Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
File:                     e4bee016-f469-32b3-882a-abe4f14aaed6.roa (raw, json)
Hash identifier:          mSKGrhj4wTtKnB77elOZ4jm8CFWhtKVzN0TTjqovBJ8=
Subject key identifier:   A9:BA:C4:5E:17:F0:41:AC:09:0F:95:09:12:64:A5:C9:43:DE:AE:6F
Certificate issuer:       /CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Certificate serial:       010D0C9F4328584A0A33A306754C06380FC5E980
Authority key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
Signing time:             Sat 31 May 2025 21:22:53 +0000
ROA not before:           Sat 31 May 2025 21:22:53 +0000
ROA not after:            Fri 29 Aug 2025 21:22:53 +0000
asID:                     393507
IP address blocks:        149.20.68.0/23 maxlen: 24
                          2620:137:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:33:a3:06:75:4c:06:38:0f:c5:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935332e4-2b48-45ab-95bc-6d4c2916350f
        Validity
            Not Before: May 31 21:22:53 2025 GMT
            Not After : Aug 29 21:22:53 2025 GMT
        Subject: CN=b99e7c39-3522-4e68-a259-6fe6cecb8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:5d:7c:65:c8:24:ae:89:46:2c:f0:7b:ad:
                    1c:a4:93:00:b3:5d:5c:95:8a:4a:39:b2:25:b1:90:
                    28:4f:67:65:e8:c8:b8:bc:14:68:f6:1f:72:88:32:
                    59:5b:c8:c4:bf:10:cc:63:d8:9b:d9:96:26:d5:e8:
                    08:5d:2e:96:fb:6f:97:8c:1b:fb:7d:f6:5c:2a:f8:
                    3c:4f:9e:e5:00:51:8f:ec:c7:eb:40:b8:84:11:b4:
                    0c:0b:68:ba:c3:56:57:5d:f7:a6:a9:50:3c:9b:6a:
                    84:da:30:16:8e:c1:43:31:39:5a:cf:4d:b8:4c:e8:
                    af:24:c6:ea:ad:8d:2d:0d:c9:bd:0c:dc:11:e0:cc:
                    09:ec:37:6b:fd:75:8e:b7:69:36:02:ef:1d:bd:0f:
                    0d:18:bf:9e:a4:a9:2f:ea:5a:45:5f:f5:bc:83:09:
                    5a:24:54:04:bc:41:c9:07:48:ea:67:e5:cd:cf:94:
                    67:69:27:e8:7b:ac:67:d5:cd:d2:a6:6e:ad:85:33:
                    31:b1:12:35:b3:94:34:d2:93:20:a9:cc:dc:ca:01:
                    43:ad:a6:85:ec:d6:4c:8f:ea:75:35:85:59:c6:00:
                    6e:db:65:92:a1:1e:11:6e:67:62:35:ef:6b:64:e8:
                    5e:0f:f6:c6:4b:63:45:92:1b:8f:aa:17:fc:e3:ca:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:C4:5E:17:F0:41:AC:09:0F:95:09:12:64:A5:C9:43:DE:AE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.68.0/23
                IPv6:
                  2620:137:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7b:33:ec:ad:1d:a0:58:04:37:9b:b7:08:58:85:47:1f:ce:
         11:b7:7d:5f:1e:e4:0a:6e:c3:e8:d4:e7:e6:af:3b:b6:30:1b:
         85:f0:ab:82:0a:5a:2a:ee:f1:ed:08:44:69:15:7a:12:5c:05:
         05:f2:98:dc:d5:bf:79:0a:da:c3:f9:f7:90:af:9d:38:00:d5:
         5a:d2:2a:c8:71:e8:e8:a7:21:6d:27:94:6f:b4:8f:19:18:29:
         da:f1:f6:08:fb:b1:24:a7:90:5b:52:63:ab:70:ff:ab:d3:80:
         b4:e7:bb:0b:18:48:f5:d6:57:dc:80:3a:5c:20:ca:d4:5e:bf:
         c1:4d:94:db:c7:64:9e:6c:cd:7e:e2:d9:a8:9d:84:61:84:86:
         a8:cf:c8:a1:42:ff:b7:38:3a:98:a7:a6:dd:fd:79:f8:29:31:
         7e:93:ba:18:82:25:e0:b9:7d:4d:60:17:89:ff:0a:46:09:a6:
         2a:d3:35:60:04:93:77:a3:cf:bf:f5:8f:e7:24:fe:8f:b0:2f:
         03:f9:c6:be:71:48:5d:74:05:65:24:5a:85:8b:48:ea:aa:1c:
         f9:e0:c1:7e:48:6f:3b:e8:34:b3:1b:00:c6:25:1e:7d:a7:25:
         08:78:5a:9c:84:f5:ed:1d:86:39:4f:af:a4:e7:32:96:a2:99:
         bf:97:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:33 2025 by rpki-client