Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
File:                     dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json)
Hash identifier:          /DHkjU2E8ivEZPsjbChECFdrp/CRvxe5CT+1j4cWdsA=
Subject key identifier:   D9:B8:78:62:6D:FD:DC:BA:EA:9D:53:42:56:C8:3F:82:4F:C8:17:56
Certificate issuer:       /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
Certificate serial:       010D0C9F43285849FE0FFDDA169AB6CBC4391DC0
Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     7018
IP address blocks:        192.31.9.0/24 maxlen: 24
                          198.17.99.0/24 maxlen: 24
                          198.22.152.0/24 maxlen: 24
                          198.137.234.0/23 maxlen: 23
                          199.74.244.0/24 maxlen: 24
                          199.79.216.0/24 maxlen: 24
                          199.89.132.0/23 maxlen: 23
                          199.89.158.0/23 maxlen: 23
                          199.89.160.0/24 maxlen: 24
                          204.89.153.0/24 maxlen: 24
                          204.89.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fd:da:16:9a:b6:cb:c4:39:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=766481b6-7d16-4413-b82a-4c55ef64a628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:ab:ae:a3:ac:70:ad:bb:2f:09:b6:54:72:
                    93:84:8d:50:c3:fc:0d:1b:83:6d:2a:a8:15:68:28:
                    91:e3:bc:9d:88:ad:5d:57:42:79:9b:b4:50:a7:4e:
                    c0:63:f0:a2:c1:3d:b6:af:2b:25:01:58:88:9c:92:
                    25:8e:cd:5b:0f:3d:bd:ec:40:be:50:b6:4b:63:d3:
                    2b:d3:08:d0:cd:95:37:91:4a:a1:2a:2a:20:68:30:
                    46:c8:11:19:a7:dc:72:ef:32:d8:a0:2b:d5:8a:c8:
                    d4:1f:22:78:01:65:42:bb:9c:81:c7:ad:55:48:20:
                    ee:7a:a0:1c:50:9f:92:a7:71:e2:8e:ae:16:f2:49:
                    44:5e:8c:a8:4f:af:20:78:31:c2:5d:1d:cc:bc:74:
                    82:92:67:7f:b3:a8:13:00:0c:48:54:b4:ec:3a:59:
                    24:4c:ca:df:08:06:9c:ca:4c:8b:a5:c3:b4:92:b4:
                    3c:f7:5e:32:e1:85:c4:1e:0c:96:24:c0:ba:1a:94:
                    d4:3a:08:7b:20:97:88:bc:8e:32:be:e5:56:f2:9e:
                    a1:32:ac:09:5e:a0:87:26:ac:9e:58:85:f6:53:bf:
                    28:7d:45:a4:bf:dd:8c:aa:b0:44:a7:b5:4f:fb:94:
                    8f:15:a7:23:23:55:b2:f9:6e:f5:12:a3:1a:2a:87:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B8:78:62:6D:FD:DC:BA:EA:9D:53:42:56:C8:3F:82:4F:C8:17:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl

            X509v3 Authority Key Identifier:
                keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.9.0/24
                  198.17.99.0/24
                  198.22.152.0/24
                  198.137.234.0/23
                  199.74.244.0/24
                  199.79.216.0/24
                  199.89.132.0/23
                  199.89.158.0-199.89.160.255
                  204.89.153.0-204.89.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:d2:f2:94:b1:ce:f2:9e:f9:18:ee:58:6e:2c:68:13:c0:
         b9:5a:79:5f:42:17:5c:aa:d3:59:be:36:99:5e:5d:49:0a:fc:
         8c:58:7c:bb:7e:f3:b9:9f:fa:40:33:e4:c6:09:0e:6d:e0:cc:
         66:fc:56:05:7e:82:17:24:40:67:c8:03:51:6e:a2:51:be:fd:
         e7:b4:01:64:37:7c:f0:dc:0e:ce:a7:78:99:7c:29:c8:7e:58:
         1c:40:53:26:46:98:7c:01:68:1d:c6:1f:31:de:0f:c1:f7:1f:
         b2:9f:d7:4a:3b:4c:b7:31:8c:34:e5:53:a2:31:82:26:6f:a8:
         cf:9b:a8:6a:2e:69:17:58:29:b2:d3:78:d5:e3:44:25:49:85:
         36:fd:39:80:80:75:8f:ad:26:c8:8c:33:11:4d:47:7e:3f:90:
         3e:46:d3:b7:38:60:b1:a3:48:62:16:4c:32:c5:79:40:19:f9:
         a9:26:a5:6d:e9:03:c2:90:d5:8a:1a:12:36:7b:66:52:a0:00:
         bf:61:9a:31:ac:4a:96:00:57:2b:77:8c:bd:2f:a8:d2:7d:5a:
         aa:00:3b:8c:92:6d:a5:2d:5b:e8:c1:72:d8:36:a7:33:39:99:
         a4:0c:c7:ee:08:60:2d:27:06:c8:47:81:2e:a5:f9:06:a0:70:
         cf:96:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:46:23 2025 by rpki-client