Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa
File:                     61883e41-ed64-3b70-9b28-c4b07d755075.roa (raw, json)
Hash identifier:          UZpsFcKNkWOKsFEYvYBnGOU3V9zHS0m1PEbJdhNQ2jk=
Subject key identifier:   2C:83:C9:D5:6D:48:B8:41:A1:80:5F:92:67:9C:B9:51:8D:08:7B:CB
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584AD9124DEAC6878E70F864C70C
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa
Signing time:             Tue 17 Jun 2025 10:56:48 +0000
ROA not before:           Tue 17 Jun 2025 10:56:48 +0000
ROA not after:            Mon 15 Sep 2025 10:56:48 +0000
asID:                     53340
IP address blocks:        76.164.234.0/23 maxlen: 24
                          104.225.134.0/24 maxlen: 24
                          104.225.250.0/23 maxlen: 24
                          162.249.226.0/24 maxlen: 24
                          162.251.232.0/21 maxlen: 24
                          172.93.0.0/23 maxlen: 24
                          192.228.96.0/23 maxlen: 24
                          192.228.100.0/23 maxlen: 24
                          192.228.105.0/24 maxlen: 24
                          192.228.106.0/24 maxlen: 24
                          192.228.108.0/23 maxlen: 24
                          199.19.76.0/23 maxlen: 24
                          199.47.208.0/22 maxlen: 24
                          199.127.56.0/22 maxlen: 24
                          199.241.142.0/23 maxlen: 24
                          204.77.6.0/23 maxlen: 24
                          204.77.14.0/24 maxlen: 24
                          2604:2280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:12:4d:ea:c6:87:8e:70:f8:64:c7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Jun 17 10:56:48 2025 GMT
            Not After : Sep 15 10:56:48 2025 GMT
        Subject: CN=fe70db26-3a80-405e-8f0f-122cd60c9e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:28:f7:89:e3:bc:64:ca:e0:e9:b6:a3:47:
                    93:e0:a0:0f:d9:f4:07:b0:78:61:a3:e5:f1:3e:73:
                    5d:2b:6b:fd:3a:8f:36:36:f2:fc:95:7a:a5:28:84:
                    b7:e0:83:93:d7:0d:1d:fd:b9:fa:b4:20:28:80:2a:
                    a5:c0:09:29:f6:74:3f:19:bc:6c:58:b6:4b:ea:41:
                    8a:b8:c3:5f:41:81:02:ca:0b:81:ab:0a:12:1e:72:
                    bd:3d:e4:9b:c5:30:32:d3:64:5a:6d:50:9c:44:5c:
                    a5:c3:06:43:64:de:73:38:59:88:6f:1f:07:41:dd:
                    44:4b:3b:d6:4c:19:71:f5:e9:9b:16:8e:1b:f2:eb:
                    06:2f:9d:5c:87:ef:eb:4e:db:e4:47:46:10:30:8e:
                    78:e3:48:65:67:2a:b1:ab:5a:d9:30:72:48:f7:f0:
                    84:b7:e9:bc:a7:47:a1:ef:5d:1e:eb:e8:9e:37:7c:
                    01:4d:47:aa:58:78:51:e8:da:82:15:a4:66:ec:26:
                    2b:16:77:b5:86:9e:af:1a:46:72:50:f5:6e:54:9c:
                    6c:90:0a:e6:86:46:20:0a:77:e5:80:75:f5:96:36:
                    27:4a:ad:5e:26:81:35:f1:76:71:26:58:fc:d3:81:
                    a0:22:39:bb:2d:fd:8d:6e:21:d8:ee:5b:3e:27:2d:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:C9:D5:6D:48:B8:41:A1:80:5F:92:67:9C:B9:51:8D:08:7B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/61883e41-ed64-3b70-9b28-c4b07d755075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.234.0/23
                  104.225.134.0/24
                  104.225.250.0/23
                  162.249.226.0/24
                  162.251.232.0/21
                  172.93.0.0/23
                  192.228.96.0/23
                  192.228.100.0/23
                  192.228.105.0-192.228.106.255
                  192.228.108.0/23
                  199.19.76.0/23
                  199.47.208.0/22
                  199.127.56.0/22
                  199.241.142.0/23
                  204.77.6.0/23
                  204.77.14.0/24
                IPv6:
                  2604:2280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:08:65:5a:36:c1:6c:ed:b2:3c:5b:c7:26:2b:7b:6b:16:
         46:cc:8b:1d:fe:27:72:e3:eb:9c:77:ae:24:d0:d2:2b:6c:20:
         b6:13:0d:ac:c7:8b:35:27:fb:92:12:9a:77:df:ed:01:1b:3f:
         8e:d0:19:ac:e8:18:ed:99:e3:90:f6:df:e5:9e:4a:43:a4:79:
         42:63:a9:2c:2e:ba:1c:33:21:35:34:f5:03:a6:55:e6:b1:3f:
         6e:f6:0e:e7:1a:43:59:ce:43:2f:88:aa:d8:85:ee:ae:f8:6b:
         97:a1:9c:11:e6:b8:e8:fc:eb:13:63:59:38:5d:9f:93:d3:42:
         bc:3a:da:db:22:dc:99:06:e8:25:d9:55:53:17:11:ca:df:6f:
         1a:64:fe:07:9c:35:a8:33:47:91:b6:f8:c1:b1:fa:3d:5d:cb:
         94:a3:5a:9f:e9:97:41:ba:29:83:b6:8e:3f:64:51:71:fc:4e:
         c9:eb:d2:68:6a:91:15:73:7d:2b:a9:c5:c2:28:c3:15:06:71:
         55:ff:a1:08:17:ec:f3:d6:3b:08:d4:6c:19:4f:e9:e5:d5:5b:
         36:01:cf:c0:0a:e1:e3:76:e9:dc:e6:d6:04:5a:a8:50:d4:d9:
         11:2a:23:af:8a:16:99:bb:e6:b9:1d:f3:1f:c1:29:ca:83:1e:
         0d:53:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:38:02 2025 by rpki-client