Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          oBgT9qksAmo+FGZG+Q94c4sAvktFqGGRgl5Tk9E4p18=
Subject key identifier:   65:B6:FA:12:18:FB:E8:ED:76:8C:41:B0:5C:F5:27:6F:5D:85:EC:32
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584A10BAC0FE8CF632E3BFBF0EC0
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14397
IP address blocks:        65.49.128.0/24 maxlen: 24
                          65.49.129.0/24 maxlen: 24
                          104.251.115.0/24 maxlen: 24
                          104.251.116.0/24 maxlen: 24
                          104.251.117.0/24 maxlen: 24
                          104.251.118.0/24 maxlen: 24
                          104.251.121.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:ba:c0:fe:8c:f6:32:e3:bf:bf:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=a236bd8c-8a7f-4d24-9816-952b9fdf86ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:0b:8d:c2:86:57:89:a6:87:23:83:85:a4:
                    8b:74:b3:66:54:b0:a5:12:60:d2:7b:ca:71:89:d4:
                    d5:9c:4f:ee:3f:f6:dd:df:8a:8d:4d:77:61:a1:49:
                    58:29:fe:fd:3e:02:b4:ff:bf:ce:99:7c:a5:e1:bf:
                    11:f8:27:34:0e:8a:59:65:c0:f1:e7:3c:fe:1e:2c:
                    61:b9:24:45:05:37:49:b2:60:3a:1e:31:b1:9c:45:
                    68:50:02:70:44:7e:6c:8c:bd:8a:9a:63:a5:2b:94:
                    1b:ab:2b:20:19:fc:0c:e0:b0:d2:66:2e:6f:92:95:
                    90:28:1a:34:c1:49:df:d6:ab:3b:93:11:db:2a:b0:
                    19:55:70:0c:23:db:54:aa:7b:82:59:8b:20:9a:04:
                    90:d1:99:3c:c1:11:35:a6:61:5b:d4:78:8f:80:26:
                    06:c2:e7:00:21:48:66:ac:d7:07:b1:81:ea:b0:4a:
                    7a:33:06:9a:51:3d:91:68:8f:79:2e:d6:f8:e4:00:
                    8b:89:de:74:68:9a:a8:e2:77:ac:5a:02:4c:3f:c9:
                    dc:99:1f:cf:28:89:99:bc:d7:90:b2:b1:ab:26:f5:
                    8a:c3:c7:c8:c8:17:40:54:67:c7:5e:6a:94:98:8f:
                    8a:4e:b3:99:49:33:8d:33:a9:3c:3d:76:6e:9e:29:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:FA:12:18:FB:E8:ED:76:8C:41:B0:5C:F5:27:6F:5D:85:EC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.128.0/23
                  104.251.115.0-104.251.118.255
                  104.251.121.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:75:07:a0:20:f0:d8:a6:e8:ef:99:fd:0e:6a:9b:5f:30:f7:
         cd:85:cc:2d:c5:31:29:7d:7f:bf:18:66:03:a5:c6:03:ad:31:
         56:f0:40:69:de:84:23:98:eb:fe:ab:74:5f:3f:a9:c2:2a:fa:
         40:34:c1:a0:a3:75:ee:ec:c1:3a:6c:45:df:8c:70:47:df:7d:
         f4:a3:9f:43:fa:9f:42:4b:76:7f:5b:24:8e:ad:4e:c1:d8:b4:
         1f:e7:c3:da:4f:e1:bf:04:40:f6:e2:01:41:ac:8f:52:d1:c4:
         a6:15:95:fc:8f:fb:a3:6f:96:ad:de:2a:3e:25:91:20:54:c9:
         fa:bf:e4:05:ab:80:59:4a:99:58:db:bf:db:05:9a:35:23:2a:
         d7:2e:5c:41:59:79:24:74:9a:f8:61:df:06:9f:6c:ae:4f:b4:
         c0:dd:62:1b:b9:95:26:d0:44:b5:47:a5:44:d1:ef:f0:ca:23:
         b7:34:56:79:c5:10:ba:84:ab:74:a4:85:79:80:58:70:3f:4a:
         e2:19:05:2a:b7:be:3b:76:20:52:88:98:8b:58:ba:09:b5:06:
         5e:7b:2f:b7:fd:c9:68:95:1a:f4:24:05:a9:1c:f4:17:6c:43:
         97:c9:24:ba:6e:d6:17:e8:e8:ab:51:17:a0:c8:a8:da:38:7e:
         04:d6:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:14 2025 by rpki-client