Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa
File:                     f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa (raw, json)
Hash identifier:          854LM6uWNBe1QEZ1ukmfhnLi1SUigBglKLCI9PV1Xbg=
Subject key identifier:   3C:EE:AC:D9:40:05:A7:5C:51:F2:E6:51:B4:A3:42:21:70:D1:AD:34
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584A51D0755DA0EA9BF9FF92F200
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     63178
IP address blocks:        67.22.208.0/21 maxlen: 24
                          67.22.216.0/22 maxlen: 24
                          67.22.220.0/24 maxlen: 24
                          209.51.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:75:5d:a0:ea:9b:f9:ff:92:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=ffe60874-dc21-40b5-b3b6-7686296da2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:9c:6a:c5:65:6f:4e:cd:c7:16:75:42:6b:
                    86:f1:04:a8:58:b6:3b:9d:4e:e9:9d:0b:f2:64:42:
                    db:63:ee:b4:67:dc:87:da:ff:8c:7b:d4:97:fa:59:
                    30:65:41:e6:42:dd:d4:96:4d:2b:0c:45:a9:b3:2a:
                    bd:3a:9f:de:1d:de:05:22:79:4e:18:e3:d2:23:82:
                    8d:01:c0:b4:eb:d9:6e:e3:9e:d9:1f:71:06:73:11:
                    1e:4f:8f:06:94:3b:e6:45:86:53:09:cd:0e:13:2a:
                    c7:30:e8:dd:80:eb:c0:f9:79:d9:4b:17:08:ce:35:
                    1c:cb:06:ea:e4:34:47:4c:18:43:91:92:4e:e6:ed:
                    33:33:ee:5e:f6:ee:96:f9:31:f6:d8:ba:cc:88:05:
                    db:ed:b0:e0:04:5b:03:70:40:25:31:b8:6e:7c:69:
                    02:1e:71:28:82:01:93:e8:a6:23:a4:bf:e0:2a:4a:
                    6c:1a:cf:90:41:e6:8c:1c:9e:f3:8a:9c:66:45:b8:
                    32:01:2f:c1:e4:c0:cb:ac:e9:bd:1a:09:01:5d:05:
                    e9:43:ac:df:fa:ab:32:8b:e0:f9:bc:fe:cf:ce:6d:
                    ad:03:1c:67:43:45:b1:2f:0f:ca:77:3e:6b:06:31:
                    65:6a:c1:5c:78:06:15:e7:ea:42:e4:ec:56:1e:66:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:AC:D9:40:05:A7:5C:51:F2:E6:51:B4:A3:42:21:70:D1:AD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f96cc3b6-7b4c-3c64-a473-269727e8bee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.208.0-67.22.220.255
                  209.51.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:46:6c:a9:10:43:94:00:8c:40:84:f3:e3:d7:04:92:48:
         fd:48:35:aa:e3:2d:d9:fc:43:83:c2:d0:5c:1f:ca:96:48:22:
         42:c4:89:fc:9b:36:d0:0c:c7:cf:26:7e:e5:af:50:72:55:43:
         08:5d:75:db:d3:e4:5b:13:d6:52:91:3f:86:13:4e:30:54:b6:
         ea:d6:63:4b:ce:84:48:12:a3:78:d4:44:fb:ff:ee:e4:2e:99:
         5a:c0:a4:ac:dd:b0:02:d7:d7:b0:04:d0:b2:57:6a:5b:c9:bb:
         f6:2b:73:73:60:1d:ae:80:38:aa:2b:5a:73:04:ff:40:97:82:
         ac:54:31:b1:04:07:65:62:21:e1:26:fa:5f:50:4e:4a:ae:71:
         49:c2:cc:b0:ba:a4:99:a4:77:2f:b3:f0:a8:ca:65:a3:40:0b:
         27:e4:4a:e8:b1:e9:f9:8f:68:ac:af:46:9c:b8:a0:c6:62:95:
         d0:62:81:54:e3:12:c7:ec:55:3c:33:0d:eb:41:6d:6d:66:9c:
         01:7a:05:95:96:2f:5e:f6:05:ad:e2:f5:14:67:96:a5:e2:11:
         48:0f:b0:ef:10:f1:f5:46:3f:e2:0c:28:32:7d:26:44:68:4e:
         85:9a:a6:a7:14:96:64:93:a9:93:f5:82:fb:1d:ff:6d:87:a5:
         bc:37:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:07:04 2025 by rpki-client