Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa
File:                     663d9e03-51aa-3071-85db-b598f34103d6.roa (raw, json)
Hash identifier:          Bi1ET9r7eObyM2t68va99vIWeSRor2/1+sRqNjZ+UFM=
Subject key identifier:   C4:18:99:00:8F:04:27:42:6D:FE:65:0A:B2:6E:DE:CE:D4:8F:37:AD
Certificate issuer:       /CN=7a2d9c34-929b-4b22-9b0f-7396972ad017
Certificate serial:       010D0C9F4328584A2AF32032CF4E2D81DBB60F00
Authority key identifier: 31:E2:DF:5E:88:FB:21:90:F5:EE:F2:72:01:70:FC:49:EA:58:5E:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa
Signing time:             Thu 05 Jun 2025 03:53:52 +0000
ROA not before:           Thu 05 Jun 2025 03:53:52 +0000
ROA not after:            Wed 03 Sep 2025 03:53:52 +0000
asID:                     1403
IP address blocks:        64.72.225.0/24 maxlen: 24
                          64.72.228.0/23 maxlen: 24
                          64.72.231.0/24 maxlen: 24
                          64.72.232.0/23 maxlen: 24
                          64.72.237.0/24 maxlen: 24
                          64.72.238.0/24 maxlen: 24
                          64.72.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:f3:20:32:cf:4e:2d:81:db:b6:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2d9c34-929b-4b22-9b0f-7396972ad017
        Validity
            Not Before: Jun  5 03:53:52 2025 GMT
            Not After : Sep  3 03:53:52 2025 GMT
        Subject: CN=850cdd5b-68ac-415a-8730-61b5a5387d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:85:02:b5:1e:2a:da:9b:19:cd:ec:57:81:
                    0e:28:57:68:e6:ec:37:3b:ad:ce:9c:56:47:90:4f:
                    55:18:fc:94:56:9d:02:12:7a:25:c0:72:ef:e2:65:
                    14:15:dd:21:95:0e:96:fe:1a:78:66:83:6c:42:44:
                    94:64:51:87:49:cf:96:3c:57:8f:b3:af:6d:c6:41:
                    3a:a4:9b:d0:2f:bb:4f:72:e9:82:77:16:40:f0:3a:
                    2b:38:d3:7c:f3:45:64:b6:a2:c6:b7:4b:32:18:a0:
                    6a:28:ee:29:be:de:4d:14:a9:4b:15:cf:6a:c6:60:
                    c6:45:53:6e:99:a1:e9:67:b9:bb:b6:39:cd:d9:1a:
                    d2:b3:c7:10:3f:48:44:cb:7d:de:e4:23:a8:74:da:
                    47:67:1b:6c:c0:d4:cf:70:06:1f:a2:dd:1b:aa:d3:
                    9c:53:d6:a4:b9:3c:99:eb:b1:b3:b7:8d:e5:32:42:
                    bb:8e:09:0c:a2:33:0a:66:94:71:91:18:e5:f4:d1:
                    ea:ee:6d:47:e0:ba:f1:69:d8:f4:80:cb:58:7b:e5:
                    14:ee:be:57:c8:07:ef:7d:1b:9a:19:47:51:b7:8f:
                    a2:b1:0b:28:de:3f:60:6a:02:88:fd:76:22:b9:f8:
                    ec:2d:11:7c:71:ab:9b:5b:cf:d6:38:6c:21:b0:59:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:18:99:00:8F:04:27:42:6D:FE:65:0A:B2:6E:DE:CE:D4:8F:37:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/663d9e03-51aa-3071-85db-b598f34103d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017/7a2d9c34-929b-4b22-9b0f-7396972ad017.crl

            X509v3 Authority Key Identifier:
                keyid:31:E2:DF:5E:88:FB:21:90:F5:EE:F2:72:01:70:FC:49:EA:58:5E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7a2d9c34-929b-4b22-9b0f-7396972ad017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.225.0/24
                  64.72.228.0/23
                  64.72.231.0-64.72.233.255
                  64.72.237.0-64.72.238.255
                  64.72.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:78:bc:25:48:bd:18:b4:16:64:2e:89:8e:05:d1:0d:d2:04:
         b4:18:3f:f9:0b:ab:27:03:65:b3:5a:27:7f:64:5b:43:67:0d:
         5a:f7:05:fb:55:27:72:82:66:38:a8:2e:be:39:36:c4:b7:b9:
         61:a5:84:af:ba:6a:84:b7:e5:1a:fe:f2:23:86:84:d4:be:1c:
         a9:0f:06:f4:e7:5d:7c:22:01:64:7f:12:2d:d8:6c:6b:3e:21:
         63:08:70:86:a0:2d:f4:55:8e:18:ef:63:44:54:dd:72:e0:20:
         d8:76:bf:80:7a:5e:e1:4b:8e:8c:03:10:e2:20:28:a3:17:89:
         dd:53:99:75:ee:b1:60:c8:eb:6a:84:9a:4a:8a:74:bc:0b:e0:
         17:19:04:fa:47:7e:0c:00:05:3c:4e:51:85:32:1b:b0:c2:d4:
         a4:98:80:de:63:c3:1f:c3:fa:74:11:dc:5e:44:0b:21:24:56:
         60:f8:11:d3:9e:be:2f:03:c5:b2:9f:be:49:e0:71:e2:3c:2b:
         eb:ca:f4:4d:17:d6:af:fa:74:19:b7:b8:bf:a4:73:51:6f:ee:
         3a:97:e5:bf:d6:09:bd:a2:86:4a:3f:7b:80:4e:da:1f:7c:70:
         89:c1:ba:3e:f1:a4:b4:d2:5f:e5:df:2a:d9:eb:8b:9b:6d:e8:
         d7:b8:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:21:59 2025 by rpki-client