Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
File:                     5a30a9fe-c741-3fe7-9896-4f516805f784.roa (raw, json)
Hash identifier:          NJb3KyWVQ1rThcgxurvw45ZKtgc1APLkCtAhD3YhF6s=
Subject key identifier:   CD:7A:B5:49:6B:EA:02:77:32:68:04:6D:A8:B5:EF:DF:82:15:93:23
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584A3A15769D21AF249379669000
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     1299
IP address blocks:        68.67.64.0/20 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          199.102.64.0/22 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:76:9d:21:af:24:93:79:66:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=32b62dff-f580-4f32-a4ea-2f20187c9bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:72:60:c3:e9:c5:d3:b1:6c:09:95:e0:ab:8b:
                    21:94:c1:b4:0f:d5:9a:4f:96:d5:b7:cf:6d:e5:6e:
                    5a:f1:71:cb:c7:76:48:81:31:87:33:37:ed:d4:4a:
                    16:00:40:63:dc:bc:c5:4c:54:96:9d:25:27:2a:51:
                    d2:b4:5f:59:d1:a0:7e:68:3f:a9:c7:16:07:5c:96:
                    8d:27:0b:bb:1c:3d:41:0a:43:15:1a:6e:ac:95:03:
                    79:f7:a9:22:58:68:8b:cf:e1:07:a9:0d:08:97:fe:
                    86:a9:95:62:ae:fd:86:55:ac:84:e6:b1:02:83:68:
                    cc:3c:0f:66:db:d3:a4:44:11:5f:04:2e:07:6c:ae:
                    c9:88:15:7b:11:c7:9a:3a:fe:79:7e:d0:ee:18:eb:
                    7b:84:8a:23:5c:ec:24:b9:31:d4:0e:a9:dc:e8:87:
                    30:16:c3:87:60:af:8e:f8:ae:9b:0d:96:55:40:2b:
                    6b:ba:a0:90:de:c4:bb:16:c1:dc:f7:d0:a1:fd:38:
                    cf:67:81:00:14:13:c6:b9:a5:69:a8:e5:e6:99:f5:
                    cb:34:b9:10:13:0f:03:d1:f5:78:05:c8:5c:53:72:
                    00:de:37:07:c4:36:71:01:ee:fb:12:d8:6d:37:45:
                    01:4e:67:27:89:74:1b:89:82:0f:16:62:17:33:b2:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:B5:49:6B:EA:02:77:32:68:04:6D:A8:B5:EF:DF:82:15:93:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:df:c4:e0:bd:51:90:ac:cc:6a:0e:6e:03:55:f2:14:cf:fe:
         81:c8:8e:84:5c:ed:8f:c7:08:d7:75:85:07:1d:8d:2a:54:b4:
         f2:fb:d7:88:7d:30:0a:bc:0a:44:af:d5:8d:7a:79:73:cd:38:
         fe:bf:dc:2f:b3:7b:8e:73:ed:e5:d1:26:1d:d0:80:61:41:58:
         3b:08:df:aa:30:47:cb:f1:28:1a:b5:ce:60:85:58:e2:3b:c7:
         9d:a3:ec:90:48:4b:a3:d2:b9:33:f8:7d:46:56:86:42:c6:c4:
         2c:79:e1:db:5c:fe:6a:f1:bf:62:ab:bb:47:0c:75:28:61:00:
         65:48:a8:f1:33:8c:de:11:ee:0c:51:28:5c:b0:48:26:64:39:
         32:d2:e4:da:78:d7:65:61:e2:08:ff:4a:47:d2:9f:a1:49:f5:
         4c:82:12:ba:5a:e2:83:0e:a0:9c:66:49:fb:5b:b2:63:39:78:
         eb:71:bd:13:df:1e:d6:80:ab:40:d2:ec:77:cf:95:8a:9f:b3:
         9a:a3:78:bd:dd:d9:a8:e2:42:d3:e3:67:2f:9e:aa:a1:4d:67:
         13:e8:c0:4c:6e:f1:c9:93:fc:c3:c7:01:7d:a6:11:41:c9:8f:
         ec:9f:47:52:bb:0c:3d:27:33:7e:c0:3e:6c:a6:4c:56:08:f9:
         b8:53:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:45:16 2025 by rpki-client