Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
File:                     4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa (raw, json)
Hash identifier:          uKL0J0QK+q7JyzMCnEzv/N4avCZ0/u+Eacmoe/C93dU=
Subject key identifier:   96:A9:23:4F:CD:63:98:DA:7E:B9:CE:AE:3D:05:DB:D7:5F:B1:D0:A1
Certificate issuer:       /CN=255d6559-2c60-49ac-b136-415b4469af78
Certificate serial:       010D0C9F4328584A2C2015FF6852F930C9019E40
Authority key identifier: 58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     20300
IP address blocks:        136.143.204.0/22 maxlen: 24
                          147.185.144.0/22 maxlen: 24
                          162.142.96.0/22 maxlen: 24
                          192.152.214.0/24 maxlen: 24
                          207.66.124.0/22 maxlen: 24
                          208.83.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:15:ff:68:52:f9:30:c9:01:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255d6559-2c60-49ac-b136-415b4469af78
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=7d2e51c4-3f26-432c-99e4-ae2e21336153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:67:b5:55:99:1c:3b:61:af:b5:a8:40:13:
                    8f:93:88:11:e3:ed:2d:45:45:ae:f5:64:dd:76:37:
                    e3:9e:1a:30:23:94:52:10:71:00:b6:65:2b:2f:b7:
                    a4:f2:53:a4:a9:3f:5d:79:b5:30:11:5d:e3:c8:32:
                    75:16:18:c3:e2:b9:9c:1a:1d:17:80:73:e5:cb:96:
                    df:c6:8d:64:ff:e8:1c:ce:82:7c:e7:ed:6a:3a:90:
                    f0:6c:28:ef:57:e0:2d:a0:d3:aa:1c:51:c6:2f:9d:
                    86:1c:44:4e:65:54:4f:44:ab:b1:4b:60:cd:32:b4:
                    08:7f:2a:9f:22:06:eb:32:ba:ea:2d:ae:bf:e8:17:
                    de:68:57:27:aa:12:c6:45:ff:98:f4:01:7f:ac:c1:
                    70:3b:38:33:38:b3:95:be:d4:02:2e:b7:bf:8a:cd:
                    47:42:7e:ec:a5:3c:ba:95:20:f0:fa:d8:1d:2b:c9:
                    96:84:df:6f:17:44:b5:61:40:94:78:98:fa:25:70:
                    5b:8b:df:3a:31:43:87:0e:7c:21:c1:97:b3:48:5a:
                    20:32:a7:10:37:e7:a5:ee:1a:90:de:fe:2b:fd:4b:
                    5b:58:aa:16:de:3f:e1:e8:39:08:8e:b1:79:79:8b:
                    a3:fa:60:7c:c4:77:62:6f:47:e1:3a:c5:13:89:09:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A9:23:4F:CD:63:98:DA:7E:B9:CE:AE:3D:05:DB:D7:5F:B1:D0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/4c1ce668-1501-3b48-91cc-8eb4b9c89e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78/255d6559-2c60-49ac-b136-415b4469af78.crl

            X509v3 Authority Key Identifier:
                keyid:58:8D:97:13:12:EB:A8:FC:6C:82:19:E1:04:61:7F:36:49:06:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/255d6559-2c60-49ac-b136-415b4469af78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.204.0/22
                  147.185.144.0/22
                  162.142.96.0/22
                  192.152.214.0/24
                  207.66.124.0/22
                  208.83.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:22:d8:fe:55:cf:f5:db:f0:71:f3:ec:a4:6b:60:cc:76:
         40:75:98:61:20:be:4b:3a:15:92:9f:7b:fb:43:da:33:3c:ff:
         52:18:48:89:be:47:d6:96:a3:e8:81:bd:59:5b:a4:48:a5:2c:
         17:e4:71:da:46:63:38:d9:6a:bd:7c:95:09:d6:64:10:81:19:
         20:b8:bf:3a:e9:95:ee:5e:23:b1:6d:c4:21:3a:8c:50:e9:d7:
         a4:fb:e8:a5:ac:d9:fd:2b:dc:7d:6d:dc:55:8c:5e:4e:f3:c7:
         53:b9:ac:a1:53:30:1d:49:a3:18:39:7e:5b:79:ce:2c:c5:a5:
         30:6c:14:f6:54:86:a6:d5:d2:25:aa:8e:96:8f:45:a5:f6:32:
         e5:19:80:17:40:e4:a6:ca:4a:60:47:8f:34:15:27:9f:9b:48:
         fb:f0:a9:ba:34:e3:21:09:7f:41:df:99:f2:10:2f:45:e5:bc:
         16:18:64:32:88:aa:3a:21:30:e9:a3:e9:5d:a6:d7:cd:ee:5c:
         33:59:2b:67:1a:ec:c3:57:71:a1:2b:a1:7f:14:32:7c:04:9d:
         c4:c3:ae:81:d8:11:bd:68:ea:ac:db:5c:73:3e:76:e9:20:24:
         5e:35:1f:3e:cd:91:74:55:8c:e1:0f:89:e2:dc:df:d8:ae:d9:
         20:09:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:32 2025 by rpki-client