Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
File:                     c6086dd9-635c-3d69-b167-00ce58160e62.roa (raw, json)
Hash identifier:          20mL+iVBm2ZearQ2dWSZxF2UReFCyFCllAB3rMmoT1c=
Subject key identifier:   C3:A9:B3:7C:00:6F:BC:CA:D1:0A:62:00:66:FD:01:D6:D8:9C:07:B4
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285849DF5A64CFD0080964C2F2C800
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     1299
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:64:cf:d0:08:09:64:c2:f2:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=3275d920-9d96-4c7c-bc2d-e9f8e6977bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:f8:bf:85:6b:b9:72:fd:8c:a5:72:ad:c9:
                    4c:cd:3b:39:c6:66:c5:d5:2a:de:3d:33:37:a8:40:
                    14:c1:13:c4:32:97:e2:47:c8:51:b6:0f:e7:87:e4:
                    60:fd:4f:fc:e5:37:7f:13:94:ab:5f:e6:4c:ef:5f:
                    18:aa:a5:26:f3:a2:d9:f1:f4:be:8e:20:a4:0b:0c:
                    ac:a3:13:82:a2:33:3b:ff:2a:b3:51:21:b8:37:f5:
                    34:4d:de:12:a1:5d:a4:7b:5d:70:55:04:b9:69:f3:
                    7f:00:9c:f1:7c:73:fa:20:68:1a:65:bc:32:fb:c1:
                    ff:2c:39:44:1d:33:4f:db:ac:6a:7d:54:87:cd:db:
                    73:48:3e:15:d8:a5:17:ca:c5:d0:93:d6:da:14:a2:
                    b9:c1:81:9a:ec:54:2e:da:9d:c8:3e:2e:0d:2e:47:
                    fb:fd:38:aa:0e:ce:24:f8:98:6c:8a:3e:e3:c4:d8:
                    0c:24:9d:82:c3:9a:9a:33:f8:e3:bd:14:5b:df:cc:
                    e9:f4:0b:ee:38:81:48:67:d0:44:85:d4:d9:e7:96:
                    3b:55:f6:c4:b7:84:79:1a:1f:f1:10:38:9b:03:61:
                    f0:85:7a:92:9c:a2:9f:bd:e7:8d:9f:d3:dd:bb:94:
                    1b:2d:59:72:19:86:29:d7:26:47:16:fb:a6:eb:9d:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:B3:7C:00:6F:BC:CA:D1:0A:62:00:66:FD:01:D6:D8:9C:07:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c6086dd9-635c-3d69-b167-00ce58160e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:09:9d:24:29:18:51:f7:67:54:bb:22:7e:87:56:34:fe:2f:
         bc:f3:a4:b1:7a:bf:46:db:fa:24:9a:4f:22:ab:0d:97:4f:22:
         39:92:f4:27:40:27:0c:86:52:8a:35:78:7c:6b:77:a3:e6:d3:
         e0:28:fc:e6:fa:8b:17:e3:fa:cd:73:29:b6:0a:ce:4e:24:c1:
         7d:23:ed:1a:26:c4:93:d4:ca:1b:db:94:5c:fd:0a:7d:0e:18:
         0a:e0:9f:a6:c6:64:6f:4c:f7:76:45:32:b8:2d:5c:80:10:e1:
         52:82:c2:68:65:47:cc:14:57:ce:30:38:59:a8:4f:db:7c:8c:
         a8:c8:74:ad:e4:14:8e:89:90:82:44:71:13:15:84:1a:b1:cd:
         09:35:c7:6c:08:39:40:ea:6e:25:4a:bf:ea:33:a4:06:69:96:
         2c:09:22:e0:f9:d6:79:bb:e2:7c:63:c7:e6:b3:82:0d:48:9d:
         65:36:18:b9:d5:5b:8e:19:6d:51:ce:ab:84:83:51:c2:19:7b:
         4d:58:d3:ff:df:da:06:58:36:6e:f2:a2:33:d2:27:f8:dd:f5:
         84:1e:8b:8a:d2:0b:f5:23:8b:56:f7:3c:16:16:82:21:23:a1:
         6c:e6:77:72:7b:06:2e:d4:7f:1b:6a:9a:4b:26:dc:93:87:85:
         67:3d:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:10:45 2025 by rpki-client