Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6cb4f84e-1f22-32df-949c-5906ca719c51.roa
File:                     6cb4f84e-1f22-32df-949c-5906ca719c51.roa (raw, json)
Hash identifier:          yUdJlRMrCqmnyawxf1oHIRxs1DXH8MmmYJI0aqW1SRg=
Subject key identifier:   D4:B9:73:BD:5C:33:F2:37:D7:EF:21:67:0A:4F:E5:BE:1F:27:0C:9F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A0C055CF3A4210067D5EDE042
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6cb4f84e-1f22-32df-949c-5906ca719c51.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     54004
IP address blocks:        69.74.0.0/20 maxlen: 24
                          69.74.16.0/22 maxlen: 24
                          69.74.20.0/24 maxlen: 24
                          69.74.22.0/23 maxlen: 24
                          69.74.24.0/21 maxlen: 24
                          69.74.32.0/19 maxlen: 24
                          69.74.48.0/20 maxlen: 24
                          69.74.64.0/20 maxlen: 24
                          69.74.80.0/21 maxlen: 24
                          69.74.88.0/22 maxlen: 24
                          69.74.92.0/23 maxlen: 24
                          69.74.95.0/24 maxlen: 24
                          69.74.96.0/19 maxlen: 24
                          69.74.112.0/20 maxlen: 24
                          69.74.128.0/17 maxlen: 24
                          69.74.144.0/20 maxlen: 24
                          69.74.160.0/20 maxlen: 24
                          69.74.176.0/20 maxlen: 24
                          69.74.192.0/20 maxlen: 24
                          69.74.208.0/20 maxlen: 24
                          69.74.224.0/20 maxlen: 24
                          69.74.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5c:f3:a4:21:00:67:d5:ed:e0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=006ea8bb-f85e-4bf8-8df5-d5716e472dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:d4:ec:7d:f1:f6:c4:c3:6a:27:11:dc:a1:
                    41:e2:dd:cd:e8:50:6b:78:66:d7:ab:19:eb:01:06:
                    c2:7e:0c:e9:cc:cc:56:cb:19:a1:97:1f:2b:31:a9:
                    59:35:40:45:d3:48:8b:ef:26:7a:60:4f:6c:a4:f5:
                    25:21:97:93:9b:c6:2e:4c:72:f4:2a:e1:f3:0c:fc:
                    f0:02:8a:ac:c7:3b:fb:9a:e9:9b:a5:2a:8c:cf:e2:
                    80:8e:a7:56:cc:14:42:0b:9e:ec:91:62:b8:39:63:
                    0e:52:4a:79:a8:64:a4:09:2e:d2:c9:58:3e:39:29:
                    8e:aa:20:a9:14:27:79:d1:92:14:11:5a:f5:ff:39:
                    f5:bb:d6:d9:5f:68:8a:49:df:07:c2:f5:65:b7:40:
                    27:b5:cf:01:66:1d:32:ae:98:37:d0:44:3e:d2:09:
                    a0:29:99:c0:21:e6:a6:e3:98:f9:df:55:e4:d2:37:
                    fd:1a:1b:85:f4:7c:7f:1f:d6:6d:64:ca:14:d6:1e:
                    a1:a5:23:c2:b4:1b:08:d9:35:fc:1d:07:9a:6d:85:
                    e4:01:23:cd:3c:13:63:06:7d:46:fb:2a:fa:d6:32:
                    44:40:28:4f:8e:0e:e2:ff:25:14:7f:55:4c:5d:9a:
                    d0:e3:78:a7:b8:bf:57:3c:e4:56:c0:7e:f8:72:b6:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B9:73:BD:5C:33:F2:37:D7:EF:21:67:0A:4F:E5:BE:1F:27:0C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6cb4f84e-1f22-32df-949c-5906ca719c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.0.0-69.74.20.255
                  69.74.22.0-69.74.93.255
                  69.74.95.0-69.74.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:82:17:79:8b:5e:1e:02:31:77:fe:1e:41:62:b0:a3:d3:b7:
         45:da:70:9d:5e:20:1c:da:51:a5:5b:f1:dd:ff:4f:16:0e:58:
         1d:92:fa:6e:47:bb:07:e4:c8:63:cc:6a:d8:46:b3:a0:5f:42:
         a5:b7:64:93:34:16:55:06:89:96:37:df:28:4a:a0:d8:97:fe:
         20:d2:14:ac:77:5b:3b:10:34:fb:d6:91:be:4e:9e:92:da:39:
         c1:4d:71:3f:2f:7f:c4:6e:47:8d:89:d3:91:46:2c:ca:e0:17:
         c3:11:98:1b:0e:72:95:cb:6a:cb:d7:85:b6:62:75:4d:97:e4:
         fd:33:6f:f8:9a:51:49:e3:59:f7:4b:fa:61:ad:46:fe:fb:d6:
         28:98:f8:53:8b:74:8e:e4:c3:65:fd:b2:82:6b:9b:16:28:b2:
         b9:c0:10:da:8c:9e:be:8c:c1:9a:04:5f:b8:f3:cd:8b:a0:11:
         fd:68:43:ec:a1:5c:f3:95:c7:2d:79:e9:ba:c4:d0:27:9a:10:
         69:56:07:66:62:6d:ae:62:ba:51:26:ab:32:1f:27:d8:e6:99:
         13:a6:28:a9:cf:b3:70:18:94:79:21:7c:49:87:8a:db:b8:f6:
         16:3f:d4:71:8c:47:59:24:a9:54:70:62:b5:96:e4:ba:08:25:
         87:bb:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:22 2025 by rpki-client