Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
File:                     d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa (raw, json)
Hash identifier:          HpNMnD/PNZps0TWwFqvLVTHr4+bNH3/64T0Uddm0zzc=
Subject key identifier:   6B:91:6B:16:A0:84:92:4B:D6:EA:97:54:24:4E:5E:8D:88:02:1A:2D
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A5765C9009D67519BCAF28540
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     36007
IP address blocks:        52.144.45.0/24 maxlen: 24
                          52.144.46.0/24 maxlen: 24
                          52.144.47.0/24 maxlen: 24
                          78.138.0.0/24 maxlen: 24
                          78.138.31.0/24 maxlen: 24
                          83.229.3.0/24 maxlen: 24
                          83.229.39.0/24 maxlen: 24
                          83.229.67.0/24 maxlen: 24
                          83.229.112.0/24 maxlen: 24
                          83.229.115.0/24 maxlen: 24
                          103.54.57.0/24 maxlen: 24
                          103.54.58.0/24 maxlen: 24
                          103.89.12.0/24 maxlen: 24
                          103.89.13.0/24 maxlen: 24
                          103.90.160.0/24 maxlen: 24
                          103.90.161.0/24 maxlen: 24
                          103.90.162.0/24 maxlen: 24
                          103.90.163.0/24 maxlen: 24
                          104.128.64.0/24 maxlen: 24
                          104.128.65.0/24 maxlen: 24
                          104.238.214.0/24 maxlen: 24
                          104.238.215.0/24 maxlen: 24
                          138.128.240.0/24 maxlen: 24
                          138.128.241.0/24 maxlen: 24
                          138.128.247.0/24 maxlen: 24
                          147.185.238.0/24 maxlen: 24
                          147.185.239.0/24 maxlen: 24
                          194.113.194.0/24 maxlen: 24
                          194.113.195.0/24 maxlen: 24
                          194.113.210.0/24 maxlen: 24
                          194.113.211.0/24 maxlen: 24
                          195.88.24.0/24 maxlen: 24
                          195.88.25.0/24 maxlen: 24
                          195.88.56.0/24 maxlen: 24
                          195.88.57.0/24 maxlen: 24
                          198.22.162.0/24 maxlen: 24
                          199.19.72.0/24 maxlen: 24
                          199.19.73.0/24 maxlen: 24
                          199.19.75.0/24 maxlen: 24
                          199.244.48.0/24 maxlen: 24
                          199.244.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c9:00:9d:67:51:9b:ca:f2:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=9ecde120-ef99-4fe4-ae3b-0eef22acabce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:a0:c8:a2:42:ce:53:dd:e3:d7:93:8d:dc:
                    15:ed:c2:9b:c5:91:b0:b6:eb:ec:8a:2e:a1:05:5e:
                    48:4c:39:e7:0f:00:a7:1f:69:86:64:da:73:0f:64:
                    e3:c1:45:0c:de:f3:5d:46:10:86:26:67:07:0f:dd:
                    54:80:c4:70:d9:84:50:5b:e3:47:ca:b4:03:0e:13:
                    eb:61:1d:63:04:c7:71:a6:a0:4b:61:46:6e:3e:37:
                    0d:3f:b4:8b:f7:c6:87:2b:94:f7:83:b9:3a:29:28:
                    28:37:51:af:43:d4:6b:aa:fd:c4:78:9b:9f:63:45:
                    3a:4f:41:0e:f8:0b:fd:dd:d1:69:9b:29:28:3c:8a:
                    c0:4a:c6:b5:bd:e7:75:16:b0:33:93:56:48:b0:69:
                    5d:ac:4c:41:f5:ff:ff:88:90:81:f1:bb:82:8e:fb:
                    ef:b2:4d:57:0b:af:fc:0c:ee:e2:38:2f:a7:4e:08:
                    be:af:0e:c4:a2:dd:99:c3:06:3e:c7:e0:07:c3:58:
                    a4:dc:23:23:3a:63:a4:7e:76:f6:34:8a:7b:06:1f:
                    90:ed:23:28:44:fc:84:08:cf:2a:17:14:35:a3:df:
                    1b:f5:ae:89:92:72:b9:47:f1:a5:99:19:ba:ee:76:
                    c9:e5:ff:bd:bf:d7:03:18:17:4f:e7:a9:26:d4:a0:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:91:6B:16:A0:84:92:4B:D6:EA:97:54:24:4E:5E:8D:88:02:1A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.45.0-52.144.47.255
                  78.138.0.0/24
                  78.138.31.0/24
                  83.229.3.0/24
                  83.229.39.0/24
                  83.229.67.0/24
                  83.229.112.0/24
                  83.229.115.0/24
                  103.54.57.0-103.54.58.255
                  103.89.12.0/23
                  103.90.160.0/22
                  104.128.64.0/23
                  104.238.214.0/23
                  138.128.240.0/23
                  138.128.247.0/24
                  147.185.238.0/23
                  194.113.194.0/23
                  194.113.210.0/23
                  195.88.24.0/23
                  195.88.56.0/23
                  198.22.162.0/24
                  199.19.72.0/23
                  199.19.75.0/24
                  199.244.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:ff:0e:ae:a0:29:d2:44:cc:9c:b4:9e:5f:00:68:21:39:
         66:fb:37:a3:0d:f1:41:b6:6d:96:d0:02:cb:f7:da:3d:6c:ca:
         e0:d5:ad:d4:21:b1:5b:9c:d0:23:9c:64:dc:0b:72:83:f1:aa:
         9b:0a:f0:34:41:fd:c0:35:3e:9e:25:a6:cb:03:75:9b:c3:1a:
         39:c6:fb:62:7f:a5:85:e3:09:f0:31:f1:32:d9:17:ae:1f:e2:
         df:a5:b9:d3:76:30:ec:04:32:1c:3a:63:b8:86:33:93:3d:8a:
         02:52:65:3e:19:4c:ee:2d:e2:3a:34:f2:0f:75:fb:d4:3a:53:
         01:e6:bc:9f:d7:57:b8:03:df:97:9e:34:0b:28:57:6a:62:89:
         e4:c9:cb:a2:a8:8a:7e:09:c6:5b:6a:56:fc:11:89:ff:23:43:
         0e:63:0b:ed:0b:c9:fe:e4:cc:b1:65:c2:d4:7b:2e:ab:3c:6c:
         52:4a:c1:42:a3:52:9e:85:17:a0:ff:32:62:72:30:a1:43:2e:
         b2:41:3a:6a:ec:93:21:17:9f:77:fb:3c:9f:1d:d2:6d:2b:06:
         ae:79:61:c4:e2:eb:5d:d6:42:3d:b2:b5:b0:9b:73:af:00:6e:
         2f:76:da:1f:75:e8:0d:0c:22:01:51:2a:1c:43:10:fc:c5:93:
         d0:cb:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:50:00 2025 by rpki-client