Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
File:                     1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa (raw, json)
Hash identifier:          3My7u4uN2mPPhCxC9eqDCKL5lBrtOUTHCUiKudcnnaU=
Subject key identifier:   1D:02:F1:C7:03:0E:A2:6F:7B:9C:B0:94:60:07:EE:7A:C9:44:D0:1A
Certificate issuer:       /CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
Certificate serial:       010D0C9F4328584A03F9091D46142194A288CC00
Authority key identifier: 4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa
Signing time:             Thu 29 May 2025 15:49:58 +0000
ROA not before:           Thu 29 May 2025 15:49:58 +0000
ROA not after:            Wed 27 Aug 2025 15:49:58 +0000
asID:                     18948
IP address blocks:        64.118.208.0/20 maxlen: 20
                          74.123.168.0/21 maxlen: 21
                          74.123.168.0/22 maxlen: 22
                          74.123.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:f9:09:1d:46:14:21:94:a2:88:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec
        Validity
            Not Before: May 29 15:49:58 2025 GMT
            Not After : Aug 27 15:49:58 2025 GMT
        Subject: CN=70779be8-0817-4163-914d-5605044fe157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:7a:3f:ed:2e:d1:13:3b:6c:5f:d0:ad:8a:
                    d3:59:29:33:f4:48:fb:e7:59:bb:5d:ff:a0:d9:a0:
                    29:ab:f6:a9:67:64:53:1d:95:3d:74:fa:ff:5f:d3:
                    a8:93:53:84:e7:e8:32:58:84:85:3a:b1:5e:ce:49:
                    6b:27:aa:7d:88:e3:87:24:bf:4e:82:91:0c:58:3e:
                    98:08:b2:9e:a0:32:d0:c6:64:ae:30:d5:c9:18:fc:
                    81:b7:88:8a:5f:cf:e2:25:90:95:e8:0e:98:e3:9c:
                    33:e8:60:36:38:83:4f:6a:79:9e:7a:42:ab:64:a2:
                    6f:29:e8:b4:76:a1:e1:68:96:65:ab:51:94:7b:8a:
                    2e:ef:b5:f3:a4:4e:18:02:a3:39:25:b3:7d:e5:55:
                    2b:50:0f:a2:cf:58:50:6d:39:19:b6:e8:06:9e:42:
                    36:13:b2:e8:c7:56:eb:1a:aa:b3:9a:70:22:1a:07:
                    9d:f2:f6:51:63:fa:16:7c:8c:9d:ec:73:18:9c:f0:
                    f2:ab:88:58:c6:43:f8:ea:52:93:c6:3d:6a:c0:89:
                    3e:50:41:cf:5e:0a:7f:0d:e1:32:e2:94:da:4c:8c:
                    ae:1c:24:14:18:49:33:4b:1d:17:4a:02:ec:bd:7e:
                    ce:1d:9e:7f:81:b4:fb:f7:86:62:e4:5e:f8:e9:14:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:F1:C7:03:0E:A2:6F:7B:9C:B0:94:60:07:EE:7A:C9:44:D0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/1fe114c4-5a73-3a83-9c92-5410afc71b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E0:3A:FD:5B:34:DF:C3:D4:9F:52:EB:03:AF:09:5A:8C:DC:8B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bbb55ae8-97ab-43df-8c1a-c02bd1fb64ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.208.0/20
                  74.123.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:2b:6c:96:5e:02:69:63:8e:a3:30:50:8a:a8:0a:39:24:
         e0:c3:7b:c9:19:2e:d0:de:7e:c7:7c:1c:d8:34:1d:34:7a:1f:
         27:56:a0:26:b1:1a:5f:62:02:af:e4:5e:3b:7b:ec:fe:09:23:
         a2:2e:be:f4:ba:2b:56:46:3a:43:94:11:a9:e4:fc:fa:fe:b7:
         2d:61:c5:f9:4c:87:10:c5:af:21:33:43:2e:7e:a0:64:5b:a6:
         cf:59:e4:d9:fd:0b:c3:72:c5:78:5d:17:55:99:ee:2a:44:bd:
         8f:39:8f:31:d2:53:7c:86:87:60:b3:03:c3:de:8c:90:bc:c4:
         86:b7:cd:8a:b1:d4:26:a1:02:fb:d3:21:a3:ab:4e:8d:04:7b:
         29:eb:8d:bd:b1:83:4b:64:c9:43:f3:47:d8:a8:1f:85:91:58:
         bc:f8:41:31:2e:f4:d5:7e:32:b8:5c:cb:66:8b:26:fc:b0:09:
         e4:01:e0:bc:49:39:90:13:8c:e1:da:81:49:eb:ef:5b:d4:31:
         12:6b:d7:f0:86:d3:0a:a2:07:94:0f:fb:67:66:19:36:dc:3a:
         c0:a8:30:0e:f1:b0:cc:43:9c:80:6c:ad:19:b0:55:e7:34:7d:
         a7:2b:32:fb:7a:75:9e:14:d9:33:33:49:a5:0b:2c:ca:9f:3b:
         87:da:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:09:27 2025 by rpki-client