Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa
File:                     1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa (raw, json)
Hash identifier:          3SL7nThY6wsNw5zjYoKtNuqJUDRrR/SetbHj40Atep8=
Subject key identifier:   27:E1:96:07:05:E6:00:0E:48:E8:AF:64:8E:0C:FE:B8:46:BA:14:F8
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F43285849998F32DF5B14EBB318BB6770
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     53264
IP address blocks:        64.79.96.0/20 maxlen: 24
                          74.117.236.0/22 maxlen: 24
                          74.121.180.0/22 maxlen: 24
                          74.122.192.0/21 maxlen: 24
                          173.243.112.0/20 maxlen: 24
                          192.208.176.0/20 maxlen: 24
                          198.50.24.0/21 maxlen: 24
                          199.16.8.0/21 maxlen: 24
                          199.192.200.0/21 maxlen: 24
                          216.107.144.0/20 maxlen: 24
                          216.231.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:32:df:5b:14:eb:b3:18:bb:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=6642bcc6-beea-46ad-8921-b7b7b784151a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:12:e3:ff:d1:5a:f8:46:cd:08:96:74:2e:
                    5f:06:d7:17:1f:6e:d2:73:aa:f4:c8:e5:92:02:72:
                    98:e3:64:2a:f5:e7:86:92:42:dc:18:0f:f3:32:81:
                    9c:a9:1e:71:bd:5e:67:09:65:7c:48:a9:e6:1e:35:
                    1c:b9:a2:5f:2f:c2:1a:fd:1a:55:79:35:6d:21:79:
                    f4:45:d2:e3:d2:5e:d8:c9:2b:33:75:9e:d9:87:76:
                    86:0b:da:5f:c5:50:7c:18:51:cb:a3:61:4c:d7:65:
                    92:66:68:a8:f2:f7:e4:f1:c7:82:88:6d:c4:1c:f9:
                    0c:87:c8:23:6d:c0:2d:6e:72:78:73:9f:23:80:8c:
                    30:03:0b:f9:39:10:a3:47:87:31:dd:55:95:d1:f8:
                    2b:b5:68:6d:58:54:54:4e:e9:75:f6:53:49:3c:1f:
                    ba:3a:d9:59:3f:d6:ca:ca:cc:c7:ee:af:2d:fc:62:
                    3e:4a:01:28:87:84:18:42:e2:28:20:56:ad:98:48:
                    e2:1a:e8:c4:79:6d:8e:fa:10:93:7f:f2:d7:b8:a4:
                    40:71:f5:81:c7:81:75:b6:ba:72:53:90:a4:f9:2e:
                    31:1d:d9:03:ca:c7:86:f0:39:2b:8a:c9:d0:5b:22:
                    46:b8:0f:ac:9f:a0:7f:b4:49:f3:38:54:64:f4:d9:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:96:07:05:E6:00:0E:48:E8:AF:64:8E:0C:FE:B8:46:BA:14:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1b3ab811-ab8f-33b2-b367-243b80e6cf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.96.0/20
                  74.117.236.0/22
                  74.121.180.0/22
                  74.122.192.0/21
                  173.243.112.0/20
                  192.208.176.0/20
                  198.50.24.0/21
                  199.16.8.0/21
                  199.192.200.0/21
                  216.107.144.0/20
                  216.231.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:97:3c:f5:b8:dc:a7:40:c8:5a:92:85:6e:39:7e:b2:01:a3:
         67:c3:17:2b:b9:68:f4:c5:8b:d5:f2:4d:07:9c:e1:88:a7:9e:
         96:33:34:b3:e3:d2:b0:00:9a:55:7f:4e:33:4c:d8:e2:7a:1d:
         3d:81:a8:ac:9a:15:a7:0f:32:e3:34:8d:7c:24:17:ac:b0:43:
         b1:7a:c3:2f:bd:11:7c:d1:c3:a9:7e:66:7f:87:e2:60:c9:04:
         34:d8:bb:61:ce:13:33:4e:e3:73:64:8a:51:8b:2d:71:8f:31:
         c3:cf:f3:71:a8:5e:d2:53:93:67:57:3a:fc:96:a0:79:84:1f:
         3c:33:69:6c:5f:de:77:d4:f0:cf:8f:d8:b3:d8:47:85:76:db:
         67:51:4c:ad:5c:c0:97:2a:56:e5:9f:af:5d:1d:d1:04:90:f9:
         47:25:d1:02:9b:88:a8:e4:88:10:be:13:c1:c6:b5:b9:53:88:
         fa:09:f4:37:8d:d6:22:c1:0b:8c:bb:ca:11:40:3b:2b:9c:9f:
         52:70:d5:8f:56:0a:7b:42:e9:b5:9a:44:37:cc:8b:14:58:26:
         a1:54:28:db:d7:c4:09:fc:1d:4e:1a:52:df:a8:9c:ff:09:19:
         23:a0:b1:d4:7d:32:e5:f0:93:a3:73:44:af:bc:86:b2:62:f9:
         a5:ff:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:55:31 2025 by rpki-client