Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          ClZFEBR4myJoO2Sbm1dXAy5mpEyOPAsPHMafRHnwM9A=
Subject key identifier:   70:49:6A:36:F9:31:F3:83:94:66:E3:F0:51:AE:8B:18:61:B4:8F:74
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584AB91B82C162D15236521EFE24
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:82:c1:62:d1:52:36:52:1e:fe:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=26ff126b-5fea-4914-bf12-a2dba75878f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:92:55:71:9f:38:90:75:6c:1f:b8:ab:14:
                    1d:57:d5:1a:64:7d:ba:1d:0d:f6:eb:4f:d6:32:f1:
                    79:8e:c0:a8:73:8b:d2:b1:ae:a0:31:2c:e8:81:5a:
                    0f:64:95:49:16:b1:4b:d5:1c:d0:e3:92:9b:80:d9:
                    94:43:4f:6b:b9:fe:08:d5:1d:fc:86:6a:99:3c:dc:
                    5a:55:0f:3b:be:08:31:d3:6b:2e:9d:1a:0d:38:2f:
                    b9:8e:f0:d4:dc:af:3c:42:10:b9:f3:9f:23:46:f9:
                    d8:37:38:2b:29:a6:c9:2f:03:bf:6b:06:47:86:62:
                    1c:bc:6b:76:05:73:b1:f7:ac:20:c3:fb:cd:04:b7:
                    ce:78:31:43:62:87:f1:20:b2:ff:e9:ce:14:08:ea:
                    82:69:93:49:2f:88:5c:09:de:cd:66:ed:a3:39:c2:
                    ba:a4:86:ac:dd:5a:de:18:e8:2f:d5:f4:78:47:ec:
                    8b:47:54:05:79:f1:99:99:dc:f4:f0:85:26:36:5b:
                    75:5f:d6:ba:24:b6:ac:7d:90:fd:ee:32:75:12:0e:
                    f0:a6:d1:da:06:cb:dd:15:83:f1:f7:48:b7:c0:99:
                    45:5e:5b:f1:e4:26:9a:3d:e7:cd:0b:a8:c0:e5:6a:
                    b4:68:dd:a8:54:14:7c:4d:fd:c1:34:c1:68:4d:d4:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:6A:36:F9:31:F3:83:94:66:E3:F0:51:AE:8B:18:61:B4:8F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:0f:2d:42:05:20:41:d9:69:cd:7a:45:22:60:be:60:e0:
         4c:cd:22:9f:ea:67:7c:23:1a:2e:b9:2f:28:2f:2c:b4:ef:82:
         1f:90:95:7b:5e:21:81:d4:f5:39:f3:ba:1d:81:f5:67:0f:f7:
         ba:8f:0a:3c:13:83:46:ba:c8:a4:b5:56:ac:5d:23:57:f5:98:
         9c:06:be:d0:50:c9:d1:7f:17:e4:a5:e2:f1:13:ff:96:4f:97:
         d2:b4:ef:39:b7:cf:86:ce:85:72:59:c6:58:61:61:8c:ce:ff:
         e1:15:be:b4:6c:43:65:31:a2:07:72:a3:40:41:37:8f:a9:c4:
         99:3d:32:a1:b2:45:b8:13:8e:99:3a:99:66:b9:6f:d8:45:c4:
         51:ab:8a:f4:01:e0:2a:55:07:6c:1e:00:95:96:9f:69:43:9a:
         a5:fc:3e:da:a2:40:b7:52:0f:fb:d9:29:39:aa:88:ee:6d:a7:
         03:32:27:2a:e2:12:04:dc:55:bf:78:be:25:c9:59:1f:73:fe:
         f6:9c:4b:d5:c9:57:22:69:a9:01:b4:2f:69:87:96:39:55:98:
         71:3f:2c:2a:5c:33:1f:f0:bc:41:cb:35:58:46:10:2f:db:c4:
         8d:44:45:79:4c:7d:47:d5:d0:91:ff:df:c2:b4:87:6d:9b:0a:
         86:24:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:37 2025 by rpki-client