Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
File:                     2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json)
Hash identifier:          vbK1uDscEcc0YUxAjMkDSWfLIW1BQD0nmXtMzGGnFSY=
Subject key identifier:   EB:94:43:57:6E:59:4D:11:B0:A7:FE:36:A4:B8:6F:40:DD:4B:2D:C9
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584A29555B1F46E55A028A22D880
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     803
IP address blocks:        104.152.28.0/22 maxlen: 22
                          104.219.8.0/22 maxlen: 22
                          104.255.48.0/22 maxlen: 22
                          108.60.160.0/19 maxlen: 19
                          108.160.16.0/20 maxlen: 20
                          108.174.160.0/20 maxlen: 20
                          162.253.8.0/22 maxlen: 22
                          192.34.224.0/21 maxlen: 21
                          198.245.112.0/20 maxlen: 20
                          199.26.190.0/23 maxlen: 23
                          199.189.88.0/21 maxlen: 21
                          206.163.224.0/19 maxlen: 19
                          207.47.128.0/17 maxlen: 17
                          216.126.200.0/22 maxlen: 22
                          216.174.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5b:1f:46:e5:5a:02:8a:22:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=ffabab44-0681-4f80-827c-75c17d1f39e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:55:e2:5a:a7:f6:4e:58:4c:03:d7:d2:f0:
                    38:2e:a2:4e:dd:e2:76:b4:47:cd:13:49:78:4d:0f:
                    32:48:fa:00:72:fd:e3:fe:e3:f6:63:c6:f0:53:f2:
                    24:24:92:e6:2c:c6:0b:43:da:9f:b9:fa:f3:da:a5:
                    1f:be:7a:0a:85:84:ad:9f:56:22:17:d0:9c:94:97:
                    e4:67:13:ce:09:40:a6:0d:9d:70:bc:43:27:fc:c4:
                    1c:4d:bf:e7:84:af:13:20:b5:12:38:d0:33:4f:ea:
                    aa:8b:53:b4:aa:67:f0:36:db:1d:a1:4b:55:c8:de:
                    32:f2:60:a7:71:d3:fe:d2:ee:9d:b8:95:d1:c0:db:
                    96:fd:2a:8d:1b:c3:f2:6b:be:31:80:03:03:7e:a2:
                    a3:8b:29:21:32:fd:59:7c:c2:8a:65:be:1c:c9:f9:
                    eb:b3:63:39:68:14:a2:bd:68:5d:bf:73:85:0c:64:
                    6d:a7:a7:71:57:d1:3d:78:bb:2f:a5:29:d2:e0:41:
                    46:e2:b7:b9:9f:7c:37:cd:d5:2d:d1:b3:49:e4:94:
                    82:21:b7:1f:7e:fd:1e:c4:b8:64:0c:a6:59:23:c7:
                    e4:ae:14:76:f8:44:5d:f1:d0:06:66:cc:93:21:e5:
                    8a:75:d1:88:85:f1:92:c5:06:ba:b4:06:03:ec:02:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:94:43:57:6E:59:4D:11:B0:A7:FE:36:A4:B8:6F:40:DD:4B:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.28.0/22
                  104.219.8.0/22
                  104.255.48.0/22
                  108.60.160.0/19
                  108.160.16.0/20
                  108.174.160.0/20
                  162.253.8.0/22
                  192.34.224.0/21
                  198.245.112.0/20
                  199.26.190.0/23
                  199.189.88.0/21
                  206.163.224.0/19
                  207.47.128.0/17
                  216.126.200.0/22
                  216.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:b5:8f:bc:e4:93:d1:80:75:78:eb:1a:3f:38:21:dc:96:
         1d:28:d8:5d:1a:c8:cb:9f:ec:6f:c5:85:81:b4:34:77:e1:c2:
         72:18:ec:92:d0:14:cb:12:4d:1c:5f:81:70:3b:4b:0d:4f:a8:
         54:a5:ea:8f:19:fc:b8:77:f5:56:80:ee:55:b2:bb:d3:2f:51:
         32:35:7e:bb:04:c6:be:df:50:2f:8f:2e:72:80:06:0e:53:65:
         d0:41:f0:e4:b8:f2:c8:05:0b:8a:3f:99:31:c2:7a:bd:e4:86:
         d1:e8:c5:38:6f:e7:7c:22:91:da:04:57:4b:53:e1:15:7e:4a:
         d0:8c:8e:cd:bb:ea:9a:a2:f0:6d:49:20:8e:89:fe:8e:92:68:
         13:78:cb:2a:1b:7f:63:e3:57:3b:70:6a:10:3f:2c:1d:70:aa:
         06:31:71:f0:a2:39:1f:96:31:08:88:b0:42:48:22:9b:1e:04:
         f7:4c:ae:a9:eb:84:09:95:d5:ab:ba:0b:3e:fd:a8:57:ea:c7:
         d5:95:46:8d:6d:96:8f:1a:e2:0f:a6:b7:d9:73:78:d1:02:9c:
         20:27:9d:e3:14:c2:95:ec:d9:77:05:54:d4:4b:6e:93:35:8c:
         45:7c:79:4f:3d:7b:77:d6:78:e7:ae:7a:96:6b:5f:9e:e7:e8:
         1a:f3:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:50 2025 by rpki-client