Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa
File:                     c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa (raw, json)
Hash identifier:          6P3QrRystC5h6fNYJ2Eh4cCG7bS/7DDm1zTrSjENRxg=
Subject key identifier:   79:0E:16:A5:A3:1D:03:49:39:BC:C9:4F:39:AE:99:B9:8E:03:75:33
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849DF5A5E7BFA0794959650E114
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     3462
IP address blocks:        23.91.111.0/24 maxlen: 24
                          107.155.30.0/24 maxlen: 24
                          107.155.57.0/24 maxlen: 24
                          128.1.37.0/24 maxlen: 24
                          128.1.45.0/24 maxlen: 24
                          128.1.50.0/24 maxlen: 24
                          128.1.63.0/24 maxlen: 24
                          128.1.101.0/24 maxlen: 24
                          128.1.102.0/24 maxlen: 24
                          128.14.238.0/24 maxlen: 24
                          192.254.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5e:7b:fa:07:94:95:96:50:e1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=cb984b18-fe59-4036-ba49-358da7322fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:9b:6e:b1:10:3f:32:3a:cf:ed:e7:eb:71:
                    23:d0:dc:70:74:ed:62:55:b0:cb:25:70:d1:65:f3:
                    91:14:07:d6:9d:f2:77:8c:c6:82:ea:3f:3e:68:4d:
                    e2:8d:26:58:98:b4:44:37:51:c4:a2:ff:6e:35:a7:
                    54:cc:9d:d4:44:17:ae:13:2e:a5:80:9e:8f:39:1a:
                    28:31:2e:a2:89:09:44:53:37:a5:32:8d:e7:b1:49:
                    46:a3:bc:25:b8:ff:dd:38:d6:e8:05:8f:6c:cd:91:
                    85:5f:ba:a6:7b:bf:98:83:c7:74:3b:cc:df:fc:5c:
                    a7:aa:24:52:35:77:b2:d1:8c:cd:45:0f:3d:2e:ac:
                    92:b3:ab:b8:86:a9:f7:7b:55:d3:38:01:37:43:1a:
                    ac:6f:67:da:a2:1f:c9:da:a9:be:22:08:65:3e:18:
                    57:63:d4:40:d3:16:1d:ef:63:9b:43:02:aa:4c:16:
                    14:9f:d6:6a:35:b4:0b:71:0b:93:a9:7f:c6:d0:59:
                    4d:e2:97:c4:35:0f:24:dc:17:0b:96:4a:66:ee:b3:
                    9f:c0:21:37:3b:76:a1:a2:9b:ac:23:95:34:bc:32:
                    d2:a2:86:47:37:28:92:2b:c5:35:1e:a4:74:7f:d6:
                    de:43:e4:6e:8f:6b:1c:5d:c6:36:44:86:48:7a:01:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:16:A5:A3:1D:03:49:39:BC:C9:4F:39:AE:99:B9:8E:03:75:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c1e8cec1-1172-3640-b1d2-2e95ef1e508a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.111.0/24
                  107.155.30.0/24
                  107.155.57.0/24
                  128.1.37.0/24
                  128.1.45.0/24
                  128.1.50.0/24
                  128.1.63.0/24
                  128.1.101.0-128.1.102.255
                  128.14.238.0/24
                  192.254.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:06:3f:1e:71:38:e9:b4:57:47:b7:c2:da:9e:4d:e0:a2:
         9e:69:b0:ee:5c:60:b9:b2:23:6b:2e:b7:ab:94:77:bf:dd:fa:
         f3:65:bd:3d:65:96:5a:de:df:2f:2c:90:6f:a3:50:83:87:e7:
         30:20:a1:8d:e6:41:1c:22:29:2a:c3:33:88:99:83:86:00:34:
         fb:0d:3c:43:9a:dc:2c:a2:34:87:8b:84:69:4d:a3:cb:e3:c0:
         e5:22:19:89:6c:a2:0e:e4:c1:a3:38:85:04:5c:63:6f:4e:fe:
         87:47:13:58:66:48:11:13:0b:17:98:03:a1:3c:80:13:9f:26:
         aa:16:b1:f9:30:af:e8:7a:c5:b7:51:5a:74:35:53:4b:96:e4:
         7c:67:05:c7:89:ed:f3:8b:0c:4c:48:b0:4e:d0:27:f2:99:ee:
         2a:e0:88:e0:cf:f8:13:9b:83:63:41:3e:ec:de:71:af:6a:a5:
         72:41:d1:1c:1c:c8:4d:4b:c5:87:81:37:18:88:b2:6c:8d:77:
         8d:bf:5a:e4:c2:7d:9f:c8:c8:90:ba:e8:b7:39:aa:16:93:e1:
         48:41:93:ed:a1:59:de:91:d9:44:f7:dd:17:af:80:95:b3:ff:
         91:70:cd:28:38:f2:b4:bd:95:55:50:71:0b:a7:7d:0a:db:85:
         e4:00:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:29:38 2025 by rpki-client