Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
File:                     70def14d-b4f6-3eef-92c8-38c6768c3263.roa (raw, json)
Hash identifier:          Qseri7/A1X3grkaT37+3UaPCXBIcwz9O0XRXi7yrtsE=
Subject key identifier:   1A:F5:BF:0B:78:F1:5A:9D:15:C5:6C:A3:0D:F3:95:14:90:E6:07:C8
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584A4AD59542B9F2B94D35C9D700
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     53488
IP address blocks:        24.246.128.0/18 maxlen: 24
                          64.127.208.0/20 maxlen: 24
                          173.246.192.0/20 maxlen: 24
                          173.246.208.0/21 maxlen: 24
                          173.246.216.0/23 maxlen: 24
                          173.246.222.0/23 maxlen: 24
                          198.185.218.0/23 maxlen: 24
                          205.236.71.0/24 maxlen: 24
                          216.116.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:95:42:b9:f2:b9:4d:35:c9:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=4e807ef9-c08a-45a7-a70c-e53ef48090ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:f4:e9:59:10:f9:db:ef:11:5f:bd:4c:8e:
                    a2:60:db:b3:17:af:43:41:39:59:fd:57:a7:22:3d:
                    6a:ba:b3:43:00:ab:41:3e:7c:a6:a2:3f:37:9b:d0:
                    da:ec:39:a9:fa:9a:47:ff:9a:78:43:e3:d8:0e:cf:
                    59:44:5b:72:21:7c:9f:ff:89:f9:a0:f5:2a:5b:63:
                    7d:32:99:7c:a7:4e:37:40:8b:b1:57:32:9d:55:77:
                    ad:92:2c:08:49:ec:17:a1:de:32:cf:85:5b:31:cb:
                    46:3b:a2:b0:e5:3c:bd:09:e3:de:95:53:bd:d3:5a:
                    d9:5f:08:ec:d8:f7:c0:5d:4b:d5:dc:ed:88:d2:d2:
                    e3:93:f7:62:9a:83:be:d8:b3:2d:85:d7:57:0f:7e:
                    33:33:da:18:3e:40:c7:ce:da:71:04:f9:21:66:b2:
                    53:05:13:2d:22:8e:31:c8:e7:ce:25:3b:3b:50:1b:
                    e2:59:da:72:4e:90:4b:43:03:ba:78:d1:fd:24:b0:
                    9b:e3:44:ba:48:6a:1e:2a:53:13:7a:1a:26:c7:42:
                    73:c5:5b:66:7b:3b:b2:35:75:d2:4a:b1:35:f6:87:
                    9f:00:6f:73:ea:71:a2:d7:b4:df:9d:a0:4c:f3:6f:
                    51:46:62:5a:cd:21:d6:10:82:61:59:a6:e6:f9:4f:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:BF:0B:78:F1:5A:9D:15:C5:6C:A3:0D:F3:95:14:90:E6:07:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.128.0/18
                  64.127.208.0/20
                  173.246.192.0-173.246.217.255
                  173.246.222.0/23
                  198.185.218.0/23
                  205.236.71.0/24
                  216.116.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:39:57:b2:74:fc:fb:f4:1f:ee:68:39:6e:7d:9b:1b:9d:
         4c:d9:05:b8:3c:1e:2d:8a:b3:94:b0:83:77:4b:a0:4a:6c:f2:
         c5:61:41:26:f4:91:c8:c1:67:07:94:c2:47:7c:b4:52:d8:0d:
         1f:34:89:fc:4a:82:03:28:64:ab:19:29:70:2c:84:d9:6e:c6:
         d2:e0:72:d3:b8:07:5e:c0:9a:ad:36:4b:e2:24:6b:f2:37:1f:
         db:70:1d:2b:99:fc:be:29:fe:ba:b7:e1:5a:fd:ba:00:de:20:
         61:92:ce:9a:5e:a5:cb:ca:27:2a:7b:24:56:b0:13:6d:af:69:
         a2:95:53:57:41:f6:13:1e:ce:96:4d:da:d2:1f:46:bc:5c:3e:
         77:34:f1:69:a5:ad:7c:3e:db:bf:a5:07:be:cb:f0:2c:cb:79:
         65:19:b8:8c:d6:d3:23:fc:09:4f:50:75:e5:12:bb:5d:df:75:
         b7:b8:fc:39:b9:62:f2:32:29:cc:90:0e:e3:6d:b2:b8:f4:b3:
         1d:94:8c:bc:93:64:7c:81:a1:3e:e3:b1:ea:f3:1d:9c:f8:c4:
         99:9c:07:e3:73:c3:c9:08:7d:f4:69:e6:48:e0:d9:0c:24:c9:
         e9:ad:9f:67:88:2b:b9:5c:66:93:bd:d0:71:bf:99:95:2c:56:
         08:a3:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:41:31 2025 by rpki-client