Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
File:                     cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa (raw, json)
Hash identifier:          TgXMeBpO1n8fl1NOpfhY4FdTI4bR87Ik4SMX6UVu4IE=
Subject key identifier:   72:47:2B:07:B7:C0:94:87:EF:5E:6B:0D:99:8F:1D:53:5F:1B:EA:79
Certificate issuer:       /CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
Certificate serial:       010D0C9F4328584A14657D46F825DFC456EB3390
Authority key identifier: 50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     62759
IP address blocks:        74.119.124.0/22 maxlen: 22
                          162.245.176.0/21 maxlen: 21
                          163.123.240.0/22 maxlen: 22
                          199.255.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7d:46:f8:25:df:c4:56:eb:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=95ae7ea9-4500-4b31-80d5-1577003fb2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:cc:53:ba:54:7c:73:70:e3:6c:2a:1e:e2:
                    bf:4d:89:b6:84:de:cc:8d:a8:46:c6:01:a9:f0:38:
                    05:d1:f3:af:e7:88:7e:30:b1:dd:2f:d7:5e:1f:73:
                    87:a3:1d:e1:ac:4f:6d:16:7e:18:17:d5:ef:c1:5a:
                    08:78:ac:10:6d:35:16:6e:d8:c9:69:8b:7e:92:ce:
                    96:0b:90:8b:32:8a:75:1c:6a:5b:22:3c:69:08:6d:
                    90:69:16:0a:70:1d:13:0a:0b:81:d7:c5:78:fc:50:
                    a3:f5:45:89:8c:4f:9e:4c:df:0a:cd:7e:fe:0e:54:
                    f3:63:d0:2f:3d:92:a7:34:47:a6:5f:80:fa:0a:8b:
                    2e:b2:8f:50:88:67:87:22:b6:07:ed:85:44:e5:85:
                    fa:7f:a2:21:06:cb:28:e9:57:a4:f4:fb:ba:2b:f4:
                    d9:c4:a4:ec:65:86:6c:0a:92:28:01:f0:b5:75:98:
                    78:4e:d3:f3:84:02:dc:0c:a0:be:aa:08:2f:dc:cf:
                    b7:91:01:0b:93:37:11:6b:9c:27:56:a7:db:bb:07:
                    e0:fd:50:ee:05:6b:64:1a:08:2b:d1:49:7f:21:61:
                    2a:6b:4e:21:fd:d2:40:39:f2:44:bf:c7:6b:8d:d0:
                    48:7b:b4:a3:7c:9e:57:8e:7d:48:e1:a2:c3:0d:1e:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:2B:07:B7:C0:94:87:EF:5E:6B:0D:99:8F:1D:53:5F:1B:EA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl

            X509v3 Authority Key Identifier:
                keyid:50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.124.0/22
                  162.245.176.0/21
                  163.123.240.0/22
                  199.255.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:be:14:7a:2c:25:1e:30:f3:1d:00:a1:e1:bc:97:08:91:87:
         19:ab:e7:8d:ab:d8:9b:4b:d5:eb:8d:d4:a9:99:70:35:9e:98:
         01:02:db:43:ef:01:8f:31:2b:8a:65:5f:8c:33:60:f7:1e:9f:
         50:3c:97:0e:f2:56:87:0a:f4:29:f7:89:4a:e5:3d:ab:c8:19:
         2a:74:1c:6c:56:0a:64:75:47:e3:9c:a9:6e:62:93:c5:b5:2a:
         f1:5d:2e:ea:bb:85:a2:d3:50:e5:20:b5:84:cd:6e:d8:13:68:
         7d:c4:a7:d8:db:9a:b5:b9:48:f0:d6:0e:e4:9c:e1:e4:d2:67:
         a6:69:a1:6e:45:7e:77:40:b1:18:2d:6f:bc:86:a4:80:8c:44:
         af:d4:6f:00:54:fd:8f:c2:51:5d:7d:4d:12:bc:26:49:82:0d:
         3b:de:20:ec:2c:95:75:45:60:6f:1f:15:6a:e2:e2:d8:3d:7d:
         c7:70:04:fd:ee:1a:e0:0d:cf:73:a1:10:31:f7:58:d2:d8:5a:
         63:c3:ce:34:23:60:4e:52:7e:51:92:33:b0:73:ea:bd:ca:2c:
         9a:32:76:0f:b9:de:92:4f:11:8a:1a:39:61:5d:34:e5:c6:68:
         4b:40:15:62:fa:84:98:e0:24:91:1d:cd:82:42:b6:96:05:d6:
         02:88:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:48:22 2025 by rpki-client