Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
File:                     ec532543-9dd6-3bcf-bdea-82dd95098083.roa (raw, json)
Hash identifier:          ho5LkT1j36BX4euYxuA5k8s6IzvjulO2ac0unrYi3c0=
Subject key identifier:   3F:A3:21:EB:4F:6B:56:95:22:68:82:13:96:97:4E:FE:4D:D4:FB:74
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285849D85F7F6211EA15D213CEFF80
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     46375
IP address blocks:        23.93.0.0/16 maxlen: 24
                          50.0.0.0/15 maxlen: 24
                          64.142.0.0/17 maxlen: 24
                          69.12.128.0/17 maxlen: 24
                          70.36.128.0/17 maxlen: 24
                          75.101.0.0/17 maxlen: 24
                          76.191.128.0/17 maxlen: 24
                          107.156.0.0/15 maxlen: 24
                          108.169.0.0/17 maxlen: 24
                          135.180.0.0/16 maxlen: 24
                          142.254.0.0/17 maxlen: 24
                          157.131.0.0/16 maxlen: 24
                          173.228.0.0/17 maxlen: 24
                          184.23.0.0/16 maxlen: 24
                          192.184.128.0/17 maxlen: 24
                          198.27.128.0/17 maxlen: 24
                          199.245.68.0/24 maxlen: 24
                          208.106.0.0/17 maxlen: 24
                          209.148.96.0/19 maxlen: 24
                          209.204.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:7f:62:11:ea:15:d2:13:ce:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ca91a449-dffe-4d7b-9252-79bc4441d250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:44:5f:85:2b:5a:3a:cf:f9:5c:83:53:d2:
                    54:52:e6:dd:a1:bd:4c:55:c0:fe:51:c7:55:a9:b4:
                    d9:54:fb:a5:97:a9:e9:a2:84:73:79:26:8b:f8:ab:
                    bd:3d:7d:b2:73:02:c6:65:45:4a:73:7f:66:c5:ae:
                    11:d7:a6:33:77:3d:49:4d:fe:f1:25:ff:0d:21:34:
                    33:19:58:1f:dd:1c:29:6a:6b:29:87:45:6c:63:92:
                    34:db:aa:1c:8c:72:75:5e:38:78:f9:77:a9:84:64:
                    1a:d2:3f:56:dc:92:b2:4e:87:ac:95:78:6a:2c:93:
                    93:a8:fa:e2:ac:3f:21:68:7b:c9:5f:5b:d0:43:08:
                    15:ba:eb:f7:69:a3:15:fe:6f:82:ee:40:01:27:cb:
                    c8:80:0a:a6:f6:21:3c:30:47:3d:a1:10:3d:18:d6:
                    0e:1c:47:26:06:ea:71:10:ac:c8:a4:ab:e5:c6:f8:
                    c3:d3:f1:27:80:ec:f5:cb:d2:d9:55:7d:70:6d:ba:
                    e1:f3:37:ed:9a:23:4a:f2:38:02:19:0a:67:78:74:
                    09:0a:b7:3b:d9:77:44:40:a0:19:cf:05:49:ac:8b:
                    e8:36:d4:cc:6a:fb:ce:29:dd:6a:97:09:6a:2e:21:
                    40:43:7e:4e:a1:6d:ed:1a:54:b3:fa:42:e5:8f:46:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A3:21:EB:4F:6B:56:95:22:68:82:13:96:97:4E:FE:4D:D4:FB:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/ec532543-9dd6-3bcf-bdea-82dd95098083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.93.0.0/16
                  50.0.0.0/15
                  64.142.0.0/17
                  69.12.128.0/17
                  70.36.128.0/17
                  75.101.0.0/17
                  76.191.128.0/17
                  107.156.0.0/15
                  108.169.0.0/17
                  135.180.0.0/16
                  142.254.0.0/17
                  157.131.0.0/16
                  173.228.0.0/17
                  184.23.0.0/16
                  192.184.128.0/17
                  198.27.128.0/17
                  199.245.68.0/24
                  208.106.0.0/17
                  209.148.96.0/19
                  209.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:68:49:e8:fe:f4:72:7f:cd:24:01:f0:88:49:3d:aa:aa:
         76:b2:1e:51:c8:40:e8:4d:e8:fd:7b:86:19:d5:4d:1b:88:c1:
         42:5f:16:23:d6:7c:c1:b7:29:24:2c:92:3b:e0:12:e4:8c:04:
         ed:dc:51:35:16:b5:fa:5a:21:01:56:64:5b:8b:e4:f2:93:12:
         b4:98:cc:3c:2e:e1:5c:b5:2b:1a:7d:66:ec:7f:1d:1c:a9:03:
         ae:ee:2f:b6:f4:95:4c:62:52:c6:dc:4d:b7:da:46:35:ac:dd:
         91:10:7a:14:d0:3a:2d:1e:14:95:a1:50:80:1b:34:b8:51:28:
         1e:57:f2:96:8c:dc:85:4b:21:70:f2:7d:4e:43:93:45:80:99:
         32:73:88:6a:68:bb:3a:c6:c6:2d:fe:fb:97:0f:77:09:d8:83:
         cf:05:c3:b7:bf:71:90:5f:b2:ba:e6:70:89:63:52:64:0a:9f:
         c1:e4:99:a3:f9:70:55:63:34:8c:d3:4a:0d:90:ff:5d:3f:12:
         47:8e:88:bd:a6:dc:b3:ef:35:0c:61:2a:c2:e8:99:2f:81:2a:
         8c:42:30:ff:75:5e:02:29:9a:f8:08:c9:f6:fc:cc:be:ca:7f:
         a8:3d:a5:79:ab:cd:94:b7:1f:1a:f3:f8:8f:5c:ac:5c:21:32:
         e9:35:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:44 2025 by rpki-client