Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File:                     5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier:          5mdGi4xxVUe9nH//5RNAqIUV3ACAePKZZMJS/FtKBeI=
Subject key identifier:   88:8F:AE:08:08:EB:2F:A4:6A:CD:8F:BE:12:AF:D7:50:0E:67:81:48
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AB650D5DA9C51A494A137B780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     21859
IP address blocks:        23.91.96.0/20 maxlen: 24
                          23.236.96.0/20 maxlen: 24
                          23.236.112.0/20 maxlen: 24
                          23.248.160.0/19 maxlen: 24
                          23.251.96.0/19 maxlen: 24
                          45.40.48.0/20 maxlen: 24
                          45.43.32.0/19 maxlen: 24
                          45.43.59.0/24 maxlen: 24
                          65.255.32.0/20 maxlen: 24
                          69.28.48.0/20 maxlen: 24
                          104.218.160.0/21 maxlen: 24
                          104.254.112.0/21 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.113.0/24 maxlen: 24
                          107.151.128.0/18 maxlen: 24
                          107.155.0.0/18 maxlen: 24
                          128.1.0.0/16 maxlen: 24
                          128.1.42.0/24 maxlen: 24
                          128.14.0.0/16 maxlen: 24
                          162.221.4.0/22 maxlen: 24
                          162.221.192.0/21 maxlen: 24
                          169.197.96.0/19 maxlen: 24
                          172.81.120.0/21 maxlen: 24
                          172.96.112.0/20 maxlen: 24
                          192.254.80.0/20 maxlen: 24
                          199.91.72.0/22 maxlen: 24
                          199.190.44.0/22 maxlen: 24
                          199.245.56.0/21 maxlen: 24
                          208.81.200.0/22 maxlen: 24
                          209.177.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d5:da:9c:51:a4:94:a1:37:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=ea024ebe-25cc-45a8-94fe-90bd361b7ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:00:aa:e5:c4:bc:cc:6f:fa:bc:0f:e1:57:
                    e3:ef:06:f1:cf:e7:8d:eb:fd:fb:63:f9:63:eb:84:
                    0a:aa:b9:8b:c3:d3:e2:0a:ab:1c:7d:a7:76:a0:36:
                    8b:fd:78:cd:3f:ba:c2:97:ea:d3:e0:2b:75:8d:1a:
                    91:2c:d0:d0:54:6a:18:98:46:06:2b:a6:44:97:9f:
                    11:9c:4a:37:37:b1:c0:8b:01:63:55:53:fc:bd:e0:
                    7c:03:a3:bc:06:91:74:35:a3:99:f5:13:fb:f8:a4:
                    34:99:4a:04:24:3f:fd:86:12:24:9d:de:37:31:d4:
                    fe:74:b2:42:65:96:05:c2:da:31:27:2c:a6:42:03:
                    6a:e4:bd:3b:4b:6d:2c:1e:21:9c:00:f7:cb:26:60:
                    94:e5:cf:93:82:8d:0a:22:d4:ae:79:71:f3:d0:29:
                    f0:71:bf:8e:0c:cd:0e:5c:7e:98:c5:f4:fb:a1:c6:
                    6d:6c:84:9c:44:70:43:15:77:18:21:fa:c8:1c:f0:
                    08:10:22:63:0c:6d:e5:b0:ef:94:d9:5f:8a:81:96:
                    53:f6:ed:6e:a1:90:db:c5:97:46:cf:15:d3:71:e5:
                    f6:62:c6:06:fd:59:c7:92:99:6a:51:b2:86:03:0e:
                    c1:e4:e1:86:7f:0e:f9:1e:3e:f0:66:fc:a0:60:dd:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:AE:08:08:EB:2F:A4:6A:CD:8F:BE:12:AF:D7:50:0E:67:81:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0/20
                  23.236.96.0/19
                  23.248.160.0/19
                  23.251.96.0/19
                  45.40.48.0/20
                  45.43.32.0/19
                  65.255.32.0/20
                  69.28.48.0/20
                  104.218.160.0/21
                  104.254.112.0/21
                  107.150.96.0/19
                  107.151.128.0/18
                  107.155.0.0/18
                  128.1.0.0/16
                  128.14.0.0/16
                  162.221.4.0/22
                  162.221.192.0/21
                  169.197.96.0/19
                  172.81.120.0/21
                  172.96.112.0/20
                  192.254.80.0/20
                  199.91.72.0/22
                  199.190.44.0/22
                  199.245.56.0/21
                  208.81.200.0/22
                  209.177.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:43:21:12:b9:e9:8f:55:1d:74:69:a0:ab:04:f8:1b:9a:
         24:b2:54:19:0d:c1:5c:17:f1:49:44:a3:b0:0d:87:4c:16:89:
         a8:d3:cc:fd:6c:0b:3f:1e:14:88:46:7e:40:01:1c:29:ae:5e:
         03:8d:f8:9b:ca:fc:33:06:9c:2a:f6:0a:95:6b:d2:2d:37:f9:
         2d:e5:47:70:eb:bb:96:75:01:c0:57:b3:fe:76:20:34:f7:9c:
         36:ad:8d:d8:b3:7b:2b:b1:5d:f5:fa:98:87:e9:c7:4a:88:43:
         4d:ea:1f:a2:c1:25:03:5a:c6:ed:be:9d:b3:58:77:c0:cd:f9:
         b3:fe:80:22:60:44:48:95:c8:71:92:9c:36:e2:cf:52:a0:27:
         fe:a5:a6:83:e9:55:f7:5e:46:ad:4c:13:c1:b8:21:65:c5:ca:
         bf:eb:86:eb:9d:b0:58:22:15:e5:b4:81:9a:5d:bf:ad:f3:17:
         0c:88:64:a2:a3:66:50:47:f3:c8:f7:87:da:69:f1:09:c0:b4:
         77:67:0e:76:32:94:ff:02:ea:88:6a:73:0c:ff:a8:88:61:76:
         0a:db:7f:e7:ed:17:66:89:f9:5b:71:99:a4:7a:d8:03:c5:0c:
         50:39:0b:55:9d:f2:35:da:2e:85:ef:5b:b2:51:bc:bc:57:d5:
         54:f6:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:04 2025 by rpki-client