Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa
File:                     ed79258b-93bc-34bd-883d-a471ecbc062d.roa (raw, json)
Hash identifier:          z6UwTrcLBBnzEP01OWUwk2LX/rv91IULn7KGNp7j+T8=
Subject key identifier:   FC:0A:57:24:38:49:18:9D:D7:51:7C:AA:45:3A:42:D8:51:19:28:AD
Certificate issuer:       /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial:       010D0C9F4328584ACE0BA1C92C51AF589E684BE0
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     396073
IP address blocks:        104.37.172.0/22 maxlen: 24
                          147.124.208.0/20 maxlen: 24
                          192.30.240.0/23 maxlen: 24
                          198.135.48.0/22 maxlen: 24
                          216.250.248.0/21 maxlen: 24
                          2602:fdb7::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a1:c9:2c:51:af:58:9e:68:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=f22a5ad9-c935-44cb-a9d8-4ba3287720c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:26:2b:a6:e5:3a:2c:f2:80:6d:ff:25:ce:
                    54:ee:8c:16:b3:a6:ae:cb:e7:a5:59:11:36:5c:65:
                    15:2a:e5:46:c7:6b:e7:84:c3:4f:45:33:bb:04:a2:
                    2d:10:b5:22:02:76:c6:2d:07:3a:0d:e3:45:1b:76:
                    c8:13:34:04:39:a4:4f:e0:ef:e4:f6:66:16:65:67:
                    f6:11:90:ef:63:2f:7d:c5:54:36:c3:f5:ab:f7:46:
                    4e:a7:52:e9:7f:6c:83:b8:48:92:8c:bc:11:64:00:
                    2d:45:04:e4:c6:ac:54:91:e0:76:8d:72:60:b1:3a:
                    f6:f0:fd:29:cb:8e:77:2b:72:13:dd:24:ac:21:75:
                    5d:e8:37:a4:8a:c5:16:bc:15:c9:1d:a2:c8:d1:00:
                    95:a1:ca:b1:69:50:fa:d5:58:ee:47:68:97:9a:37:
                    99:1a:af:11:ce:e9:73:04:a8:8b:2f:7a:2e:4b:78:
                    27:81:aa:b1:24:6c:44:25:48:9f:95:5a:b5:0d:dd:
                    f5:c0:31:9b:9c:ee:09:7b:19:6e:56:17:66:44:2e:
                    d5:ef:20:10:b6:e0:ee:de:04:62:68:96:4d:11:80:
                    f2:06:04:d2:da:f6:84:0c:73:5a:5e:f0:7e:cd:b3:
                    05:6c:cd:23:ba:17:2d:a1:ff:9e:43:53:46:93:d5:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:57:24:38:49:18:9D:D7:51:7C:AA:45:3A:42:D8:51:19:28:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/ed79258b-93bc-34bd-883d-a471ecbc062d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl

            X509v3 Authority Key Identifier:
                keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.172.0/22
                  147.124.208.0/20
                  192.30.240.0/23
                  198.135.48.0/22
                  216.250.248.0/21
                IPv6:
                  2602:fdb7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:95:b0:1e:c1:90:5f:af:a8:da:8d:c9:4f:80:07:f2:ed:
         52:a0:dd:fd:53:f1:2a:c9:95:f6:92:ed:b2:df:42:b6:87:ec:
         f3:e8:39:3e:c6:00:47:b2:cb:d1:f8:66:37:27:f9:cf:96:c4:
         75:74:a3:81:ae:9b:b5:0d:37:00:e8:e0:6b:ea:56:ef:7a:24:
         a3:8b:d2:c4:25:d5:f6:7a:5b:d0:aa:f2:c6:fb:a3:43:a4:a7:
         59:5e:ef:52:9f:1d:e5:cd:c9:c9:c7:48:2c:0d:10:72:83:f8:
         ec:5d:b4:5f:fa:47:04:34:06:62:ab:29:bc:4d:19:4d:88:03:
         1c:b9:2c:50:b5:9e:0c:5f:9f:98:28:c0:e1:ca:78:26:59:7d:
         28:3d:b2:a2:4e:93:97:6a:81:97:78:f3:ee:4d:91:d7:f9:71:
         44:62:d6:0a:42:03:46:52:f4:57:a8:d9:23:c1:a7:78:cd:8b:
         33:bf:56:cc:15:5b:b0:d4:bd:36:6b:b4:42:c3:55:26:22:4d:
         e8:16:dc:a3:23:c9:7c:92:0d:0a:5e:1f:35:24:bc:8b:96:13:
         80:33:46:c7:30:52:44:7c:b3:05:5f:a7:17:f4:f5:d0:9c:7c:
         f5:e3:d0:5e:f8:a8:4a:be:05:de:90:4f:0e:e8:05:72:32:25:
         e4:6f:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:34 2025 by rpki-client