Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/16128d86-31e8-3a1e-90b0-6d82c6080efd.roa
File:                     16128d86-31e8-3a1e-90b0-6d82c6080efd.roa (raw, json)
Hash identifier:          mzm1FCUelXB2bILTYpB8O0xfJaKfUCJ/Fm6I3wv6Nwg=
Subject key identifier:   33:96:95:0F:D3:57:7F:5A:F4:A5:8A:BA:08:8E:9C:0C:C8:51:1E:4A
Certificate issuer:       /CN=20326331-2c67-41aa-8ed3-7667815d240c
Certificate serial:       010D0C9F4328584AB650D0B3B06F9F9CC2025B80
Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/16128d86-31e8-3a1e-90b0-6d82c6080efd.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        69.56.40.0/21 maxlen: 21
                          69.56.48.0/21 maxlen: 21
                          69.56.56.0/21 maxlen: 21
                          74.214.200.0/23 maxlen: 23
                          74.214.204.0/23 maxlen: 23
                          96.46.128.0/21 maxlen: 21
                          96.46.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d0:b3:b0:6f:9f:9c:c2:02:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=db06152b-c077-4480-9bae-b88083666b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:75:a6:c1:3e:bc:4c:9a:51:c8:41:8c:63:
                    e8:15:63:6b:2c:af:dd:a5:d0:43:85:d8:58:eb:bb:
                    0c:49:ff:89:7d:69:a6:06:c2:36:10:b0:29:d4:1e:
                    e8:d6:54:bc:83:df:86:c3:2f:4c:fe:17:0b:17:cd:
                    b0:8e:a6:3c:94:ac:43:44:48:46:89:25:f3:9c:14:
                    f3:ca:ba:1c:bb:46:ca:00:96:0b:de:3e:c3:93:67:
                    2e:99:26:b8:77:0f:fe:23:b2:fe:a6:71:97:47:6b:
                    08:58:56:6a:ae:a2:c2:1f:06:8d:27:71:ba:79:be:
                    66:ec:44:e2:9b:0c:d3:f6:94:12:bc:1c:75:45:17:
                    be:5d:ba:82:c7:f2:93:56:51:2e:da:a5:c1:55:e8:
                    cc:4a:65:3f:4c:8d:c8:ea:d6:5e:4e:13:5b:84:36:
                    2b:4b:d5:e0:e1:8e:d9:2c:aa:22:41:f2:23:39:aa:
                    29:a2:1a:b1:4f:98:1e:e6:eb:fa:7f:68:d6:a5:8d:
                    ed:8f:2c:04:88:95:99:b9:ed:ea:f1:95:5b:d0:e5:
                    0f:a4:b5:ce:1e:ce:78:76:db:d0:93:a1:a1:5c:ed:
                    a4:c3:d3:9a:79:c6:04:6d:95:ff:72:bd:29:63:5f:
                    5d:04:08:a2:7d:cc:ef:37:76:2a:38:9a:39:1e:e4:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:95:0F:D3:57:7F:5A:F4:A5:8A:BA:08:8E:9C:0C:C8:51:1E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/16128d86-31e8-3a1e-90b0-6d82c6080efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.40.0-69.56.63.255
                  74.214.200.0/23
                  74.214.204.0/23
                  96.46.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:29:ed:fb:50:53:15:9c:7c:7f:38:b9:0e:13:31:ee:55:
         21:6d:5e:54:3b:d1:37:8a:64:86:ef:1c:39:93:f9:50:0a:8d:
         c2:20:c1:4e:59:39:bf:4a:05:2e:e1:47:31:61:43:bf:2f:00:
         18:5f:b7:b4:49:b5:9f:72:0c:d7:d8:a5:18:4e:e4:fe:bb:f3:
         aa:a2:d3:8f:81:35:06:ae:7f:6d:94:5b:58:ce:ee:5d:bf:4c:
         07:53:bd:04:65:f0:87:32:e2:d7:91:b1:e0:54:40:13:35:3b:
         a9:6e:3d:91:b7:88:23:1b:40:6e:47:7a:d9:1b:da:f7:06:6d:
         18:71:49:46:8d:ac:58:99:73:52:8a:13:c1:e6:ca:ac:15:80:
         a6:17:42:66:9c:bb:46:04:28:ca:9f:0c:8b:51:9f:58:a3:5a:
         a9:56:85:fa:dc:e1:10:ac:a9:a9:0f:28:66:63:cb:29:03:57:
         9f:f4:01:21:cb:ae:74:28:aa:75:2c:23:b7:b6:3b:58:46:7f:
         4f:fc:68:32:59:d5:e1:30:73:25:4c:ca:62:7e:1c:01:db:db:
         aa:fa:95:99:dc:3a:67:fa:da:01:21:4a:b3:cb:22:3a:8a:c2:
         bf:1e:b6:ff:e7:bf:03:54:fb:3e:8a:b3:f2:b0:fa:24:b7:ad:
         ec:e2:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:27 2025 by rpki-client