Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa
File:                     25001385-197b-32c6-85bb-280e83510152.roa (raw, json)
Hash identifier:          GaMvWHzEkLECQiE0HWiQEHGqNm+UZzaX0IB7miOaZfQ=
Subject key identifier:   43:BD:28:86:78:4A:3C:1E:C6:4C:6A:A6:1F:E8:0F:C5:75:FF:D4:0C
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328584A14655F5DCA7BEFCF865804C0
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     63031
IP address blocks:        66.118.48.0/22 maxlen: 24
                          66.187.196.0/22 maxlen: 24
                          130.51.152.0/22 maxlen: 24
                          162.251.112.0/22 maxlen: 24
                          172.110.188.0/22 maxlen: 24
                          192.251.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5f:5d:ca:7b:ef:cf:86:58:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=86e20c25-7ac5-4a46-8078-6c8b8b8f8072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:91:e1:5f:82:e1:b7:2d:2a:4a:f7:e2:d4:
                    6d:a8:51:a9:13:d9:9f:43:be:95:e0:05:2a:f1:a2:
                    90:4d:80:cd:0c:8f:4e:ae:ac:29:b4:33:25:1a:c9:
                    cf:ef:79:0d:74:fd:ad:45:a9:2b:2a:aa:a7:65:4b:
                    87:a1:03:c7:6c:3b:4e:d7:f6:76:8a:49:8f:ed:b9:
                    ba:3d:80:1b:4b:db:1b:ff:03:85:24:7d:c8:ff:6a:
                    c2:c1:4a:1e:83:18:10:10:63:e7:22:ff:b7:1e:df:
                    bf:73:a4:04:41:7e:cc:44:4d:b4:23:f6:a5:15:2f:
                    7b:6c:47:8e:c2:76:b2:e5:71:05:b1:a8:55:b8:f8:
                    9e:f1:df:5a:4e:53:49:14:6f:36:c4:1a:bb:2f:96:
                    89:b3:ec:c7:6b:bf:5c:94:6b:63:6e:cb:48:76:c9:
                    f7:79:c4:49:55:01:64:4e:13:6f:89:9f:b3:c2:e0:
                    84:e1:1e:b5:0e:9a:23:bc:ea:50:78:9d:23:01:0a:
                    e3:27:20:6e:bd:a6:8f:6d:45:dc:71:67:5d:bb:34:
                    8d:bd:c4:15:20:fa:7f:a3:1c:80:36:a9:43:c3:64:
                    c0:09:d8:c7:a0:ba:01:9b:64:a1:f2:07:9b:fc:28:
                    0c:89:3e:7d:cf:ac:a6:0c:f1:7e:2b:ba:13:53:64:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:28:86:78:4A:3C:1E:C6:4C:6A:A6:1F:E8:0F:C5:75:FF:D4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/25001385-197b-32c6-85bb-280e83510152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.48.0/22
                  66.187.196.0/22
                  130.51.152.0/22
                  162.251.112.0/22
                  172.110.188.0/22
                  192.251.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:c4:5e:d1:46:51:b1:c0:57:11:a1:8f:48:cc:84:24:b2:
         c8:91:75:48:d4:ec:39:e4:bd:9d:37:77:d3:38:ff:6d:c9:17:
         d0:e4:89:12:9b:58:00:95:a9:b8:eb:10:46:e9:ed:9e:bd:75:
         d3:24:00:29:b5:7e:ac:ff:09:a4:ab:58:c2:2c:b8:42:b6:4d:
         7a:64:1a:cf:c2:b5:19:a2:f8:13:ea:f4:ea:cb:5b:72:7f:bd:
         b6:c8:c0:28:a2:67:1c:02:0f:38:45:50:43:8c:17:d0:f6:65:
         e5:64:d4:b9:e9:6b:a2:55:84:7d:32:51:97:02:50:51:bc:04:
         6e:25:bf:5d:6d:68:b4:91:56:9e:6e:82:92:de:1b:da:8d:a1:
         58:f2:ea:9f:41:5f:3d:8b:83:42:57:0f:f6:89:a3:e7:b1:45:
         15:9b:e6:92:05:62:20:64:f1:1c:d7:f9:32:7f:10:d4:c0:88:
         84:6f:6f:e0:d8:a6:45:99:37:d4:35:1b:c9:0f:97:80:38:3a:
         9e:c9:7f:51:3d:3d:7f:e8:d8:05:bb:18:37:ce:a0:e7:ef:6b:
         54:b3:62:d6:40:b4:58:59:ed:4b:30:75:ac:dc:2c:40:47:24:
         1b:a4:d1:60:68:3e:77:18:78:c8:96:26:25:c3:58:f3:3f:3c:
         e5:93:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:09:30 2025 by rpki-client