Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
File:                     43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa (raw, json)
Hash identifier:          3524KnMXOwtj7M6Q7uq6UwME2CuCzozbxkBsTNsjxk0=
Subject key identifier:   67:56:BF:C2:55:0A:17:51:5B:E8:23:8B:46:38:98:B1:28:E3:25:74
Certificate issuer:       /CN=62612914-d3c8-454d-861f-ea1fa94cf858
Certificate serial:       010D0C9F4328584A6977EA468F80DCB72CD10C90
Authority key identifier: D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     398542
IP address blocks:        23.129.82.0/24 maxlen: 24
                          134.195.108.0/22 maxlen: 24
                          158.51.128.0/22 maxlen: 24
                          207.90.220.0/22 maxlen: 24
                          209.163.124.0/22 maxlen: 24
                          2605:e140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:77:ea:46:8f:80:dc:b7:2c:d1:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62612914-d3c8-454d-861f-ea1fa94cf858
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ff756787-c31d-42e2-b6a5-1d05dd16d0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:80:0b:99:95:38:a4:6f:c6:f1:91:c2:18:
                    a4:30:22:10:04:0a:38:6c:c9:fe:87:eb:df:8b:b5:
                    0a:00:34:74:4a:86:3a:a6:7b:d3:91:be:f1:a1:18:
                    7c:52:47:14:c7:da:a0:9a:2d:c9:66:18:43:82:2e:
                    cc:5a:c8:e2:27:5b:d3:6d:2e:cf:1f:f0:9e:d9:d6:
                    94:d1:a3:90:bf:4c:fc:b9:59:ab:8b:09:59:44:45:
                    6e:2a:32:f4:f6:7c:2e:fb:bf:38:de:4c:d4:13:cb:
                    0a:a6:63:58:a4:4c:26:82:dd:1f:3c:1a:f9:7c:48:
                    75:27:96:51:d3:2a:92:d5:5e:8a:df:17:1d:8d:32:
                    3b:76:c2:07:e7:07:f6:60:62:da:38:d4:be:c3:89:
                    9c:47:e1:de:23:73:b8:9d:c0:20:a6:92:b2:c2:f1:
                    6e:ff:79:00:80:b1:22:9d:4a:d0:55:0b:4d:75:63:
                    6b:e6:ba:d4:1c:77:ee:91:77:88:6b:0f:e1:57:69:
                    42:16:a9:2f:2d:93:61:40:84:7d:b0:ba:74:7b:1f:
                    45:fb:7b:3e:6a:ee:da:98:3a:88:e8:0a:b6:ad:5e:
                    b8:35:7d:9c:18:e9:6a:79:20:e5:25:60:8f:89:99:
                    0e:7e:7f:6b:59:f8:17:39:37:28:7f:f5:6b:16:96:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:BF:C2:55:0A:17:51:5B:E8:23:8B:46:38:98:B1:28:E3:25:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/43a8b327-be1e-3e6d-a2ba-0a5bdc330f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.82.0/24
                  134.195.108.0/22
                  158.51.128.0/22
                  207.90.220.0/22
                  209.163.124.0/22
                IPv6:
                  2605:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ae:16:8b:fb:1c:81:89:48:8f:ef:f9:fc:c6:2e:72:38:30:
         8e:18:32:56:32:64:c3:e7:7d:c5:58:2d:94:aa:11:46:d0:9b:
         08:a3:0e:9c:70:4b:37:a4:e7:27:99:a9:68:e4:e7:bd:de:28:
         df:63:9c:8f:e6:b6:3e:e8:fe:24:b5:4e:49:97:ae:f9:44:3d:
         85:c3:e6:b6:2b:3f:ec:19:77:08:40:19:42:9a:7e:d7:2c:ef:
         7d:80:44:bd:98:69:e3:5c:b5:1b:59:79:7f:d4:a4:b7:bb:2d:
         00:d0:f1:2f:d4:01:49:2a:fc:7f:de:45:16:b0:14:c6:09:8c:
         94:af:8d:4c:66:e9:bb:fe:c2:7e:11:33:12:2a:bf:af:73:76:
         5c:fa:57:f9:52:a9:1b:aa:6e:25:b5:f6:cb:7f:93:ca:83:7a:
         4e:6d:6c:ce:3a:34:73:4b:b8:62:3b:ae:2c:4c:37:e9:42:ab:
         1b:70:5b:f4:9c:e2:b2:03:eb:f2:34:75:fb:df:73:a3:93:9d:
         c4:42:d5:84:e5:d3:f0:3e:7d:55:9f:08:06:2e:bb:f3:71:13:
         0c:ff:fa:36:f4:bc:3a:4c:5c:e4:20:2f:06:3f:b8:bf:55:3e:
         c2:5b:b7:8e:64:f6:5c:f5:05:e5:f6:d8:97:53:ea:35:58:5d:
         a2:a2:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:54 2025 by rpki-client