Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
File:                     2f128b9d-1500-3392-9a71-877eea156886.roa (raw, json)
Hash identifier:          nHl7zE2IIgsMpiJcKSWlpbT64Jcsi1zI65oJ4dlHQjs=
Subject key identifier:   7E:26:4D:B4:63:19:9F:98:CE:68:2C:EF:BC:8B:8A:5F:05:B4:8C:D5
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584A3A157E36BF91794451890300
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     26496
IP address blocks:        64.13.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7e:36:bf:91:79:44:51:89:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=175f5666-b549-48b3-bb42-b0c96ce7cda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:1f:dd:86:65:ff:cb:8b:f9:45:e3:56:3c:
                    20:66:bf:8b:5d:47:a9:a6:af:46:76:17:d9:c0:ee:
                    c1:25:a6:b2:ec:5d:db:91:46:b4:5a:6c:ac:3a:20:
                    15:49:5f:26:ab:0b:4c:92:c5:a4:46:a1:23:bd:dd:
                    92:62:fb:88:99:cf:a5:da:95:a6:47:8d:f5:30:04:
                    dd:e7:30:cd:21:01:ac:72:92:ca:53:c3:33:88:e4:
                    b6:66:7d:96:89:df:f6:50:df:91:d9:3d:c4:09:b4:
                    be:ec:07:d6:05:02:e4:cc:05:af:39:91:96:f5:49:
                    b0:e5:33:33:10:87:2f:47:43:84:90:c3:56:a5:cf:
                    c8:27:15:57:7e:3a:75:c7:c3:5c:ba:54:1b:24:31:
                    b2:73:51:c5:e1:7c:89:10:b2:69:79:50:6d:79:e3:
                    b2:6d:fc:13:c4:b1:f4:a9:19:2b:41:a6:38:62:66:
                    39:db:ef:a7:9b:ff:0e:b6:ea:94:2b:c7:7a:9b:55:
                    b6:92:53:82:93:61:97:35:22:5b:7d:63:9a:1f:4d:
                    af:71:ea:7a:5a:5b:80:00:ec:c2:99:d3:ef:c6:c2:
                    3f:94:eb:cf:c6:f1:c2:24:6d:bf:24:65:b0:a4:b7:
                    94:5c:a0:26:a8:9b:bc:f4:13:29:53:b6:37:05:d9:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:4D:B4:63:19:9F:98:CE:68:2C:EF:BC:8B:8A:5F:05:B4:8C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/2f128b9d-1500-3392-9a71-877eea156886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:cd:b4:9e:cf:9d:bf:f1:33:67:50:95:55:e0:d5:16:96:
         cd:2d:71:f0:a0:3f:62:cd:ae:13:5e:9e:a6:51:63:7e:2a:03:
         6a:98:c8:5e:ac:9f:fb:b7:22:d3:29:6e:f9:fe:eb:20:41:3a:
         f7:e6:1e:70:20:3a:c6:12:97:43:0a:f4:d4:fa:d0:53:4a:02:
         f7:ce:73:c1:ac:2a:f4:6a:66:44:2c:5c:17:07:9d:13:0d:da:
         f1:42:99:de:2f:83:f1:e4:e9:12:55:67:18:2f:8f:49:63:bf:
         3d:fa:e0:ce:8f:0a:49:78:83:ec:af:20:60:24:24:5a:77:e0:
         61:ab:0f:41:20:3e:5c:16:d9:93:af:d0:ea:ae:f7:ff:2f:2b:
         27:10:59:0e:85:0b:65:5b:ab:5f:ee:c0:fe:cb:22:e8:bf:a9:
         89:ed:c1:7c:61:a3:a4:cb:25:a2:2b:25:07:ec:f3:85:12:11:
         8e:88:27:55:6d:a8:65:6f:d7:5d:ed:d4:96:fe:67:5b:c9:51:
         b6:f2:9b:35:fa:60:2f:5a:5a:62:26:2b:d1:a4:18:f2:c6:70:
         f7:b3:8a:2e:ec:33:85:dd:80:ec:db:df:2f:7a:ce:e4:c8:53:
         f2:47:21:61:68:66:c6:07:9b:80:c9:fd:b1:19:dc:a8:df:45:
         ad:bf:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:18:21 2025 by rpki-client