Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
File:                     9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json)
Hash identifier:          B6EpbVo74bHvMPGrYITg1yGUp0fDLFQMspZVIz2LEU8=
Subject key identifier:   D4:C8:67:06:58:61:7E:38:FA:09:5A:7D:87:DB:06:6F:DD:F3:EC:C7
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F43285849DC8FB3D9C7207584C11E01C0
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     11550
IP address blocks:        173.243.176.0/20 maxlen: 24
                          199.96.120.0/22 maxlen: 24
                          204.89.253.0/24 maxlen: 24
                          216.249.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b3:d9:c7:20:75:84:c1:1e:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=98f6c32f-cbb6-412b-8539-d57c7c6ead53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:a8:3d:36:44:2c:1c:4a:70:da:b8:35:c8:
                    63:2b:5f:97:78:17:7e:12:ff:13:29:87:f5:01:e2:
                    03:64:31:74:13:56:ed:90:43:ec:9b:5c:eb:ca:dd:
                    ff:2e:dc:0e:f9:67:d0:fc:b4:3d:0e:f7:cf:12:42:
                    0f:25:67:e2:f5:aa:4b:be:07:31:81:52:bb:59:79:
                    e7:a0:c4:27:44:f8:9c:ec:4a:5e:f8:06:f6:78:c3:
                    e2:fe:12:15:fa:2e:fc:90:3b:24:77:91:13:31:46:
                    02:b2:88:88:ba:a7:5b:00:4e:f5:81:9a:11:71:a9:
                    b6:67:5e:dc:7f:c5:08:0f:e3:73:f2:02:93:6c:64:
                    d6:76:67:55:86:67:3e:a2:fc:b2:46:47:04:85:3a:
                    5f:07:e1:47:03:c3:42:f0:80:f3:c4:8c:28:43:5d:
                    ee:28:11:a4:4f:d5:fc:9b:c4:82:be:d5:f0:b2:ac:
                    e2:96:b0:60:e9:6b:ac:d8:24:7c:40:f9:df:33:6c:
                    3c:3d:17:8b:17:ad:74:8d:47:7f:01:ff:f8:94:23:
                    63:ad:d7:38:fd:60:81:20:9e:c2:9d:77:c1:bf:8f:
                    90:47:00:4c:71:0d:f5:b6:3d:27:e0:ba:76:00:c9:
                    55:c9:e8:d0:85:94:94:f2:3f:d4:56:56:72:98:17:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C8:67:06:58:61:7E:38:FA:09:5A:7D:87:DB:06:6F:DD:F3:EC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.176.0/20
                  199.96.120.0/22
                  204.89.253.0/24
                  216.249.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:6e:8e:ff:e2:9b:c0:fd:1e:46:65:b2:91:f9:db:6a:bc:
         a9:56:90:37:a8:61:09:d9:23:83:c2:02:9e:b7:40:44:d0:d1:
         ef:13:0d:29:be:16:e9:42:48:10:b7:e9:c3:0c:50:ce:d4:c1:
         b3:12:13:37:4b:a3:51:61:85:ad:05:d9:32:de:17:36:fc:c1:
         7c:25:1f:3a:b3:66:cc:de:8c:b2:c9:cb:06:ea:6c:1a:c9:1b:
         af:17:41:0d:b3:fd:48:2e:95:85:48:b6:b6:19:e9:5e:b5:b6:
         74:fb:1e:bb:9e:cf:8d:73:8c:4f:ba:ca:a9:a5:f6:99:6a:94:
         4c:84:03:ce:cd:bb:0a:c8:f2:c6:0c:c4:d8:77:51:dc:4b:50:
         ce:d7:1a:aa:1a:a7:b6:4b:5c:19:bc:2d:2f:26:09:3f:da:2c:
         32:bb:73:d1:04:28:00:7a:e5:21:90:dc:6f:ef:65:a1:32:d9:
         59:d4:9e:40:26:21:76:7f:83:60:4a:13:5d:01:1b:d6:75:7b:
         8f:ae:f9:65:27:f6:07:01:4f:ab:68:2d:47:4d:6a:db:a3:22:
         c6:e0:27:11:47:07:3d:ce:87:8c:5d:ae:cd:55:6a:6e:e2:36:
         af:17:f6:67:e0:79:3d:d4:4b:a4:45:93:a3:ad:f3:d7:d1:5b:
         26:87:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:33 2025 by rpki-client