Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa
File:                     094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json)
Hash identifier:          mEHV/zQpRWWi6MBZk2U3wC802OywX6GlXmKUrqKIzX8=
Subject key identifier:   AF:C8:A9:5C:40:A0:66:B8:46:9C:90:31:22:20:1E:36:5E:9F:78:78
Certificate issuer:       /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
Certificate serial:       010D0C9F4328584AE196750E9F2193B90D604A40
Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20283
IP address blocks:        64.90.64.0/19 maxlen: 24
                          68.170.112.0/20 maxlen: 20
                          69.168.240.0/20 maxlen: 24
                          161.199.130.0/24 maxlen: 24
                          167.94.42.0/23 maxlen: 23
                          167.94.52.0/23 maxlen: 23
                          167.94.62.0/23 maxlen: 23
                          167.94.76.0/23 maxlen: 23
                          172.87.0.0/20 maxlen: 21
                          199.59.116.0/22 maxlen: 22
                          205.214.160.0/20 maxlen: 20
                          209.212.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:75:0e:9f:21:93:b9:0d:60:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=75690b0d-e291-4566-ab65-b83a4b99e2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:c5:99:fe:ad:c5:a3:ad:e9:7e:de:0a:3e:
                    d8:64:d2:fc:3b:f9:07:20:f5:9d:b3:82:7c:f8:fb:
                    0d:72:83:fb:9c:ed:fd:26:fb:0a:7d:a7:ad:ca:d0:
                    b4:c0:6f:67:52:16:f1:0b:f1:10:67:46:ed:6e:89:
                    47:45:b1:f4:ed:06:ec:76:bf:ce:30:85:eb:88:93:
                    f6:b4:48:6d:27:88:32:7a:1a:88:a3:a5:c9:42:eb:
                    a3:31:3a:e8:a2:83:d9:ab:db:07:29:bc:33:62:9c:
                    f3:22:26:6c:b2:08:ec:c7:63:3d:2a:e7:dc:ee:c0:
                    93:f2:17:9f:c8:f4:e9:3b:17:4a:1f:94:c6:ab:47:
                    50:ea:a0:c5:82:a9:14:9e:05:d4:57:50:5b:8b:16:
                    4e:ca:9f:58:91:f3:68:ce:dd:e9:cf:44:54:45:25:
                    ab:b4:13:c9:66:2f:e7:64:50:09:3e:09:97:aa:e4:
                    9b:fe:bd:93:6a:e8:a1:4d:2e:ee:12:f8:d0:12:09:
                    d4:e7:46:75:28:31:4c:27:c0:ee:85:20:66:3f:d3:
                    78:5b:60:6b:96:21:cc:1d:e5:ec:e0:33:8c:a8:b4:
                    ad:c5:8a:2c:cc:41:09:05:27:11:0f:06:b7:9e:ac:
                    a7:1b:1a:f6:99:fc:8a:ef:2d:4a:8d:84:fd:54:95:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:A9:5C:40:A0:66:B8:46:9C:90:31:22:20:1E:36:5E:9F:78:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl

            X509v3 Authority Key Identifier:
                keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.64.0/19
                  68.170.112.0/20
                  69.168.240.0/20
                  161.199.130.0/24
                  167.94.42.0/23
                  167.94.52.0/23
                  167.94.62.0/23
                  167.94.76.0/23
                  172.87.0.0/20
                  199.59.116.0/22
                  205.214.160.0/20
                  209.212.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:98:8e:51:f7:8c:c0:fe:3e:23:88:c4:3d:b6:60:20:b4:1d:
         db:a4:6f:4a:cf:6b:07:18:ac:f9:92:2e:12:29:d9:c0:34:d4:
         24:a5:2d:10:dd:ca:9c:19:cd:cf:16:14:2a:de:7a:34:02:6b:
         eb:44:d2:05:89:07:26:38:18:92:37:b9:44:19:87:db:0e:8a:
         58:7a:a0:44:65:e9:ab:bc:16:4d:5e:6c:34:9d:16:e4:3f:88:
         a5:b3:82:e9:22:96:0b:ca:e9:ab:68:91:e6:90:01:3f:00:01:
         4c:c2:e6:bb:72:5a:ab:04:58:a3:e6:30:e9:59:98:7c:de:a2:
         7c:af:f0:87:e5:8f:4f:81:ab:7b:03:ca:6a:f3:12:44:de:01:
         eb:14:88:65:8c:ba:bb:a5:4a:90:10:f3:7f:8b:83:be:22:1e:
         ef:2a:28:1d:84:c4:6a:01:dc:be:0d:de:14:d9:8e:ae:92:aa:
         4d:d8:93:3d:ad:cc:07:f9:a0:7b:22:21:6b:71:11:10:74:28:
         cd:7f:6e:54:32:21:f2:ba:69:dd:04:20:fb:54:07:91:6a:b0:
         87:46:bb:38:5d:2b:d6:97:e7:cb:50:e5:cb:e5:c6:df:e2:5a:
         01:da:e9:48:24:23:79:1c:4a:7e:a6:05:a4:fb:d3:a9:16:e1:
         9f:1d:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:59:02 2025 by rpki-client