Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
File:                     274940e5-0730-372f-bdea-bc5ac690921e.roa (raw, json)
Hash identifier:          kgagwNiUpdL/krOSHfKyalMPha151e52HMaZ9SFdtZ8=
Subject key identifier:   9E:C1:D1:42:F2:B6:28:41:AE:59:54:FA:83:38:E5:69:4D:4C:A3:F4
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F4328584A268AC456AD8BE8A0ACD82DF0
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     398025
IP address blocks:        67.219.0.0/20 maxlen: 20
                          69.1.224.0/19 maxlen: 19
                          161.82.64.0/18 maxlen: 18
                          170.103.64.0/18 maxlen: 18
                          204.63.0.0/20 maxlen: 20
                          207.29.224.0/19 maxlen: 19
                          208.100.192.0/18 maxlen: 18
                          216.128.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c4:56:ad:8b:e8:a0:ac:d8:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=f8e888d9-b291-4cb7-a6ad-3453c4165912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:97:fc:d5:48:a1:0b:bf:24:b9:bb:49:60:
                    26:03:2f:b0:ba:79:fb:19:b1:b7:57:44:97:55:cb:
                    8c:be:02:f6:81:bc:35:d1:88:25:7e:6b:85:e5:db:
                    af:90:f7:88:5b:9f:27:e5:10:87:0f:31:5d:18:c4:
                    37:db:ad:5c:12:89:45:0d:6a:9e:21:de:ef:83:93:
                    1c:06:1d:53:4e:16:a4:f4:ce:73:4b:39:dd:d0:fa:
                    c2:d9:14:00:80:c0:b9:30:f6:ad:96:90:e7:16:ee:
                    83:71:6e:3b:b4:0d:c9:d4:d1:2d:8c:34:f8:b3:5b:
                    cc:41:0d:62:3e:81:18:7a:bd:5f:18:e1:ea:0c:6c:
                    95:84:46:97:b6:9d:2a:26:52:b1:a0:81:5a:6b:1f:
                    d5:33:10:32:63:18:a2:b8:cb:34:56:49:b3:5c:b9:
                    24:74:31:de:2f:9b:4f:59:cc:f5:ee:b8:b7:35:75:
                    c1:72:20:61:d3:bf:e9:fa:00:fb:4a:64:ea:a9:d9:
                    fb:88:e7:32:0b:0a:ef:5a:f8:99:d2:51:c9:54:eb:
                    71:1f:f5:71:12:2d:09:c4:28:e7:61:27:b6:33:c2:
                    e3:70:05:02:32:bc:38:52:33:6f:3d:7b:a0:e3:94:
                    87:0f:3d:46:e2:ea:4f:5e:93:db:e5:f9:29:53:18:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:D1:42:F2:B6:28:41:AE:59:54:FA:83:38:E5:69:4D:4C:A3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/274940e5-0730-372f-bdea-bc5ac690921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.0.0/20
                  69.1.224.0/19
                  161.82.64.0/18
                  170.103.64.0/18
                  204.63.0.0/20
                  207.29.224.0/19
                  208.100.192.0/18
                  216.128.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:50:cd:8a:e6:e4:e8:d5:4e:d7:c0:86:21:ef:4c:70:23:a7:
         ea:3a:fd:bc:74:d3:5a:1e:97:97:b6:56:74:c0:b9:4a:bd:1b:
         38:4b:45:b8:0c:8c:f7:6c:9c:e2:70:ee:a1:16:c8:88:25:88:
         98:3a:54:69:a3:4a:18:e1:22:fa:a8:b3:b9:1b:17:82:d2:de:
         fc:70:55:63:cb:e9:86:4f:f2:0d:9b:4f:4e:72:2a:21:af:6d:
         d4:8b:84:e8:35:c2:ad:77:0b:8a:df:e0:6d:d9:5b:e1:fc:4a:
         ce:b6:2a:31:9a:da:2f:0b:0f:e6:6c:bc:71:5f:42:f6:10:9b:
         99:de:55:b2:53:9e:ff:37:bb:76:5b:d9:da:ba:03:d3:40:3f:
         d5:5e:79:e2:21:d0:ed:f3:c6:88:05:4a:f2:bf:11:82:c9:69:
         10:22:89:dd:a4:0c:95:ac:ce:0f:39:6d:fa:c8:4d:ef:6d:bc:
         f7:34:c8:b7:38:fa:fb:7f:0b:f5:a0:de:12:35:57:60:5c:b5:
         0e:10:24:ad:25:77:bc:99:f4:c3:0a:3c:5d:15:91:ee:bb:5a:
         20:00:66:5d:66:47:18:2c:d0:66:09:cb:c6:fa:05:d9:a6:c3:
         b1:01:8d:81:dc:27:84:33:d0:76:e7:d0:d3:85:16:2e:21:34:
         64:0b:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:32 2025 by rpki-client