Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa
File:                     04f05088-b776-3c73-ac01-6db463bba24b.roa (raw, json)
Hash identifier:          UVndS4LGmjxMbBYPx/LMLpdBJr0fvjanzhhjhVmAS94=
Subject key identifier:   5E:F5:C7:D8:F5:E3:0A:06:69:36:BD:3B:25:CF:A3:61:FC:3E:D3:85
Certificate issuer:       /CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Certificate serial:       010D0C9F4328584A1B5FFE76BB6BA4896088D5C0
Authority key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     11071
IP address blocks:        64.37.0.0/20 maxlen: 24
                          64.255.80.0/20 maxlen: 24
                          70.34.0.0/20 maxlen: 24
                          74.120.32.0/21 maxlen: 24
                          74.123.12.0/22 maxlen: 24
                          104.152.60.0/22 maxlen: 24
                          104.192.200.0/22 maxlen: 24
                          148.59.162.0/23 maxlen: 24
                          162.246.100.0/22 maxlen: 24
                          192.136.36.0/24 maxlen: 24
                          192.238.0.0/24 maxlen: 24
                          195.85.106.0/23 maxlen: 24
                          198.181.62.0/23 maxlen: 24
                          199.66.116.0/22 maxlen: 24
                          204.17.177.0/24 maxlen: 24
                          204.52.243.0/24 maxlen: 24
                          204.130.209.0/24 maxlen: 24
                          207.50.144.0/20 maxlen: 24
                          208.65.0.0/22 maxlen: 24
                          208.66.32.0/21 maxlen: 24
                          208.88.8.0/22 maxlen: 24
                          209.33.192.0/18 maxlen: 24
                          2604:2540::/32 maxlen: 56
                          2604:2c00::/32 maxlen: 56
                          2606:5980::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fe:76:bb:6b:a4:89:60:88:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4215bba6-51b0-41f8-9185-dda3367a8df5
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=a2fd0599-26b9-48ac-b0db-57cb9255e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:27:0e:3b:54:45:16:53:3f:67:7b:56:e6:
                    6e:e7:43:ea:e9:fe:5e:6e:78:6e:93:01:b2:0a:40:
                    c4:02:cf:47:8a:66:b4:e1:b3:cb:57:ec:7d:91:64:
                    74:49:bb:2d:43:f5:4c:bd:2f:a6:47:6b:87:a7:c7:
                    18:be:af:46:2f:33:3e:02:d9:b2:d6:b0:b3:50:44:
                    b5:d8:4a:e7:cd:39:30:38:58:c9:17:6e:48:a3:04:
                    63:4c:89:6a:ec:ec:b3:cb:8e:8e:48:6a:4a:0e:64:
                    aa:8d:07:1b:81:d5:b6:fe:15:02:b8:d5:c4:c4:ca:
                    77:d0:76:44:50:e8:39:13:46:2e:fe:4d:dc:bc:dc:
                    56:96:3e:90:78:1d:0e:e0:98:80:3c:c7:39:8f:11:
                    ff:9b:0d:85:63:9f:cd:52:0e:4a:d2:5a:3f:a5:41:
                    93:a8:a0:30:3f:fe:42:61:40:ff:cc:a2:49:b3:17:
                    8c:1b:07:99:53:a6:52:02:d0:96:d6:b8:64:e5:5c:
                    90:6f:6a:76:d6:5f:bc:5c:c3:fd:5c:42:8a:60:08:
                    1f:93:07:c1:af:09:ca:4b:11:72:62:01:7d:53:96:
                    58:f1:5e:53:ac:72:e1:6a:36:4c:37:9b:eb:b5:e5:
                    27:71:92:da:75:bc:83:cc:18:c7:30:4d:a3:3e:65:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:C7:D8:F5:E3:0A:06:69:36:BD:3B:25:CF:A3:61:FC:3E:D3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/04f05088-b776-3c73-ac01-6db463bba24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl

            X509v3 Authority Key Identifier:
                keyid:24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.0.0/20
                  64.255.80.0/20
                  70.34.0.0/20
                  74.120.32.0/21
                  74.123.12.0/22
                  104.152.60.0/22
                  104.192.200.0/22
                  148.59.162.0/23
                  162.246.100.0/22
                  192.136.36.0/24
                  192.238.0.0/24
                  195.85.106.0/23
                  198.181.62.0/23
                  199.66.116.0/22
                  204.17.177.0/24
                  204.52.243.0/24
                  204.130.209.0/24
                  207.50.144.0/20
                  208.65.0.0/22
                  208.66.32.0/21
                  208.88.8.0/22
                  209.33.192.0/18
                IPv6:
                  2604:2540::/32
                  2604:2c00::/32
                  2606:5980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:0e:d0:15:cf:6f:cb:53:bd:fe:71:4e:3c:b7:1a:b8:fb:
         1b:b9:18:7d:fa:e4:a7:95:00:d0:7a:25:95:85:03:78:9f:ea:
         6d:73:d1:3e:e9:1e:7b:74:7f:bd:f7:99:5d:c8:f6:5b:98:0d:
         58:cc:7c:62:a2:fd:6a:74:81:05:ba:c6:79:da:e1:7f:15:a4:
         df:f2:18:f7:2a:af:dc:b7:e8:85:40:f5:a0:50:9c:a3:c6:70:
         15:68:f5:4e:6b:e1:58:0b:d6:d7:3c:32:ed:1a:9e:1b:07:6a:
         15:59:5e:2a:02:01:bc:42:75:dd:29:18:d6:a0:1c:35:17:10:
         c5:b1:c5:e5:ce:d9:0c:8e:04:08:af:63:ee:1a:0f:98:2e:69:
         67:98:4d:d9:07:04:ec:f2:b1:14:30:01:6b:65:05:51:28:54:
         27:46:60:78:03:66:91:24:da:27:2f:5e:66:2a:86:34:d5:9b:
         22:67:60:6a:b1:b5:f3:c1:9f:86:c5:c8:e3:39:14:be:2a:7e:
         d1:b5:55:a7:29:80:d9:21:86:49:f2:b5:bf:26:3c:08:7d:7d:
         94:71:47:d0:fa:41:e2:b4:a0:d8:23:65:c4:91:69:bd:c4:f1:
         e7:7a:38:3f:01:a7:c9:93:0b:03:05:89:e8:0b:14:41:6c:ad:
         b7:a3:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:39 2025 by rpki-client