Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
File:                     4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json)
Hash identifier:          JUZrPQsOyCbPpodSFqWdy8dYv7hQAtNfkGz0USL8vvA=
Subject key identifier:   D0:00:88:42:E5:2A:C3:D4:0F:6C:D5:FD:DA:5F:51:DB:97:0E:01:BD
Certificate issuer:       /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Certificate serial:       010D0C9F43285849E22535883C7D246E248CDBE0
Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     394875
IP address blocks:        52.144.25.0/24 maxlen: 24
                          2620:f9:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:35:88:3c:7d:24:6e:24:8c:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0917f8ce-419f-4085-bb07-52b25eb2c5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:05:e9:e8:81:fb:12:98:32:bc:4f:95:2f:
                    42:cc:05:20:1e:6c:56:b2:13:ab:ba:fc:ce:29:1b:
                    7f:ad:c9:66:62:a5:37:cf:32:57:69:fe:1b:8d:b4:
                    76:6a:ab:60:4d:8b:48:e6:a7:a5:60:42:86:25:93:
                    7e:72:cc:03:fc:9e:b8:52:d5:69:06:14:d8:55:1e:
                    31:4c:79:ed:ba:c3:bd:ec:25:f2:37:ac:91:95:1e:
                    67:6a:1f:86:07:55:1c:53:e1:aa:16:7f:72:24:6b:
                    9b:46:6e:78:86:b0:85:c3:43:38:fc:37:71:b6:fa:
                    a9:04:07:15:b0:34:37:31:be:9d:82:ec:6d:7e:d0:
                    b5:ec:6c:5a:62:53:89:08:82:e2:34:3e:81:3f:74:
                    77:c2:16:01:c8:7f:59:88:09:00:ce:ab:75:45:c8:
                    5a:51:86:dd:ea:f4:a7:c1:54:28:e0:36:9c:69:31:
                    dc:2c:d4:c7:0b:39:7e:fd:c4:b7:3b:a5:c1:ee:53:
                    62:3a:2e:8b:73:72:61:fc:79:7e:15:a3:0c:1d:c3:
                    10:4d:67:b6:67:60:e6:93:7e:7b:8c:74:2e:f7:3f:
                    ee:a1:00:72:05:2c:fc:9f:96:26:d3:b9:d6:29:68:
                    0f:0c:93:e3:78:fe:99:c4:e7:31:46:c4:6f:34:40:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:00:88:42:E5:2A:C3:D4:0F:6C:D5:FD:DA:5F:51:DB:97:0E:01:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl

            X509v3 Authority Key Identifier:
                keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.25.0/24
                IPv6:
                  2620:f9:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:37:30:00:22:7c:1e:24:a6:52:12:6e:c4:da:e1:3b:a3:8f:
         8f:47:93:19:de:33:56:54:c9:28:61:e8:4c:5f:cf:96:ab:b1:
         c0:22:1c:95:48:ef:3d:50:b8:a8:c3:c8:e6:05:0d:27:2a:ce:
         84:d1:92:e9:94:a8:b4:c9:14:50:33:59:e4:1c:38:9d:eb:67:
         41:87:e3:04:a3:f6:4f:1f:d5:3e:40:c7:69:bf:d8:19:f1:30:
         d4:22:9c:32:68:cd:bb:44:d5:00:e2:e2:4f:c6:64:75:63:24:
         d5:df:e9:60:87:16:0c:95:42:1f:e3:5c:94:a9:3a:f6:7b:15:
         2c:fa:c1:4a:d9:04:65:d2:fa:aa:8c:ea:2d:74:fe:53:78:1e:
         6d:69:e1:49:ed:04:b3:51:38:f1:c6:b4:7a:5e:1c:1b:54:32:
         b5:d2:65:5c:c8:2b:c6:62:8e:54:06:90:3f:71:be:02:a9:75:
         68:a7:c5:a6:f8:f0:ad:40:ac:5e:50:6b:3e:71:8f:42:c7:eb:
         15:76:6f:6c:8b:ee:f8:cb:12:40:c5:a1:72:6a:16:1b:ee:e5:
         d7:e4:a3:03:d6:05:41:05:89:cf:39:b6:d6:c6:49:cd:18:52:
         a3:4f:4a:1a:a9:c0:eb:d6:28:cb:cd:5c:e6:fa:dc:8d:df:dd:
         7f:2b:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:41:46 2025 by rpki-client