Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
File:                     87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json)
Hash identifier:          2osoyKAYHcq1A6E02CfcemyIkNK9/sbRO0fuWgiDhBs=
Subject key identifier:   B6:D7:51:EE:8E:DE:72:6F:9F:9E:4F:94:A8:A9:29:34:C1:1F:E4:EB
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F4328584A374AD563FA46A205E40E8EE0
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     1299
IP address blocks:        72.251.128.0/19 maxlen: 24
                          158.62.224.0/19 maxlen: 24
                          209.25.224.0/21 maxlen: 24
                          2605:d2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d5:63:fa:46:a2:05:e4:0e:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=c6281bf9-7eac-43f0-a5da-31d6e6733fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:5c:7f:46:b4:66:85:2c:4d:39:49:8d:5e:
                    ec:31:48:2d:35:9b:4f:e3:50:ae:23:89:3e:6d:19:
                    00:2c:b5:b1:31:d3:d6:59:c8:4b:c4:83:bb:19:98:
                    47:a9:f0:3e:3d:1b:87:16:88:ca:47:43:46:04:f8:
                    15:f7:01:ff:14:56:c5:0f:17:a0:b7:c7:24:13:48:
                    3e:ec:53:6e:2b:21:aa:8c:94:e3:e3:52:f6:75:45:
                    d4:fa:c5:96:af:49:69:0f:7d:7e:b2:34:68:f1:b5:
                    00:ef:15:cd:98:7e:e3:76:17:3a:24:96:25:02:74:
                    95:31:8e:1d:b8:e8:ca:37:11:77:a2:5c:28:24:56:
                    38:ef:bd:d6:a9:62:6f:9a:ab:6a:5e:ae:6e:e3:8a:
                    34:4c:f9:2c:0b:40:67:e2:00:d7:37:60:62:90:79:
                    df:f9:d8:41:0d:ab:da:d1:97:75:d6:2b:40:7a:5f:
                    76:e6:48:c0:9c:7f:14:56:fe:b2:06:c2:78:f2:35:
                    0b:1b:bd:84:46:c0:cc:89:80:03:cd:bc:d9:cc:7d:
                    ee:95:e3:92:3b:40:95:27:96:c3:54:bd:e3:c7:23:
                    bf:61:7a:c6:0c:84:fa:cb:69:44:46:14:f8:f1:c8:
                    93:5b:d4:fe:34:5b:b5:8f:65:de:92:1d:ca:0a:1d:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:51:EE:8E:DE:72:6F:9F:9E:4F:94:A8:A9:29:34:C1:1F:E4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.128.0/19
                  158.62.224.0/19
                  209.25.224.0/21
                IPv6:
                  2605:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:d0:34:bf:9d:17:42:c1:04:e1:e0:6e:93:28:27:bc:3b:
         45:4c:c0:d4:db:e3:3c:5d:f2:6d:6a:b4:23:01:b0:92:4f:2c:
         f9:e0:3d:6d:ff:fe:49:c6:38:e6:61:5f:7f:f6:7a:0f:f9:fc:
         a8:dc:cc:86:b9:a4:32:5f:b6:0c:67:d8:65:bf:4d:30:63:7f:
         0c:fe:1c:dc:2d:a6:d7:ad:20:d2:00:e9:33:37:44:95:95:37:
         b4:95:5d:77:98:f2:5a:81:eb:a6:ca:f4:0b:51:b0:67:fd:19:
         9a:dd:24:c1:b4:3f:d6:02:e5:b1:89:29:b4:8d:17:06:f9:72:
         bf:5a:d9:f1:52:ec:75:db:01:f2:a3:24:d8:ba:64:6c:3a:d7:
         b2:db:6f:55:8c:05:07:df:d8:84:6a:8e:f9:e6:55:9e:89:3f:
         52:e4:71:3a:74:6b:3c:9b:88:3a:ff:9e:41:12:17:e8:06:1f:
         c2:41:ae:94:6f:a4:24:ad:06:06:b6:3a:16:ed:cf:22:a0:0a:
         e1:9a:e2:b4:64:1b:ec:d3:3a:6c:80:fb:34:d3:c8:ee:f6:23:
         e4:c7:15:c3:d7:f3:b9:3f:94:bb:3b:70:73:dd:25:0f:e6:72:
         58:a3:f5:cd:26:69:fa:b4:c5:6f:42:e7:73:f4:ec:a8:05:ca:
         2e:35:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:23:37 2025 by rpki-client