Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa
File:                     fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (raw, json)
Hash identifier:          Hpn+paqsZlhSc8P7PeFdnE76HSA+QerviSc5Ycujgvs=
Subject key identifier:   CC:DF:C5:FE:77:78:92:66:6C:DB:06:A4:C4:48:D7:A3:A3:A9:69:9F
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584A03A555D2CEFF417CC3A28480
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     400981
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:55:d2:ce:ff:41:7c:c3:a2:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=b3cc48b8-a82a-4598-982e-ffa1a56fd4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:c1:ae:ba:1c:04:98:df:3d:c9:25:c3:3f:
                    35:4c:de:eb:a5:20:c9:f4:d8:8d:20:74:77:fb:1a:
                    5c:ac:e7:31:f8:83:eb:df:d2:a6:f2:52:fb:84:1d:
                    15:38:42:8d:bf:82:ed:94:36:5a:0b:c3:da:49:45:
                    d8:2c:51:cc:52:e2:78:36:de:7d:f2:1f:ef:8c:43:
                    6f:db:e4:7e:b4:7d:a1:72:3d:9e:2d:6b:ce:93:cc:
                    a8:f2:a8:5b:de:ed:32:b8:fb:22:7f:fd:b6:6c:5f:
                    bf:be:df:9f:2e:a7:0c:43:b9:28:91:b7:db:a9:58:
                    f2:48:f6:4c:8d:dd:63:59:94:54:ad:e5:7b:a8:a9:
                    db:a7:70:54:52:0e:a0:79:21:98:12:d3:7a:03:06:
                    77:3e:72:61:83:28:18:2f:f2:70:86:89:3d:71:ca:
                    f4:a6:c1:72:b6:cd:2c:08:76:96:67:a8:e2:b4:dc:
                    18:be:3e:b7:05:0b:cd:69:2c:f5:72:42:ee:92:6b:
                    d4:76:2e:7d:2e:f1:a3:76:c8:89:54:0d:ed:4c:d7:
                    b3:43:95:89:a8:0c:9e:e7:fd:f4:69:13:47:eb:97:
                    9b:f6:1a:ed:48:38:37:07:4d:20:a4:d3:98:fc:93:
                    fe:1b:44:18:54:7c:e9:be:01:8a:f8:95:ed:14:fa:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:C5:FE:77:78:92:66:6C:DB:06:A4:C4:48:D7:A3:A3:A9:69:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/fd669d54-47cf-37c7-8689-7511d01f5bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:05:18:60:aa:ca:b2:3b:49:18:f7:39:f6:de:af:53:2f:
         9d:64:23:b1:bb:95:31:ff:fd:b0:92:ff:a6:2f:9e:6e:9c:c5:
         bb:e2:22:2a:9e:23:0d:ce:89:51:03:5b:25:fb:98:e7:7f:96:
         6f:1f:2a:c7:e7:04:f0:8b:d0:91:fb:12:c0:4e:a4:31:e2:e9:
         85:a4:ae:e0:7d:7f:81:f4:a8:00:6c:1c:b5:cb:f7:15:d9:4b:
         c8:a3:35:2e:24:6a:f3:a3:d2:e5:4d:01:cb:f9:d8:93:53:5e:
         f8:f7:16:52:e4:ec:45:b0:8a:7c:06:22:ab:a4:f6:5b:38:e8:
         b7:80:0b:17:7a:7f:5d:2f:27:1c:7d:ed:39:a8:c8:e8:df:8f:
         9d:68:73:4e:a0:d7:8c:94:15:74:21:cb:94:71:3d:b3:96:3e:
         e4:59:ec:f2:79:24:79:6d:f7:85:f0:ed:40:e4:89:50:c7:84:
         bc:dd:0f:bb:4b:bf:e0:b9:c8:d7:2e:42:72:9e:57:d7:c4:e1:
         d9:4b:b0:4d:84:72:0d:a6:d9:a0:c3:59:5a:4c:6c:36:6e:34:
         d0:de:db:2a:00:70:5f:9e:10:0a:11:8f:ef:86:7b:ee:19:b7:
         72:82:67:ee:41:9a:f4:1c:ce:27:29:bf:98:b6:6a:09:97:17:
         30:f7:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:04:50 2025 by rpki-client