Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
File:                     b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa (raw, json)
Hash identifier:          gzsfRTHOzOcJj6xxw5WHnSYYf6vFqjxO1dQOWmB2uXY=
Subject key identifier:   E5:43:42:F0:22:E9:F4:A4:53:02:25:7D:F5:45:01:39:6D:66:F2:64
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A30502F819D50AC054C2E45A0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     395092
IP address blocks:        52.129.44.0/23 maxlen: 24
                          107.161.50.0/23 maxlen: 24
                          144.208.124.0/22 maxlen: 24
                          146.71.86.0/23 maxlen: 24
                          208.123.116.0/23 maxlen: 24
                          2607:a680::/48 maxlen: 48
                          2607:a680:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2f:81:9d:50:ac:05:4c:2e:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=ef1a41ec-7f27-4f25-94b4-5afe0e0095ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:f7:b4:ca:45:5e:09:1a:e9:88:ef:d7:eb:
                    5d:5c:8c:db:69:19:37:e5:d9:4c:60:6b:56:47:a2:
                    26:9e:18:29:8e:85:a6:76:55:e5:96:59:0a:4b:90:
                    ab:0e:38:06:dc:99:20:44:e5:4d:5c:4a:84:2d:99:
                    a9:4f:6d:6f:0a:fc:f9:fc:78:d4:01:3e:dd:3b:22:
                    1f:e9:9c:03:7e:da:44:7d:d2:ee:a0:2c:34:d4:00:
                    16:fb:50:22:3a:93:cd:b7:9c:2b:31:52:b7:f4:c6:
                    f7:2e:31:fd:d9:cc:bb:35:3f:47:52:db:c9:bf:a1:
                    51:a4:6c:c3:98:8c:13:90:e5:1b:86:9b:a9:4f:10:
                    5b:f9:19:a6:b1:da:79:54:d8:23:92:bd:5a:11:10:
                    44:26:33:db:f5:eb:91:45:6d:b4:14:bc:a9:e2:c3:
                    c6:52:6b:16:70:8d:18:64:10:36:1b:3f:ca:5f:fe:
                    21:a0:16:1f:73:26:e3:e5:76:28:00:4a:43:ce:4d:
                    0b:75:03:c6:64:27:28:2a:7d:92:e4:a8:a5:33:de:
                    4e:5a:d8:8c:ff:00:23:af:a6:23:70:70:5d:7b:05:
                    5f:25:3f:43:77:33:d8:54:05:9a:4f:43:64:3d:65:
                    bc:0e:c6:24:01:51:53:d9:62:85:55:ba:6b:8f:78:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:42:F0:22:E9:F4:A4:53:02:25:7D:F5:45:01:39:6D:66:F2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.44.0/23
                  107.161.50.0/23
                  144.208.124.0/22
                  146.71.86.0/23
                  208.123.116.0/23
                IPv6:
                  2607:a680::/48
                  2607:a680:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:92:69:24:d1:4b:e2:f3:91:8e:78:cd:f4:68:ff:55:f5:
         68:a1:0f:cb:63:37:b1:95:15:f9:16:a6:55:64:5d:c3:67:8a:
         cd:ea:85:9c:7c:c4:ea:29:c6:d6:4d:04:50:2c:41:dd:41:b3:
         d7:78:5b:57:2e:e4:74:d4:26:36:2b:b7:45:7d:46:e8:c4:90:
         b9:31:81:1e:40:50:46:1b:60:be:73:b4:34:bc:d6:d6:2c:ce:
         ac:f0:67:56:3e:d1:b9:f2:d5:71:bc:fa:5a:b3:21:89:1c:ca:
         9e:9c:1e:53:8e:7f:df:d7:8e:41:5f:b6:9b:3a:58:84:6b:a5:
         b0:d8:a1:45:5f:69:93:13:11:a2:47:a7:55:7d:01:a7:6b:84:
         3c:73:14:b3:74:a2:06:96:4c:9b:e6:5b:96:b6:c8:a0:cb:01:
         34:bb:17:c7:be:a2:f9:6d:21:ea:29:40:76:f9:76:51:13:e1:
         c8:ba:bf:d6:c4:d0:ab:a0:93:0a:9e:cc:83:00:f7:c9:ef:dd:
         78:3f:3d:41:c9:12:57:ba:65:7f:f0:ec:ee:86:52:ae:02:f8:
         ec:c0:a1:fa:b6:75:2d:d4:46:ab:86:c4:0b:7c:5a:0c:45:e9:
         44:9a:58:b7:d6:f9:8e:c5:93:c9:f0:15:56:e3:7b:79:0e:35:
         58:b5:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:05:08 2025 by rpki-client