Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
File:                     cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa (raw, json)
Hash identifier:          6q0oZZrvWSyGZ9FSTd4UhvvpVkV2k4Vy17pX9w2sLrE=
Subject key identifier:   80:6C:A4:7E:A7:DE:B4:E4:D8:5E:B3:65:1D:D4:20:B1:66:E9:19:27
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285849DB2A29609872432833A72480
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     36105
IP address blocks:        65.65.128.0/20 maxlen: 24
                          65.65.152.0/21 maxlen: 24
                          75.41.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:29:60:98:72:43:28:33:a7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=2d91bd29-2e12-4c66-8ad8-ee266ce31f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:7f:20:07:15:d7:cd:48:05:19:af:88:48:
                    81:26:62:fc:39:cc:96:13:ad:c3:ba:91:a6:f6:a0:
                    a3:6b:72:e6:32:85:1e:f2:32:24:50:a2:44:36:78:
                    03:69:e8:c3:64:63:28:7a:b6:3c:a0:a4:9b:d5:49:
                    a0:c3:1f:9a:35:e0:ab:4f:c1:e3:62:f9:32:eb:aa:
                    03:93:53:33:86:b4:e0:b1:66:57:79:cd:84:07:b5:
                    99:bb:5e:e5:cf:75:67:07:b8:98:84:d4:72:31:db:
                    08:0d:4c:94:92:44:3e:1a:bf:53:c9:26:eb:de:dc:
                    d4:0a:72:ab:00:d8:f8:1a:98:c6:4d:2d:dd:03:32:
                    17:f1:02:38:0a:87:57:39:da:75:c2:68:db:c5:44:
                    69:5b:37:55:03:4a:06:44:a1:7e:b9:43:e1:00:36:
                    18:0e:be:e6:bd:51:3b:cb:33:b2:64:a1:e8:a9:02:
                    8f:37:03:08:6a:13:5c:86:ac:e8:80:c1:55:d9:0d:
                    c8:3b:bb:f1:82:ae:cb:ee:ce:7f:d8:f6:6f:dd:2f:
                    c0:ec:1c:d3:62:ba:0c:bd:de:b0:a1:2f:38:9a:36:
                    20:90:52:e0:55:81:62:40:3a:3b:9d:f1:15:97:f1:
                    b1:e9:50:7f:e0:8a:b6:cf:6c:81:d4:1a:b3:f5:08:
                    5c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:A4:7E:A7:DE:B4:E4:D8:5E:B3:65:1D:D4:20:B1:66:E9:19:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.65.128.0/20
                  65.65.152.0/21
                  75.41.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:8b:fb:74:ae:2d:ed:da:55:00:35:e8:ff:f7:f6:5d:40:
         3f:74:ca:c0:fa:06:fe:da:7d:86:41:47:18:1c:6f:54:56:d9:
         57:0e:a8:ad:53:5c:28:cb:60:06:c0:27:7e:14:3d:98:19:29:
         bd:9f:b4:ad:ca:07:d6:0c:97:c5:a5:8f:c4:7b:ed:bb:d3:ca:
         a1:fc:ee:bd:13:8d:80:8b:a7:3d:2b:0a:0b:1b:53:48:36:a6:
         8f:da:cb:19:db:37:d6:47:f3:0f:fe:d2:cb:e6:aa:1c:14:66:
         8c:f2:df:d9:8d:67:99:18:c4:97:2a:ae:21:32:33:9b:18:d4:
         28:e2:d8:df:c9:4f:e9:a4:ff:d4:c2:c1:96:9c:b4:c6:0b:de:
         59:5e:3a:79:9b:81:b1:09:23:be:e7:82:81:02:e1:7c:4a:ed:
         8d:2f:19:dd:e1:be:9a:33:fd:91:ae:97:97:a8:a3:da:17:4a:
         69:7f:20:e5:09:da:ff:d4:0b:d1:66:fc:a3:ce:21:c8:9f:74:
         4b:2b:be:f3:c2:dc:3d:0e:d5:82:d5:0a:76:42:c0:61:07:7e:
         51:f6:eb:16:66:71:08:0c:73:e8:1b:8d:27:1e:24:d3:52:d4:
         8f:c6:3a:ad:7f:93:52:54:37:09:db:34:ec:ea:95:cf:ad:a1:
         14:a7:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:47 2025 by rpki-client