Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa
File:                     f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa (raw, json)
Hash identifier:          btRUgHa53pu5F99OWqYL3jM0hARkhVwNObEBim0YOfs=
Subject key identifier:   B6:AC:8F:78:94:4E:D4:23:16:06:9B:4B:05:86:59:F7:32:8C:14:C1
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F43285849F7150A4E2CC7E0733C2F3380
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1299
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0a:4e:2c:c7:e0:73:3c:2f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f997bab9-2113-4ee7-acd1-5ed587fc100d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:56:33:2d:49:77:a6:c7:14:b5:fc:6a:72:
                    de:ec:13:ff:7f:3e:28:67:e0:4d:0d:d8:64:06:35:
                    46:e4:e0:73:f1:60:17:5c:18:5e:fb:8f:00:79:68:
                    21:c3:3d:6b:e2:c4:fa:74:b5:94:0b:32:69:85:eb:
                    06:7f:9b:a6:63:9e:af:6e:4b:c8:72:fe:d3:be:cc:
                    fc:d1:11:52:ed:cb:a5:9c:c3:83:91:06:69:fb:04:
                    a4:dc:2b:f5:fd:b2:e0:c2:36:cf:56:1d:6f:d0:69:
                    6a:58:52:0e:87:3d:5b:54:35:92:9f:f3:e6:e5:c9:
                    15:7c:00:72:86:17:75:41:fa:73:7e:94:b4:08:e6:
                    ec:0d:f4:21:5d:86:bb:28:50:fd:99:28:97:96:4c:
                    3b:07:98:ec:61:67:c6:a5:3f:2c:29:a6:b0:37:eb:
                    db:63:f8:15:2e:4f:70:13:3a:e6:4d:6b:f5:28:f7:
                    8a:1c:4a:18:06:9f:70:53:af:cd:cf:d4:72:97:84:
                    d7:5f:af:fc:a8:7a:a6:48:9a:69:6c:4d:02:1f:3f:
                    ba:e0:1a:3c:a2:c0:ce:29:29:15:7b:46:49:47:b8:
                    6b:2e:0f:77:e8:34:62:a1:b4:4a:f6:58:59:e1:65:
                    17:e6:c5:0c:14:08:90:c1:9b:62:36:4a:5d:4c:89:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:8F:78:94:4E:D4:23:16:06:9B:4B:05:86:59:F7:32:8C:14:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/f3dfe959-1a6c-3a1f-9c93-4f0110925071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:cb:8d:ab:d0:8e:77:09:e6:34:29:3f:d1:bd:be:a0:dd:
         37:59:19:65:cb:3b:92:a3:2e:34:6b:4f:7c:92:64:f4:a0:a7:
         4c:7e:b3:93:d5:d7:35:0c:2b:ed:58:a6:95:ba:9e:a5:7b:07:
         5b:86:4f:f6:e7:1b:b7:58:49:1c:0c:11:66:77:b3:87:a0:d9:
         cb:da:6a:8f:3d:bf:6d:b7:70:3b:48:f7:4d:e3:91:d3:24:8a:
         c6:7e:03:28:ff:43:31:7a:8a:ff:fe:f8:42:63:0a:a9:74:33:
         de:27:93:b6:97:92:f4:11:9d:c1:5a:b3:2c:5c:3b:85:46:91:
         94:60:e3:4c:53:f9:f8:e5:91:0a:89:f2:b2:d6:70:ea:2e:77:
         da:07:95:c0:53:7f:3f:78:75:d9:2e:5c:6f:df:2c:c7:fe:e3:
         98:0e:b3:7d:d7:75:80:e0:51:4e:8b:2d:41:36:fb:2d:57:20:
         8c:95:7b:93:40:e3:27:56:17:36:06:0d:bd:2f:05:af:34:a4:
         78:84:e7:00:37:23:01:71:1d:4d:a0:12:01:4f:27:bc:86:bd:
         ec:63:0a:f1:01:f0:91:4a:3c:f8:64:17:c8:d3:47:fa:dc:23:
         de:f4:09:c3:f7:13:40:1c:64:29:83:7a:24:74:ae:83:16:f1:
         bf:f5:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:04 2025 by rpki-client