Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/ee6fbb2d-1eb3-3d45-ac99-ee5a00a8b082.roa
File:                     ee6fbb2d-1eb3-3d45-ac99-ee5a00a8b082.roa (raw, json)
Hash identifier:          PQnh/tW+kmAv/fAsSIpeFyFtQ1fulO+UGapQ3iVbMyI=
Subject key identifier:   DB:0F:47:2E:37:68:03:FF:1F:3E:34:BC:F2:2E:F2:9D:92:88:07:7A
Certificate issuer:       /CN=f570f7c9-c6d1-474b-b183-f21d4d8d0c2c
Certificate serial:       010D0C9F43285849CE9A452601C5E377E4923940
Authority key identifier: 64:44:75:4D:18:CB:F7:10:05:63:2C:94:67:A9:FC:32:D7:D1:CA:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/ee6fbb2d-1eb3-3d45-ac99-ee5a00a8b082.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14746
IP address blocks:        192.69.24.0/21 maxlen: 24
                          205.151.255.0/24 maxlen: 24
                          2620:11f:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:45:26:01:c5:e3:77:e4:92:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f570f7c9-c6d1-474b-b183-f21d4d8d0c2c
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=38d2c80d-2e7b-47dc-aad4-ea7d38c84415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:a4:27:1b:2f:c9:02:86:19:51:32:35:b5:
                    6c:d3:39:2e:dc:a0:d5:2e:ce:4c:bb:10:79:4c:54:
                    7e:89:40:ad:83:7b:53:83:16:89:bf:3e:d4:a3:e1:
                    23:50:26:25:ec:a2:2d:47:d7:d7:17:fd:e0:9d:f6:
                    b0:39:7f:f5:ca:08:be:42:a3:d9:cf:d0:d9:1b:a9:
                    0d:3c:90:c3:9b:35:e3:9e:2d:86:45:ff:2d:37:f6:
                    d6:c3:1c:8e:33:61:1a:eb:74:04:d5:15:e1:6d:76:
                    1d:ae:7a:ca:23:c1:d9:94:04:db:f0:38:26:1b:e3:
                    1d:87:81:ff:ce:25:7a:b7:77:51:4b:11:f9:d7:51:
                    61:32:6f:8b:55:af:42:14:af:f2:60:cb:c2:0b:c3:
                    06:2b:85:4d:0d:f5:31:04:d3:64:14:78:57:1b:d0:
                    26:41:ae:8f:e8:cc:d1:2b:e0:9b:90:d1:1d:ca:e1:
                    ac:37:1b:ba:83:57:98:cd:76:63:68:dc:3c:89:16:
                    8d:cc:69:7a:1d:bc:f2:72:f2:54:35:3b:6a:23:83:
                    ad:9d:7a:ac:25:39:ee:3a:52:7b:84:d2:01:fc:1d:
                    b8:03:3d:1b:f9:38:9b:c8:aa:0c:24:e4:52:a6:33:
                    77:2d:37:28:e3:cf:c2:d1:8b:fd:57:1c:46:0a:fe:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:47:2E:37:68:03:FF:1F:3E:34:BC:F2:2E:F2:9D:92:88:07:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/ee6fbb2d-1eb3-3d45-ac99-ee5a00a8b082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.crl

            X509v3 Authority Key Identifier:
                keyid:64:44:75:4D:18:CB:F7:10:05:63:2C:94:67:A9:FC:32:D7:D1:CA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f570f7c9-c6d1-474b-b183-f21d4d8d0c2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.24.0/21
                  205.151.255.0/24
                IPv6:
                  2620:11f:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:92:10:a9:b8:82:50:47:8f:2f:79:88:9e:d5:a9:e5:86:
         4f:32:87:63:95:f3:1a:2a:a3:05:b3:ca:60:d6:e7:2a:31:c6:
         2c:d8:6c:d7:68:5b:d9:69:59:ec:3d:6e:87:11:d1:40:a5:7c:
         13:74:39:a1:00:df:cd:c1:2f:57:05:51:75:2d:71:51:f6:9c:
         04:67:1b:80:e0:98:c4:6b:f5:7f:9e:16:2d:21:45:9b:8b:bf:
         82:3d:30:1d:27:d2:7c:7d:bf:d1:71:11:e5:02:21:b2:69:ba:
         fe:95:e5:c6:b9:9f:7e:9c:12:df:38:3f:5d:bd:91:a2:c0:aa:
         27:73:dd:a4:45:58:85:2b:e0:f5:66:eb:bd:98:9b:28:0a:0a:
         c7:9d:e2:85:c1:70:f9:8a:c2:77:29:17:93:47:ad:da:bb:eb:
         f1:4a:68:27:f1:a6:62:aa:65:af:32:57:bb:13:5d:06:01:89:
         eb:62:24:ec:d5:22:c6:c5:5d:34:91:62:2b:76:7d:20:a8:4c:
         45:76:ae:52:11:75:d9:3f:53:e8:dc:46:c2:0d:5b:fe:75:3f:
         bc:f1:25:a7:ea:dc:a3:42:0e:75:a6:b5:1c:df:6a:f4:00:6f:
         b7:92:e8:9a:0b:25:d4:30:c5:27:84:f1:91:32:44:4a:5d:49:
         14:79:af:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:54:35 2025 by rpki-client