Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
File:                     6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa (raw, json)
Hash identifier:          aiGzflWELYroE3rLRJn0ZFK+2Jk87ry0WbK+qwZS3Ro=
Subject key identifier:   0C:B4:1F:1E:F4:1F:53:CC:AF:98:C5:D6:10:0C:DB:D4:EC:AE:85:FD
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328584A3B7AEFBF96792E6E8E55C0A0
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     10958
IP address blocks:        147.161.4.0/22 maxlen: 32
                          162.216.108.0/22 maxlen: 32
                          162.216.208.0/21 maxlen: 32
                          198.62.181.0/24 maxlen: 32
                          208.68.56.0/22 maxlen: 32
                          208.80.144.0/21 maxlen: 32
                          208.91.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ef:bf:96:79:2e:6e:8e:55:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=bc93788b-e881-495e-a7fd-8219238564e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:d9:9e:91:d1:c9:1c:fa:46:93:5f:f7:df:
                    6d:03:f1:e9:c3:bb:27:8d:5f:0f:6e:58:2f:be:81:
                    44:fa:cf:39:bf:04:04:cf:b3:6b:e0:c2:59:d2:33:
                    e3:2e:53:a7:c1:1c:ff:ca:ff:97:db:7b:5a:61:57:
                    5f:71:92:eb:81:2e:5e:35:03:9a:5a:da:95:9a:25:
                    8a:89:0b:4c:49:e9:d2:86:1b:d0:0b:ab:a6:e1:b7:
                    75:05:02:40:cd:2e:f5:fb:fd:3d:a4:5e:36:8c:1a:
                    a5:66:e5:9e:df:17:fb:f2:38:47:7b:3f:8d:1a:31:
                    d4:36:8d:35:fb:46:90:d9:20:85:df:df:e4:4e:5c:
                    57:77:87:a0:90:c6:79:80:a2:e0:2e:3b:7f:3a:09:
                    b2:b8:d9:b5:fc:f4:d7:1b:db:ad:0c:85:b2:8d:61:
                    dd:72:5e:67:c2:43:84:72:17:10:25:a6:7f:b1:d3:
                    f2:c8:9b:57:14:d7:a7:1d:2c:80:cc:86:f0:93:0e:
                    cb:76:13:98:33:97:8f:2b:fd:fd:fb:88:07:92:df:
                    8f:23:40:96:ae:85:01:f4:8e:bd:e4:b2:1a:13:65:
                    a1:f1:f1:e4:fa:88:12:51:db:b5:08:8f:25:0e:a5:
                    25:05:9e:ff:ae:cc:b4:57:2c:64:9f:eb:95:f8:d5:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:1F:1E:F4:1F:53:CC:AF:98:C5:D6:10:0C:DB:D4:EC:AE:85:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/6bbc85fd-c9a6-3fe6-a0ad-ac878b243f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:5c:6d:03:38:1a:21:4c:f0:43:ce:b8:f4:03:f4:37:b0:
         08:44:20:0b:dc:8f:e2:e8:3c:c6:e7:f2:eb:8a:a8:44:3c:00:
         c3:a4:e0:d5:0a:a2:e2:84:99:05:64:09:cc:67:5d:75:fc:90:
         bc:e9:0d:85:81:6f:b8:62:af:10:f3:21:a8:0b:7b:33:f9:4e:
         8d:97:e3:00:73:ee:8a:2b:02:3c:7b:e9:02:00:4d:59:24:24:
         d4:03:b1:34:f1:2b:d1:5d:ed:ea:13:c1:f5:f5:f1:ac:a1:d5:
         5b:3b:9b:a8:f1:b6:1a:18:e6:fb:6a:ac:f1:08:3d:d3:0a:1d:
         10:39:da:3e:d5:29:52:3b:ee:7e:89:25:48:9d:8e:ec:99:dd:
         0f:d3:99:35:2b:8e:4a:28:37:93:09:69:b1:4c:4c:7b:be:a9:
         7e:ac:e2:85:55:1e:6a:1e:ba:85:01:07:28:3e:31:f3:97:c2:
         c5:f6:be:65:78:f2:d7:3a:d4:84:a7:b1:eb:74:7f:a3:e9:41:
         a0:69:ba:82:dc:24:94:83:64:ff:e4:40:83:91:2c:53:9e:8a:
         fa:35:d1:34:27:e3:fd:38:71:df:eb:8b:31:57:c9:ff:1d:56:
         f2:83:06:af:e5:eb:66:a7:66:ac:db:f4:16:97:85:2a:46:5e:
         53:4b:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:51:33 2025 by rpki-client