Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa
File:                     2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json)
Hash identifier:          AiCEg8Si+xdHjpASSS+IlAS7b6lwIR7NuoLUOhLCJ1w=
Subject key identifier:   95:72:B3:B7:4A:BA:EA:6D:9D:A5:A8:8A:78:F9:F6:F4:42:33:83:20
Certificate issuer:       /CN=028c0596-c3dd-44df-9761-677e68794c69
Certificate serial:       010D0C9F4328584AAB26514AABA65696BA5CD400
Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14371
IP address blocks:        65.18.204.0/22 maxlen: 24
                          66.171.40.0/21 maxlen: 24
                          68.235.64.0/18 maxlen: 24
                          104.219.196.0/22 maxlen: 24
                          162.254.64.0/22 maxlen: 24
                          205.149.144.0/20 maxlen: 24
                          206.223.125.0/24 maxlen: 24
                          208.77.24.0/22 maxlen: 24
                          209.191.192.0/19 maxlen: 24
                          2001:504:29::/48 maxlen: 48
                          2600:6400::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:51:4a:ab:a6:56:96:ba:5c:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=c92d50b5-8f52-476b-b4b8-70b03611d0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:ca:4a:35:5d:05:b1:16:75:4b:29:c8:9c:
                    63:b2:2e:d6:37:b5:48:95:0c:53:1b:41:5b:b0:c0:
                    57:19:02:9c:1b:8a:ae:ee:07:91:33:7a:cc:81:44:
                    09:27:a3:00:d4:4b:2b:b6:89:ca:e6:21:73:aa:33:
                    70:a1:c1:18:3e:c6:97:6d:79:05:f0:0a:0e:1c:c4:
                    9c:cc:c7:e6:3c:0d:99:c3:3f:ee:0c:95:09:6d:7d:
                    72:b8:51:2e:5a:85:ab:4b:a7:93:ae:d3:79:40:cd:
                    97:9c:56:92:90:0f:4f:93:d9:a1:25:a6:0e:57:20:
                    f7:7b:44:44:e2:f6:a3:94:e4:68:a2:a0:85:35:19:
                    f6:8b:29:9f:01:06:9f:29:d7:43:1e:87:6d:8a:5e:
                    9e:94:00:6f:00:8f:0f:0a:59:f2:7e:3f:26:e7:e1:
                    c1:1c:c9:4f:e6:1f:78:4b:fc:a3:d6:b6:59:a0:81:
                    8f:a6:6d:45:b8:51:11:d7:62:79:34:8f:cc:58:1c:
                    ff:01:89:65:be:b9:d7:e9:43:fa:b4:b5:b3:1c:d0:
                    4a:f8:68:a9:69:6a:a7:ef:3a:87:6c:bf:ee:1f:13:
                    6e:a8:33:ff:77:1e:81:8d:44:99:8f:c1:c3:1f:d1:
                    e4:c1:da:32:6e:96:24:ea:c9:67:e7:67:3d:3e:6f:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:B3:B7:4A:BA:EA:6D:9D:A5:A8:8A:78:F9:F6:F4:42:33:83:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.18.204.0/22
                  66.171.40.0/21
                  68.235.64.0/18
                  104.219.196.0/22
                  162.254.64.0/22
                  205.149.144.0/20
                  206.223.125.0/24
                  208.77.24.0/22
                  209.191.192.0/19
                IPv6:
                  2001:504:29::/48
                  2600:6400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:c0:0f:89:83:fb:7a:94:98:fc:a3:43:e7:4b:52:2b:f8:
         d6:5f:db:7f:54:73:37:e2:09:6f:cb:38:39:97:64:cf:e8:08:
         a8:0d:f3:bc:b4:42:76:28:e9:70:39:81:57:24:18:a7:cd:82:
         f4:79:19:be:b2:d9:26:41:d1:f7:ee:3a:f5:44:02:57:0a:21:
         02:fc:dc:a3:45:3c:f6:12:76:b5:1a:fb:2c:75:ca:9f:ef:f0:
         e4:7a:8e:f5:8f:38:f9:9a:aa:28:e6:cf:4d:96:a5:d6:ee:5a:
         75:3b:44:32:aa:c4:2c:4a:39:a3:05:67:42:77:70:a3:d0:b4:
         22:2a:a8:0f:33:58:37:44:c1:13:3d:63:52:44:40:83:2f:e6:
         d5:05:68:ba:09:77:25:6f:42:8c:0a:ca:0f:97:98:f6:48:b2:
         d4:fd:47:b0:18:f1:2b:e7:be:44:9d:9e:57:85:33:48:8c:e7:
         88:46:34:31:d5:b8:9d:26:5a:ad:27:53:37:f9:7c:82:1d:93:
         c0:96:7f:0d:04:28:4f:49:d1:4e:85:aa:5b:18:5d:9e:96:e7:
         1b:ae:67:38:9f:18:a5:41:be:e6:32:fe:8b:e6:79:ce:76:54:
         67:a0:a4:ab:37:b1:df:e1:4a:65:10:57:f3:6d:0e:a4:ad:70:
         04:8a:7a:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:18 2025 by rpki-client