Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
File:                     b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa (raw, json)
Hash identifier:          V7dPlMWG6pYsV8oHjRK+AdkcKKa7dgH3hbMddZ5da2I=
Subject key identifier:   3C:6F:AE:CC:C4:78:A8:62:02:42:7B:4D:E8:D8:4E:39:E3:3A:C8:4D
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849E654EB56BF994B397BF0E480
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     20055
IP address blocks:        63.140.16.0/20 maxlen: 20
                          74.82.224.0/19 maxlen: 19
                          172.86.128.0/20 maxlen: 20
                          198.71.28.0/22 maxlen: 22
                          208.84.220.0/22 maxlen: 22
                          208.90.160.0/21 maxlen: 21
                          2604:4e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:eb:56:bf:99:4b:39:7b:f0:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=a9177dab-7d2e-404b-ab5a-8144f213ffd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:d5:f4:74:46:5a:66:85:50:ce:94:87:77:
                    9b:81:f4:61:28:aa:0b:d8:92:ee:96:1b:e3:fa:b1:
                    ae:da:fd:46:8a:96:df:82:f6:a0:b2:46:1d:eb:c5:
                    ad:22:31:c8:ab:70:5a:70:47:27:9b:cf:f0:a4:41:
                    9c:05:f8:e6:c9:40:0a:1e:3d:c1:ce:01:54:36:48:
                    13:95:88:d8:b0:e2:3b:6a:cc:6c:58:3f:e9:18:36:
                    08:bd:8d:c6:ed:79:01:1a:a4:e5:74:71:9a:7a:2c:
                    a2:ae:69:c8:92:d3:46:33:7c:62:84:5e:80:c3:7c:
                    32:2f:c1:00:cb:46:d0:00:5a:f0:f1:75:e8:34:77:
                    00:4c:fc:29:74:37:5d:0e:f2:2f:0d:00:82:1c:56:
                    77:31:10:5e:74:bd:fd:78:45:18:82:c4:54:90:41:
                    7d:a1:45:d3:a9:83:6d:bb:50:21:9e:48:29:bb:07:
                    24:03:33:77:6f:80:fe:32:17:c0:a3:80:50:7b:fd:
                    07:f9:e2:bf:c1:e3:2d:53:31:dc:c7:8f:6b:e3:59:
                    81:51:e7:4c:cd:bd:5e:50:82:0e:9e:b8:dd:19:11:
                    9d:36:6b:e1:5d:ee:74:0b:fe:24:97:53:e5:97:c7:
                    41:61:27:45:8f:e2:5d:d0:8d:ad:18:a4:34:6f:9f:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:AE:CC:C4:78:A8:62:02:42:7B:4D:E8:D8:4E:39:E3:3A:C8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/b7530fc0-7b9f-3b88-91dc-357a6e1297ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.16.0/20
                  74.82.224.0/19
                  172.86.128.0/20
                  198.71.28.0/22
                  208.84.220.0/22
                  208.90.160.0/21
                IPv6:
                  2604:4e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:a8:66:f5:08:78:ad:c3:56:ab:38:2f:54:e0:8d:5c:90:56:
         75:d0:d3:c3:2e:fe:80:e5:54:f7:13:f4:c0:74:80:5c:a5:47:
         e4:36:65:54:ec:5c:b0:78:46:d5:a7:86:e4:7e:a9:c4:c3:2a:
         b5:f4:80:ee:8d:60:ab:2f:b2:58:d2:e6:06:a6:9c:29:c2:1d:
         f3:da:0a:ab:c0:92:0a:27:41:3c:8a:88:9b:c0:ab:3a:47:0f:
         c5:4f:85:87:c0:e4:6c:cc:59:fa:e6:40:64:2f:65:fd:30:6d:
         c5:71:bd:d0:4c:07:fc:aa:39:d4:97:e8:ae:9f:b8:f1:0d:16:
         ed:97:6d:4c:db:51:d1:21:c8:cc:df:98:73:5a:02:f2:2f:29:
         5f:84:ef:d5:1f:b2:a8:e0:56:12:20:b8:61:94:c5:57:26:62:
         7c:83:d8:13:b7:15:29:d8:79:bc:5a:a6:23:3f:42:81:c3:3e:
         06:fd:01:a7:14:7d:f8:52:0b:35:9e:c9:35:73:63:1b:48:6b:
         ed:10:4e:f1:26:7c:e8:61:1f:9c:73:94:44:04:4b:28:55:b6:
         b1:9d:5c:64:94:9d:60:d2:98:3d:49:81:88:88:d7:d1:cd:38:
         17:17:46:12:e1:5e:0e:eb:44:a0:e8:47:2c:74:9d:18:1b:f0:
         68:89:5b:fc
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEnmVOtWv5lLOXvw5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
YTkxNzdkYWItN2QyZS00MDRiLWFiNWEtODE0NGYyMTNmZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTvV9HRGWmaFUM6Uh3ebgfRhKKoL2JLulhvj
+rGu2v1GipbfgvagskYd68WtIjHIq3BacEcnm8/wpEGcBfjmyUAKHj3BzgFUNkgT
lYjYsOI7asxsWD/pGDYIvY3G7XkBGqTldHGaeiyirmnIktNGM3xihF6Aw3wyL8EA
y0bQAFrw8XXoNHcATPwpdDddDvIvDQCCHFZ3MRBedL39eEUYgsRUkEF9oUXTqYNt
u1AhnkgpuwckAzN3b4D+MhfAo4BQe/0H+eK/weMtUzHcx49r41mBUedMzb1eUIIO
nrjdGRGdNmvhXe50C/4kl1Pll8dBYSdFj+Jd0I2tGKQ0b5+BOwIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFDxvrszEeKhiAkJ7TejYTjnjOshNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvYjc1MzBmYzAtN2I5Zi0z
Yjg4LTkxZGMtMzU3YTZlMTI5N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEP4wQAwQF
SlLgAwQErFaAAwQCxkccAwQC0FTcAwQD0FqgMA0EAgACMAcDBQAmBE4AMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAM6oZvUIeK3DVqs4L1TgjVyQVnXQ08Mu/oDlVPcT9MB0gFylR+Q2ZVTsXLB4
RtWnhuR+qcTDKrX0gO6NYKsvsljS5gamnCnCHfPaCqvAkgonQTyKiJvAqzpHD8VP
hYfA5GzMWfrmQGQvZf0wbcVxvdBMB/yqOdSX6K6fuPENFu2XbUzbUdEhyMzfmHNa
AvIvKV+E79UfsqjgVhIguGGUxVcmYnyD2BO3FSnYebxapiM/QoHDPgb9AacUffhS
CzWeyTVzYxtIa+0QTvEmfOhhH5xzlEQESyhVtrGdXGSUnWDSmD1JgYiI19HNOBcX
RhLhXg7rRKDoRyx0nRgb8GiJW/w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:37 2025 by rpki-client