc:c8:22:93:b6:01:c3:ea:9d:5b:22:
                    bb:6c:1e:6d:77:27:f0:d2:76:5a:e7:53:4f:63:44:
                    ed:34:3c:82:25:b9:4a:23:d6:87:48:b6:d4:36:e8:
                    e2:d4:bf:62:1a:dc:75:0d:18:22:0b:cc:37:07:bd:
                    0e:bd:08:9d:f6:55:f8:ac:3a:bd:ef:19:16:38:ea:
                    a6:f5:ff:d7:8f:40:26:2e:20:9d:a4:ec:f5:f7:10:
                    49:bb:c6:f3:c8:e8:e6:f0:e8:69:70:cc:f3:1e:a3:
                    f2:89:dc:d3:00:22:4c:8e:12:13:b3:de:3f:05:69:
                    44:2c:22:56:73:d2:18:c0:11:64:87:d0:80:8a:92:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:58:3C:97:C6:4F:C3:65:CF:3F:7E:70:AC:78:CE:05:3E:4A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.48.0/20
                  66.7.112.0/20
                  66.60.96.0/19
                  66.85.16.0/22
                  66.219.224.0/23
                  66.219.248.0/23
                  67.206.160.0/20
                  67.214.224.0/19
                  68.66.160.0/20
                  69.27.0.0/19
                  69.169.128.0/18
                  76.8.192.0/19
                  97.75.160.0/19
                  104.153.124.0/22
                  104.244.84.0/22
                  162.219.20.0/22
                  162.223.32.0/21
                  162.247.176.0/22
                  172.83.4.0/22
                  192.34.248.0/21
                  192.92.200.0/21
                  199.30.68.0/22
                  199.96.116.0/22
                  199.115.244.0/22
                  199.127.120.0/21
                  204.15.84.0/22
                  205.204.32.0/20
                  208.72.160.0/21
                  216.10.236.0/22
                IPv6:
                  2607:f898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:34:de:e6:0c:81:51:23:d0:65:46:34:5a:a7:3c:7d:de:
         40:57:ef:e8:78:04:2b:ca:68:47:83:5d:bd:41:90:a4:0e:0a:
         61:f4:e0:f4:5a:a1:2d:ec:c5:58:89:b5:03:8a:d0:55:3d:e9:
         f5:69:41:9a:f8:d0:39:4f:54:50:50:a3:e0:e6:4f:0c:89:a8:
         28:d2:0e:df:1a:3b:8e:41:d2:ec:13:94:fc:06:05:af:24:8c:
         1b:67:df:a6:64:7c:3e:db:02:66:a4:0c:5e:f1:96:d6:a1:0e:
         ed:0e:cb:6f:66:b7:17:05:fb:3c:92:fb:65:90:67:70:55:68:
         df:da:e9:61:1b:96:a4:7d:ad:0e:b4:be:2d:ca:27:2b:90:f3:
         d5:07:f4:9d:b5:02:69:73:a3:42:5b:66:a8:58:16:61:d6:af:
         da:c0:ea:c0:50:6e:93:f1:02:fa:0d:9e:56:a2:47:f4:3b:54:
         98:42:07:a5:bf:69:6e:a5:dc:9e:31:aa:11:76:ad:e3:45:a3:
         86:bb:6d:a8:5c:b9:6b:ce:2d:8e:27:4d:89:8b:f5:5d:2e:81:
         fe:32:75:80:bb:0d:ee:e5:db:f4:dd:cc:5c:77:ed:c6:5c:6e:
         d2:7c:77:10:f8:b0:9d:f4:98:df:32:7a:cb:ce:2f:cc:af:31:
         23:6c:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:39:11 2025 by rpki-client