Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
File:                     248dd090-9420-37f9-9305-b5cd56b24a28.roa (raw, json)
Hash identifier:          O6XmsOSbmuZLq+5I8K8RNoTIG87VuMmvKduBWjFjmTc=
Subject key identifier:   41:90:BD:7A:A3:3D:D8:38:D2:6F:1D:6C:01:74:F8:81:41:28:F4:3F
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584AB220C47B23F80C1FBEAB0500
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     25820
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c4:7b:23:f8:0c:1f:be:ab:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=afb52d69-4aaa-4924-893a-3a5f928ea69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:8a:e8:47:a1:f3:98:27:21:ca:b7:fd:3d:
                    a8:1d:c4:6b:7d:85:6d:4e:e7:5e:b1:6e:6b:d6:1f:
                    82:40:77:27:1d:0c:28:a3:ed:2e:c4:f7:da:bc:33:
                    0a:4d:3f:8b:2f:33:99:cb:0f:6b:d8:52:54:24:61:
                    38:f4:5d:5b:a9:0f:ca:f5:27:b8:45:98:60:63:76:
                    70:d2:ec:a4:5e:30:b3:fe:46:3c:6f:39:eb:d0:52:
                    7a:95:8b:74:e2:4e:dc:78:63:dc:ca:df:3a:d4:8a:
                    a0:7b:37:a2:4f:97:c7:2f:77:06:e5:ec:73:33:e9:
                    d8:3b:28:4d:eb:be:2d:3d:bd:ff:f4:ef:69:e9:8e:
                    48:97:ae:c4:3e:5f:b5:3a:6b:d1:b0:8a:1e:4d:b4:
                    b3:b3:76:27:05:0d:ca:60:28:3d:22:82:3a:f5:65:
                    66:8c:2b:73:23:e8:d5:f6:17:90:20:39:15:68:49:
                    51:2c:54:5d:83:62:28:cb:43:04:55:b3:b3:96:b2:
                    25:b0:ee:8d:a3:d3:c6:07:b8:b3:7d:54:44:61:21:
                    67:a7:db:37:20:00:92:51:7a:30:6e:d0:14:cc:13:
                    d4:d6:71:55:e6:c9:0a:47:04:f1:b2:c1:fe:b6:c1:
                    b0:2b:e2:32:be:b7:0b:f2:9f:52:fc:c0:c7:b5:7a:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:BD:7A:A3:3D:D8:38:D2:6F:1D:6C:01:74:F8:81:41:28:F4:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/248dd090-9420-37f9-9305-b5cd56b24a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:db:c8:12:26:38:dc:a6:7b:63:f7:07:7b:2b:16:29:d8:
         21:eb:fc:c4:b9:ca:4c:ea:23:20:e8:9f:18:8d:7e:88:45:ff:
         43:a9:0f:ff:32:2a:4a:e0:e3:05:77:0a:da:29:e1:7e:02:a0:
         c9:03:30:7e:d2:7e:17:ee:a0:6b:09:71:e7:0d:55:cb:f9:ad:
         24:36:c0:20:af:5c:c2:7c:70:54:92:ec:94:b6:80:50:85:ab:
         60:38:a0:78:c9:d6:26:91:b4:5f:79:b0:76:8d:47:59:14:ad:
         13:91:3e:16:b3:2a:73:13:8a:72:e3:20:63:27:d1:e7:bd:d9:
         c5:6d:9b:33:72:9a:df:c4:2e:8d:5e:a7:e6:45:b4:5f:6d:b1:
         d6:9d:3b:47:2f:15:ce:96:48:06:f2:b9:c1:75:90:4a:e9:85:
         fd:9f:51:b1:ae:5b:19:3e:37:f3:05:67:24:c8:a5:cd:0f:11:
         c5:d8:ed:8c:bc:e5:e9:8d:3e:f1:6f:c8:18:44:b1:28:90:c2:
         fd:6b:aa:d3:85:ae:14:df:af:20:36:ce:c4:f0:49:68:da:2e:
         96:ef:ee:23:20:27:97:3d:d9:f1:b0:f6:d0:9d:18:32:3f:9d:
         64:41:b2:98:c2:3d:f3:26:6c:31:31:21:68:d1:45:6e:7c:0b:
         0c:98:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:02 2025 by rpki-client