Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa
File:                     1ed96d55-b477-34a7-bf3a-6deadbd63243.roa (raw, json)
Hash identifier:          2tXtAGO+Uod2A4Gf5ZSiPeMtldCdRJNGtau5RA64tqE=
Subject key identifier:   A7:7A:16:73:D2:A8:BC:63:A9:58:E0:6B:26:0D:D4:B1:4F:A0:F9:E2
Certificate issuer:       /CN=33abedb9-022c-43d0-ac12-a00ad12424b3
Certificate serial:       010D0C9F4328584AAB26515F4395688B92454280
Authority key identifier: 62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     27400
IP address blocks:        74.116.160.0/21 maxlen: 21
                          199.36.232.0/21 maxlen: 24
                          208.85.60.0/22 maxlen: 24
                          208.88.112.0/21 maxlen: 21
                          2607:f3d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:51:5f:43:95:68:8b:92:45:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33abedb9-022c-43d0-ac12-a00ad12424b3
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=f6a544b2-308c-4421-88e7-4de762947168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:3e:34:dc:7a:80:b5:69:02:bd:26:b1:80:
                    5e:a9:2e:6f:27:6a:38:11:d2:79:5a:d9:9e:87:9e:
                    ec:c7:3b:9d:06:85:64:b9:3f:90:e8:2e:06:44:24:
                    22:2d:a7:49:c4:c0:ce:2c:3c:1c:88:b6:99:92:ae:
                    4d:81:c8:4e:00:8e:ad:96:d8:16:8e:63:81:79:a3:
                    74:84:ef:6e:cb:23:9a:9c:56:44:8e:ab:0b:be:e8:
                    1b:ad:0b:d4:01:6a:cb:76:0e:18:69:34:9b:1f:12:
                    88:d0:ff:98:ec:ff:7b:a6:77:7a:7f:48:f7:9c:3a:
                    a7:b8:c2:61:e8:cc:b0:4a:bd:6f:23:3d:b5:dc:99:
                    ac:6d:bd:fc:d0:34:b9:71:99:48:cb:30:d8:81:dc:
                    96:d7:50:1a:c9:01:3a:6e:9e:4b:a1:8c:c9:f6:7e:
                    c3:fb:01:63:36:9d:8a:44:90:91:3c:5a:e6:ed:82:
                    12:3e:d9:c3:40:86:46:09:7f:6b:9e:18:07:ef:b0:
                    53:50:d5:eb:fb:33:b5:79:82:18:16:aa:3e:ac:73:
                    f1:ab:bb:61:42:aa:b0:d0:94:15:c6:96:bb:9f:d9:
                    69:1a:44:9f:8e:8e:20:20:45:44:8b:d3:d9:c1:b3:
                    2f:dd:98:b3:ed:e1:91:6c:ab:d2:de:db:94:d7:fa:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:16:73:D2:A8:BC:63:A9:58:E0:6B:26:0D:D4:B1:4F:A0:F9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/1ed96d55-b477-34a7-bf3a-6deadbd63243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.crl

            X509v3 Authority Key Identifier:
                keyid:62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.160.0/21
                  199.36.232.0/21
                  208.85.60.0/22
                  208.88.112.0/21
                IPv6:
                  2607:f3d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:a5:27:e9:30:c8:5e:1e:ee:b2:62:be:a8:7e:f7:62:0d:
         35:bf:c6:a3:01:99:a4:57:84:6a:c2:09:4e:e8:01:a0:9f:49:
         30:f5:b9:d6:c9:e8:53:98:4f:10:83:91:e9:c3:1f:fe:1e:5a:
         55:1c:2c:10:4e:21:c2:5d:b3:8e:12:86:72:4e:e1:0c:7d:08:
         99:20:74:36:0f:64:9a:aa:e2:17:8d:a9:a4:24:5c:76:18:18:
         c7:1d:24:08:48:fb:b0:2b:26:78:57:33:f4:52:c7:6c:6f:53:
         82:19:50:8f:5a:b5:db:06:4a:d5:f3:14:44:0b:58:20:fc:2b:
         a6:d3:a8:27:2b:eb:17:88:7c:b6:dc:11:99:cb:47:38:c4:da:
         40:a9:7b:35:be:e7:49:20:55:f1:bc:8b:28:6f:62:19:6c:2e:
         e3:e3:76:e3:8e:85:40:cd:29:80:44:78:02:78:20:08:49:2d:
         fb:24:a2:d0:9d:f9:e9:1b:42:a6:4f:d7:8c:c7:c7:88:ce:92:
         ea:3e:a4:5d:9f:31:cb:b0:f9:37:f6:d5:d2:3b:a6:3d:83:6c:
         58:8d:ca:3c:6a:32:fc:30:56:4b:20:e4:5e:68:2c:83:54:ef:
         6a:22:50:2c:01:e9:2e:8b:04:8e:e5:98:24:a0:4c:f5:e6:6d:
         49:0c:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:03 2025 by rpki-client