Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa
File:                     504baf8d-e241-376c-b484-bd46bef0f789.roa (raw, json)
Hash identifier:          HR6NxteANz/JpNLt27tDepDdmiBnimSa3zZ7DEb0NL0=
Subject key identifier:   3C:B3:21:3E:7F:D1:97:BB:4B:A1:36:EA:1E:2A:7C:6D:DC:C2:FA:D7
Certificate issuer:       /CN=529d57aa-cd56-41d8-b3ad-b413b968b610
Certificate serial:       010D0C9F4328584AC8763C0992154CD2387D2080
Authority key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     22878
IP address blocks:        68.171.208.0/20 maxlen: 20
                          162.247.76.0/22 maxlen: 22
                          173.230.240.0/20 maxlen: 20
                          192.64.32.0/22 maxlen: 22
                          207.45.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:3c:09:92:15:4c:d2:38:7d:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d57aa-cd56-41d8-b3ad-b413b968b610
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=0db1e7dc-c77e-45af-87c8-a687810d7a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:1b:59:02:b4:f8:62:2f:80:95:4c:c9:3f:
                    44:a0:3f:3d:e2:14:07:d1:ba:b8:14:80:67:70:ea:
                    74:e0:f9:54:82:1b:b6:95:3f:58:63:2f:09:4f:01:
                    6d:f9:3e:b7:01:64:39:8b:5e:ef:b4:1e:db:6d:00:
                    f3:be:e1:7b:9b:f6:b9:c5:fe:82:6e:9c:b7:28:4c:
                    67:b6:d1:e5:b8:f2:85:49:24:d9:0c:4f:2e:80:4f:
                    bf:13:70:a9:b4:03:5a:55:4a:8c:82:5e:ab:5f:58:
                    e2:73:a0:47:f0:d4:b9:22:14:ca:36:75:05:89:9e:
                    41:72:59:01:8e:4d:0e:ca:c8:17:52:1e:ee:ea:09:
                    49:38:8f:3c:17:b4:4c:73:79:5d:50:93:e1:cf:a5:
                    6d:e6:e8:c2:d6:e2:a6:fa:35:a4:df:94:63:85:7d:
                    51:2b:82:a9:45:89:ee:a7:30:ce:f2:b9:f6:00:32:
                    f9:08:c9:b0:25:a7:b5:5b:ff:dc:b9:9e:7b:05:7e:
                    10:f7:8c:a7:59:c8:8c:21:c3:ae:fe:d7:34:53:0e:
                    14:e5:ad:97:92:e0:fe:65:5b:cf:a9:2c:a4:5a:05:
                    de:0e:fe:3d:3b:84:dc:65:52:cc:d1:7d:82:c5:34:
                    07:bb:32:02:d5:50:4b:09:97:f1:80:fd:ec:de:64:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B3:21:3E:7F:D1:97:BB:4B:A1:36:EA:1E:2A:7C:6D:DC:C2:FA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl

            X509v3 Authority Key Identifier:
                keyid:2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.171.208.0/20
                  162.247.76.0/22
                  173.230.240.0/20
                  192.64.32.0/22
                  207.45.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:73:ad:21:f4:bc:af:df:99:88:7d:42:d6:98:9c:56:8d:82:
         03:03:b4:c3:24:6d:02:55:63:78:77:f3:5b:4c:cd:c4:cb:28:
         72:84:2b:8d:8e:81:2e:8b:5a:9b:0a:c2:f5:b0:81:0f:38:3b:
         6b:dc:fc:00:02:3d:af:63:0c:4b:56:9a:2d:b7:06:aa:52:f3:
         78:79:8a:c9:2e:59:ad:94:1e:fe:23:34:43:92:1d:68:29:84:
         6a:e9:f2:9a:e0:4d:02:e1:3c:26:c0:ef:08:39:fa:1a:91:37:
         67:eb:c0:3e:96:ca:64:cd:77:32:09:4b:09:83:f0:dc:84:65:
         c4:95:92:e5:62:ab:6c:65:cd:57:bb:f2:64:40:9b:ac:fb:f2:
         d4:ea:31:2e:34:0b:e6:46:2f:58:e1:25:c0:b4:01:0a:bb:92:
         a1:54:eb:5f:19:57:d4:46:94:17:ab:6f:ef:fc:07:32:e8:de:
         d3:09:69:a0:39:86:a2:bb:86:d9:65:f7:35:97:74:d8:92:03:
         20:e3:f5:e2:d8:dd:94:34:75:d8:17:34:f5:f8:aa:36:06:7c:
         fc:b5:17:47:88:0f:56:2e:d5:42:4a:06:1c:3f:dd:5f:7e:d4:
         0c:6d:56:eb:4a:63:f9:4b:5f:7e:e4:28:6a:3f:01:37:5c:07:
         54:81:40:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:31 2025 by rpki-client