Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa
File:                     7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa (raw, json)
Hash identifier:          wjpE3EWrbWwB7Zp90HyqnvaPb5BPzqCURq+OsCAoJMI=
Subject key identifier:   C4:D3:59:4D:B1:CD:B0:69:14:85:77:B5:A8:EF:F2:32:19:30:66:75
Certificate issuer:       /CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8
Certificate serial:       010D0C9F43285849E7BA80E99F57B03D3675E480
Authority key identifier: 7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     53848
IP address blocks:        23.252.176.0/20 maxlen: 20
                          52.124.22.0/23 maxlen: 23
                          64.45.182.0/23 maxlen: 23
                          104.254.40.0/22 maxlen: 22
                          104.255.160.0/21 maxlen: 21
                          199.202.0.0/19 maxlen: 19
                          209.127.128.0/21 maxlen: 21
                          216.211.144.0/20 maxlen: 20
                          2607:a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:80:e9:9f:57:b0:3d:36:75:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=69f0f50a-c498-4b7c-b7f3-9eaee33f4e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:a4:3e:3f:b0:27:3c:a7:d7:c8:86:27:b3:
                    87:05:b7:01:eb:49:5d:e8:b3:6d:d6:3b:17:55:da:
                    74:8c:26:5d:ec:84:13:d3:41:ee:8d:b5:ce:34:1e:
                    51:2d:4d:82:d8:1c:ee:ff:91:69:72:28:3b:f5:40:
                    cd:45:b9:14:d7:84:ec:01:fe:0c:79:9c:c1:69:61:
                    df:b6:79:b1:85:96:83:a4:45:83:89:0c:46:5d:2b:
                    cc:ff:40:6d:35:70:05:25:f5:c2:c1:a8:1c:53:19:
                    27:8e:c1:69:18:ff:83:01:37:dc:98:da:df:c7:72:
                    b2:17:85:5e:1a:fd:a9:7d:c8:c4:80:66:d5:39:68:
                    da:a2:6e:23:18:0f:63:45:1f:82:f1:9c:67:24:a5:
                    c1:66:9e:3a:10:0e:aa:df:20:eb:11:76:03:fe:00:
                    84:c3:78:a2:b6:e4:57:f9:95:e8:c8:ed:e2:08:f2:
                    e8:81:3c:cd:93:03:78:cc:dd:a5:3a:9e:29:bd:e0:
                    58:d9:13:01:2c:4e:4d:26:c0:95:ee:e1:46:1b:f0:
                    89:28:72:44:5b:e8:76:f3:4d:21:66:d6:14:74:6a:
                    31:3f:7b:df:9f:6d:d0:c0:8d:81:96:ff:28:e2:35:
                    10:16:a7:b2:cc:07:78:06:11:bf:02:27:87:d2:2f:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D3:59:4D:B1:CD:B0:69:14:85:77:B5:A8:EF:F2:32:19:30:66:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl

            X509v3 Authority Key Identifier:
                keyid:7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.176.0/20
                  52.124.22.0/23
                  64.45.182.0/23
                  104.254.40.0/22
                  104.255.160.0/21
                  199.202.0.0/19
                  209.127.128.0/21
                  216.211.144.0/20
                IPv6:
                  2607:a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:a8:f5:88:02:35:da:51:68:f4:d2:87:83:6b:18:48:0e:
         d7:59:b5:c6:6c:d0:3d:f7:2f:7e:c4:25:cc:78:89:9e:31:dc:
         bc:f2:c6:c7:a4:d9:62:59:86:47:45:4f:c1:3f:80:44:8b:cc:
         89:67:82:69:c9:b8:0a:8c:86:43:e9:91:f8:89:f6:bd:3f:b4:
         f4:ff:36:5e:bd:ae:79:a7:42:2b:26:06:8d:2b:42:2a:d5:0a:
         ab:07:01:b0:32:8c:1e:2a:18:54:ae:da:12:03:51:fb:e5:c3:
         d2:6a:56:a2:19:a4:f1:d9:a9:62:1e:7c:14:4f:a1:b5:44:fc:
         21:bc:cb:7a:c6:a7:fe:e8:0c:46:c7:b9:ff:f1:c2:e6:24:98:
         ed:7c:0e:d1:ce:d5:52:6e:67:65:4d:0a:01:32:8d:0e:ea:70:
         c2:a9:7e:ce:ef:54:e7:8c:71:bb:d3:69:64:01:f3:b7:f1:ae:
         e8:e3:ae:5d:4d:11:d0:fd:c8:21:66:5b:f9:8d:40:fb:98:42:
         aa:4e:bf:c9:34:01:0a:a7:f4:65:25:f0:e1:30:81:d1:21:cc:
         72:ac:60:c7:59:f0:e9:4c:d1:f5:1b:bb:21:8a:42:10:e7:e7:
         b2:82:a0:63:a6:aa:17:21:ab:e7:8e:a0:d3:10:d6:9f:fc:78:
         ae:d8:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:08:29 2025 by rpki-client