Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
File:                     d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json)
Hash identifier:          uEFaTdWSEzM9AzaMXS1w0KvTsgCpB6PHzuZVhbd2Jho=
Subject key identifier:   06:CD:A5:9F:F2:A3:BE:E9:8A:A1:77:8C:F6:F2:84:70:83:81:91:6C
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F43285849D594E67F3279F52BAB005E00
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14860
IP address blocks:        64.88.192.0/19 maxlen: 24
                          173.209.64.0/20 maxlen: 24
                          192.154.132.0/22 maxlen: 24
                          198.203.0.0/22 maxlen: 24
                          208.89.24.0/22 maxlen: 24
                          208.123.96.0/20 maxlen: 24
                          2604:5680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e6:7f:32:79:f5:2b:ab:00:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=c2ab5506-8023-4f4b-b0b8-f5c2771eff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:02:4e:bb:d3:84:1e:87:df:8a:65:9a:41:
                    5f:1f:f3:ec:8e:ff:5c:8b:6a:0a:a9:4e:e3:ef:8d:
                    f9:12:b8:31:ab:ed:74:00:bf:ab:b8:f6:f5:f4:a9:
                    00:dc:f7:f0:23:92:aa:9a:e3:cf:ed:47:e9:f3:e5:
                    a5:f7:88:1b:7a:33:d5:15:0d:d6:e1:1d:47:5f:f0:
                    14:13:0f:b8:14:21:f6:4d:7b:67:07:46:a8:a2:d4:
                    4b:b4:5d:e7:f7:15:3e:26:d2:15:23:82:46:9c:ba:
                    e3:42:34:a7:25:c4:53:a9:33:a3:0b:ab:b1:b4:e2:
                    c0:23:00:f0:4a:eb:69:2b:d5:34:41:4b:72:a2:a5:
                    70:4e:71:51:e2:ed:12:fd:84:37:79:5c:95:ed:6e:
                    ee:bf:89:a1:94:a6:88:c1:c2:56:15:75:2b:bf:1b:
                    a2:fe:50:ae:51:09:5a:2b:a8:de:93:2e:08:2b:f5:
                    17:23:1b:0f:98:c2:88:9e:12:a7:f0:68:92:25:34:
                    db:14:06:a6:51:63:96:0f:ba:ab:fd:d0:f5:37:64:
                    ff:43:80:9e:76:00:75:f6:32:16:3b:41:c6:fc:d2:
                    f7:ff:60:b6:90:ba:11:fb:d3:0f:7f:c8:58:54:da:
                    9c:6c:57:db:c5:92:15:a6:c7:28:af:55:43:c7:47:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:A5:9F:F2:A3:BE:E9:8A:A1:77:8C:F6:F2:84:70:83:81:91:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.192.0/19
                  173.209.64.0/20
                  192.154.132.0/22
                  198.203.0.0/22
                  208.89.24.0/22
                  208.123.96.0/20
                IPv6:
                  2604:5680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:03:ee:ea:e5:4b:96:60:48:30:54:6a:53:51:15:9d:e6:
         f3:21:9c:d2:6d:56:47:0b:b1:fe:8d:f0:33:79:da:b2:af:9a:
         1d:60:a4:25:d7:87:41:9f:4e:ab:e6:1d:ed:cb:ab:8a:cf:1b:
         2b:68:96:c3:18:d6:6e:34:5e:86:79:d4:f9:a2:9f:b7:f0:91:
         cb:e4:91:2d:97:7f:9d:a8:99:16:40:5e:9f:5b:95:2c:ea:b4:
         74:37:ef:4c:bb:5a:30:9e:8d:8d:39:ea:7d:3a:a9:6f:b1:78:
         02:c1:d1:17:e5:3f:4c:91:33:f3:0d:2d:89:0d:e4:fb:1c:dc:
         33:6e:75:b6:d2:59:02:ff:52:34:92:fa:af:35:15:d6:7c:60:
         fc:8b:39:1f:de:32:05:c8:b6:30:b9:70:50:52:2e:dd:12:c4:
         4e:4a:54:aa:28:1d:5b:f5:ab:34:40:96:ef:b9:7d:93:0a:2f:
         73:2e:6f:3f:c5:03:08:ec:85:b6:18:6b:da:44:b8:44:17:74:
         31:ca:75:a2:e3:a2:c5:55:6a:45:be:66:be:b6:74:66:8a:f4:
         16:1a:c2:3c:31:3e:b4:a1:40:db:c4:1e:b0:fd:7b:88:9b:88:
         c8:11:5f:09:c3:d3:d2:08:7e:7f:06:38:c8:23:33:e2:42:83:
         5a:6a:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:34 2025 by rpki-client