Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
File:                     f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa (raw, json)
Hash identifier:          3A457zNomGJOVdrSPmwhffctf9/aWAskEOwXmQC2Beg=
Subject key identifier:   7C:A7:25:28:7A:56:47:AC:3D:91:C0:56:F5:40:A6:D5:5A:CF:1B:A2
Certificate issuer:       /CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
Certificate serial:       010D0C9F4328584A2ABADE362533DD3F03356D10
Authority key identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     22667
IP address blocks:        67.59.192.0/20 maxlen: 24
                          69.39.240.0/20 maxlen: 24
                          173.213.192.0/20 maxlen: 24
                          173.249.96.0/19 maxlen: 24
                          192.40.208.0/21 maxlen: 24
                          206.176.224.0/19 maxlen: 24
                          2604:8f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:de:36:25:33:dd:3f:03:35:6d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=62d58df0-8999-44d8-afe6-0d199796fa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:62:ef:73:69:e8:9f:03:5c:cc:a5:a5:d1:
                    f8:36:05:0e:81:3f:ec:dc:bd:5f:4b:2c:09:27:38:
                    64:09:52:21:37:0d:9e:7e:19:eb:8c:50:36:44:0c:
                    ae:01:cc:92:b1:ef:32:08:b1:7d:2f:d9:ef:ad:7c:
                    49:e8:50:93:1d:59:4c:b0:d3:79:94:9d:a6:f2:fe:
                    1a:95:5f:b4:a5:94:a3:d7:65:8c:05:b9:69:74:09:
                    a0:ef:22:26:77:24:c0:ec:3e:ce:44:72:57:e5:37:
                    01:55:2b:fd:ae:97:fd:69:3e:d6:c4:a7:3d:61:75:
                    cc:db:76:ac:38:42:0c:d6:96:dd:43:2f:ac:7e:a5:
                    96:66:49:fa:c2:bc:0f:58:8e:45:54:8f:19:77:f1:
                    cc:1d:7a:b5:43:21:78:e5:e0:9c:80:ee:e4:6e:b0:
                    56:69:35:1a:9e:3b:55:41:44:51:32:c0:61:d7:8c:
                    25:1d:22:4a:b0:0d:90:a0:d8:b1:2d:e9:8d:63:bb:
                    9b:16:00:e6:ea:24:6f:59:5d:7b:19:5a:be:d2:b1:
                    7b:5d:fc:b5:7c:42:b1:b2:cf:55:8e:f7:ff:60:78:
                    35:e0:b3:25:23:5d:bf:cb:2a:79:f0:fb:d5:7f:03:
                    40:07:7d:d2:ce:3b:ca:df:4e:16:3f:36:67:fb:11:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:25:28:7A:56:47:AC:3D:91:C0:56:F5:40:A6:D5:5A:CF:1B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.192.0/20
                  69.39.240.0/20
                  173.213.192.0/20
                  173.249.96.0/19
                  192.40.208.0/21
                  206.176.224.0/19
                IPv6:
                  2604:8f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:db:f3:72:44:12:97:a0:8f:2d:90:be:34:ee:84:00:5e:18:
         3c:90:92:eb:a8:43:17:ac:68:4a:9c:0b:c0:4a:48:0f:67:f5:
         85:1a:df:37:49:2e:48:54:39:15:2b:55:83:a0:fb:76:bf:fc:
         30:82:f1:47:0b:ce:36:af:c2:0d:9e:18:51:48:7c:d4:11:55:
         11:b5:73:b8:65:aa:4e:6a:d2:06:0f:ad:08:01:91:fe:5c:c2:
         26:54:17:be:be:08:ce:4a:47:e8:de:99:95:71:15:dd:ee:3b:
         f7:6f:7f:cd:82:2a:a2:9f:3f:e6:bd:ab:23:35:d1:54:6f:d1:
         10:d5:1c:03:69:42:13:96:5e:e9:74:fb:91:da:24:3c:d3:53:
         2d:c5:2b:b5:c5:b0:ab:47:54:ea:4f:d7:73:ae:38:35:05:e6:
         a7:c2:d8:bb:61:4a:92:3d:91:3e:db:45:4c:50:0b:ba:39:45:
         73:75:4d:92:19:dc:1a:8f:b3:23:3f:d1:33:ea:dd:21:80:f6:
         45:f1:f9:6a:f9:0d:04:f6:74:1f:f3:da:62:c5:ff:e8:44:d1:
         22:d5:ba:4c:ad:8a:89:b1:16:4f:2e:d4:03:8c:61:43:f7:74:
         b3:0d:93:96:23:d0:51:8a:45:77:08:29:5c:77:58:e8:1b:57:
         9d:cf:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:00:54 2025 by rpki-client