Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
File:                     d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json)
Hash identifier:          8PJm1D8mfTIN/C5gCPWbfoH5ua4bnag+Ie7IFkBsf1w=
Subject key identifier:   66:DC:81:83:61:A7:4F:93:F0:EB:FD:8A:26:B5:74:A7:99:BC:6F:0A
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F4328584AB650E9BF1EF57C4C17A21880
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14860
IP address blocks:        64.88.192.0/19 maxlen: 24
                          173.209.64.0/20 maxlen: 24
                          192.154.132.0/22 maxlen: 24
                          198.203.0.0/22 maxlen: 24
                          208.89.24.0/22 maxlen: 24
                          208.123.96.0/20 maxlen: 24
                          2604:5680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e9:bf:1e:f5:7c:4c:17:a2:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=46bc577c-4b32-4a52-bde9-c4716f8baabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:95:fb:55:76:a1:75:a9:e6:c7:b6:a3:12:
                    b1:67:db:30:40:20:82:d7:8e:29:4f:97:02:ac:80:
                    44:b6:9c:d6:6b:e0:25:d1:a3:3f:f1:bc:a0:c7:d0:
                    cb:5d:4d:cc:ab:49:bd:30:fd:50:8d:e3:28:8e:ba:
                    ee:6e:a6:b5:d4:90:0f:79:01:e6:d5:85:e6:3d:4b:
                    b3:ad:c3:ef:d6:43:3b:1b:a8:56:cd:fd:13:3f:2d:
                    d9:8e:36:d4:ed:c4:5c:31:39:c4:ac:f8:74:ad:99:
                    19:d1:de:6b:8f:92:3d:9c:06:0c:f3:9e:ed:4f:b3:
                    a6:b5:7e:53:7e:4b:5a:8d:e2:c3:02:61:98:6d:15:
                    fd:70:69:eb:16:05:a8:39:10:1a:b9:f4:22:f4:89:
                    22:59:04:23:c9:fe:57:b4:c6:3c:42:86:d3:54:fa:
                    fd:13:01:07:43:fb:50:90:1a:9f:51:2a:aa:c6:bb:
                    bc:56:e6:c0:69:9c:b9:ca:9c:ec:c5:d9:7a:4f:b1:
                    de:a0:22:4c:69:db:75:15:ec:88:3f:40:2f:5c:ec:
                    1b:4f:3c:30:44:88:28:8e:4a:28:d9:c5:e8:99:ca:
                    cb:93:62:a3:07:17:a4:66:7a:fc:33:74:0e:eb:69:
                    73:9e:12:1f:e3:d0:df:a6:8e:8f:81:13:6f:8f:a9:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:81:83:61:A7:4F:93:F0:EB:FD:8A:26:B5:74:A7:99:BC:6F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.192.0/19
                  173.209.64.0/20
                  192.154.132.0/22
                  198.203.0.0/22
                  208.89.24.0/22
                  208.123.96.0/20
                IPv6:
                  2604:5680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:b6:77:f5:72:06:fe:6c:01:98:73:74:e6:b6:37:34:9d:
         2d:35:80:65:46:27:c1:8f:6e:77:0c:73:69:03:8e:61:bb:df:
         e3:1d:d0:2d:a7:24:21:91:36:b9:d1:f5:20:4b:95:8b:3b:5d:
         60:88:7e:47:1f:55:f7:7f:c8:a4:5c:34:ea:b3:74:e0:b8:4b:
         1d:c0:70:af:18:84:f5:44:25:e8:cd:3d:60:21:e7:fe:28:62:
         85:86:ef:94:a6:7d:3e:1a:8c:d0:35:09:e8:73:42:3b:a0:ff:
         c6:c2:95:bb:4f:9c:1a:90:8c:e2:3a:32:c6:a4:5f:9d:7c:a6:
         7b:40:e4:de:0c:6a:ea:74:e7:fb:cd:d0:d8:58:f6:dc:42:0d:
         5c:cc:71:b1:75:d4:1f:96:4a:68:62:f5:0c:7b:1c:60:23:a1:
         57:8c:6b:e6:f9:8f:f0:e7:5e:f6:20:ec:ce:dc:6e:9e:1b:0e:
         bb:de:a6:e6:f8:6b:13:bb:13:d6:9a:24:40:5a:1c:22:83:9d:
         24:34:a9:ad:4f:ff:4e:bb:cd:cb:8d:49:fe:e9:fc:39:33:c2:
         b1:e2:48:a3:9c:b4:c7:14:d4:e0:08:37:f9:c0:5b:95:a8:30:
         bf:fd:67:7a:b7:bb:29:a9:7a:b1:4d:7c:a4:05:7a:35:2b:10:
         ed:0c:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:57:58 2025 by rpki-client