Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
File:                     21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa (raw, json)
Hash identifier:          EColBNF90QkWnZ2KHBKDeNnQR+hv6BxzLVSP3TKWEQE=
Subject key identifier:   C5:64:3C:38:4A:0D:18:95:B7:88:47:63:DC:BE:88:6E:F4:C5:ED:2E
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584AECC14C2AC3E9A28B5F33B980
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     400754
IP address blocks:        50.63.4.0/23 maxlen: 24
                          97.74.72.0/22 maxlen: 24
                          97.74.76.0/24 maxlen: 24
                          97.74.112.0/22 maxlen: 24
                          198.71.244.0/22 maxlen: 24
                          198.71.248.0/22 maxlen: 24
                          208.109.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4c:2a:c3:e9:a2:8b:5f:33:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=4ad2a338-483e-43d8-9dd2-69a30ca2838a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:a5:df:ba:b3:59:b1:c8:6f:53:78:ab:72:
                    c2:f9:07:fa:61:46:43:ce:62:77:04:8d:a9:f5:6b:
                    56:f2:dd:a9:21:f5:ff:c8:f9:cf:f7:0d:45:3e:41:
                    95:54:9c:81:e0:0f:06:73:f2:83:e3:b3:e0:d3:87:
                    1f:22:db:ab:7f:7c:71:8a:d9:5a:fb:0b:ff:9d:7f:
                    d5:5d:34:4d:80:c0:b3:01:b9:2e:64:8c:4d:f5:f8:
                    ad:fa:38:27:b0:ec:f8:67:7e:9e:10:b1:6c:dd:11:
                    03:dd:21:6a:43:2e:35:0f:13:16:93:b8:fe:fc:b3:
                    71:14:67:9e:3b:3a:f8:d7:d8:1c:b6:41:7a:ea:7c:
                    11:c9:06:61:bb:af:22:45:58:46:81:40:66:01:6d:
                    21:94:16:25:a9:58:b3:ff:d7:eb:5f:07:80:59:4f:
                    cd:bd:ef:d2:35:05:9e:91:ab:87:48:71:cb:40:10:
                    49:25:73:ac:d1:99:d4:19:45:9c:5a:ad:e4:6b:67:
                    14:7d:96:1c:3a:35:b9:17:9a:72:c9:46:99:7e:16:
                    66:c8:af:96:dc:2b:36:af:fb:8a:53:32:92:fd:2c:
                    1b:14:c2:58:1d:59:f4:55:1d:f4:52:a3:d7:e1:75:
                    67:71:b4:1c:d2:6b:32:8b:4a:e7:12:b1:a6:80:5b:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:3C:38:4A:0D:18:95:B7:88:47:63:DC:BE:88:6E:F4:C5:ED:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/21f4fd80-1779-375e-8e3c-9b50a9e1e2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.63.4.0/23
                  97.74.72.0-97.74.76.255
                  97.74.112.0/22
                  198.71.244.0-198.71.251.255
                  208.109.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:81:2c:63:12:55:48:60:66:ff:08:f4:90:a1:b1:38:fa:3e:
         4a:c0:83:43:1e:fd:21:34:17:95:e4:d8:6b:c6:63:6e:12:4f:
         00:0d:9b:83:ff:5c:d4:04:30:d1:98:a3:4a:b6:cc:3a:31:b6:
         78:f8:27:06:54:49:40:87:c3:e7:c1:e5:7c:d6:a0:40:94:f8:
         f5:1f:d1:f6:04:3d:aa:e8:ad:01:cf:90:09:75:86:dd:e6:f6:
         a4:81:8d:b3:f0:d6:95:f9:87:96:46:a0:6c:35:55:45:4d:b3:
         a6:39:63:16:68:05:53:ad:a5:0c:dc:28:f9:98:2a:bc:3f:53:
         62:4d:88:26:22:37:98:ce:b7:ec:75:e7:fe:0b:c0:a2:2f:15:
         4c:7e:55:de:86:0d:28:c1:5d:27:c4:07:a3:13:56:aa:9b:c6:
         f6:fa:d4:2a:80:67:0d:49:f4:64:1f:54:92:75:a6:95:d5:16:
         d6:18:60:08:47:e6:92:f5:60:c7:7b:fc:b7:81:0b:21:ba:1b:
         20:b9:0d:2a:d3:33:19:37:45:5b:74:46:42:a7:f7:50:6b:ad:
         d7:ee:b5:43:cc:83:5e:f3:35:0f:84:e3:68:e0:b0:37:d4:79:
         ec:c2:b0:9c:e1:31:3a:24:b5:33:7d:ad:f3:d2:c9:0d:0e:09:
         4f:9b:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:42 2025 by rpki-client