Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
File:                     e70d00de-ba3b-3298-a862-b8e63df24836.roa (raw, json)
Hash identifier:          nlOFq5Fmp7Dt5FEUhOWET8YVtcSgKxujxmkCeycy0w8=
Subject key identifier:   08:33:0A:70:05:D7:CD:B3:72:0A:26:65:91:40:69:CF:37:11:7C:C4
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849E654EBF738A6945C9BD76680
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     12009
IP address blocks:        65.38.48.0/20 maxlen: 20
                          72.35.192.0/20 maxlen: 20
                          216.228.192.0/20 maxlen: 20
                          2607:f248::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:eb:f7:38:a6:94:5c:9b:d7:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=bd1bbf89-e089-4a10-bbfc-d7b24a2cd00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:48:0a:8a:13:b5:4c:02:70:cd:0f:54:36:
                    0d:37:09:de:28:7d:f8:b0:c1:ca:40:15:f3:86:2e:
                    a1:cd:e6:64:5c:e3:8e:d5:c3:e4:82:ef:15:60:ab:
                    a5:6d:b1:60:90:b0:17:d7:35:4c:13:f6:f1:f6:f9:
                    d5:1c:4f:3b:5a:5e:23:0a:08:a3:67:87:b4:06:5e:
                    81:eb:bf:15:6b:9f:c3:0f:91:35:7c:3e:d4:89:b7:
                    fa:59:fc:ea:a0:bc:09:e8:99:94:73:fc:98:26:83:
                    a4:a7:57:94:a4:1a:c9:36:8b:37:e4:90:fc:6c:e5:
                    fe:ce:92:5d:3e:9e:a1:9b:d6:58:09:d8:96:24:d5:
                    55:50:21:0a:81:76:75:f6:30:a4:8d:c0:15:ff:90:
                    e8:46:89:cf:96:35:d7:9e:65:4d:05:01:6a:75:7f:
                    7a:91:08:88:13:a3:e3:e3:47:7d:30:ca:29:30:00:
                    1c:e1:0f:16:b9:0f:3f:d8:e1:68:5b:dc:73:ee:ed:
                    da:75:b4:1d:3b:c1:8d:95:15:37:3e:7f:68:e6:d6:
                    46:d9:17:4a:8d:e3:a9:a5:87:9c:ca:55:50:34:bc:
                    49:29:5e:4e:63:5b:fb:3f:41:80:24:af:0a:a7:21:
                    be:65:5c:80:4c:12:ee:c8:6c:e3:50:0b:3d:c8:cf:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:0A:70:05:D7:CD:B3:72:0A:26:65:91:40:69:CF:37:11:7C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.48.0/20
                  72.35.192.0/20
                  216.228.192.0/20
                IPv6:
                  2607:f248::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:64:88:7d:e1:ae:d5:97:35:34:02:34:ea:3f:6a:d6:8c:
         fc:16:7b:3b:3c:94:87:f8:48:e7:ed:31:ea:23:ae:3b:db:cd:
         49:07:9a:59:a6:7d:57:e5:03:79:bd:84:33:16:76:53:8e:5a:
         1c:e9:5f:83:81:c4:6e:ab:1d:6c:01:29:a3:61:94:20:cf:bf:
         80:a7:71:15:d6:e7:d5:73:3d:01:b7:95:cb:3f:b9:2f:4f:ba:
         50:cb:c6:7d:6b:de:ad:44:f4:ca:ed:e3:36:86:38:5f:ea:30:
         c1:6b:4f:fd:74:fa:c1:f5:6e:8f:7d:7e:79:7c:bd:f9:36:8a:
         c7:65:6e:a1:60:88:fc:34:90:a1:35:da:24:37:bb:73:fe:96:
         30:98:98:05:dc:cc:8a:b2:34:b7:79:4f:67:2a:92:5b:00:df:
         e2:60:36:07:fe:6a:71:70:2b:5e:e5:57:5f:cd:5a:de:83:69:
         78:5d:34:2d:1b:c7:cb:dd:de:81:eb:39:39:bd:b1:16:a3:d9:
         d0:3d:0b:c1:9a:9b:29:dd:16:a1:49:a7:e7:91:d0:0d:68:fd:
         41:d8:2f:ea:98:3d:87:66:fb:0d:22:10:95:2c:bc:5b:18:46:
         c2:be:98:62:96:c0:da:ae:fd:b1:88:ef:6e:69:6d:43:cb:a4:
         b7:cf:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:26 2025 by rpki-client