Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
File:                     87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json)
Hash identifier:          f3zKHGQA1A1E4QSTMUiBCq6wW3f49MoQbF5SaBf12h0=
Subject key identifier:   B1:2B:F4:A9:0B:A8:30:08:39:3E:5E:79:13:24:B9:9C:0F:BB:20:03
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F4328584A03A54C84C9EE4D39F51BE49C
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4c:84:c9:ee:4d:39:f5:1b:e4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=d6391b98-1a90-42db-8cf9-2bceb6068ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:91:b4:dc:82:97:b3:cd:ed:e8:a9:4c:85:
                    eb:f8:12:44:a0:fd:d8:12:38:20:28:a6:af:3b:fb:
                    3c:3f:79:ed:25:cf:86:d8:b0:59:55:97:60:cf:c9:
                    2c:36:85:b8:2f:cd:1e:4d:8d:6c:98:e8:e2:3e:bd:
                    f8:0f:dc:f0:1f:98:df:47:1f:76:e6:7f:5e:10:e8:
                    d3:71:e1:ec:a2:f0:10:a4:b7:39:c7:c0:b7:85:7c:
                    48:fc:62:fd:f4:ad:31:55:3d:88:78:0a:44:2d:48:
                    63:43:8b:07:08:7e:17:56:21:ab:ea:82:67:f4:b0:
                    32:4a:b7:ee:5f:78:38:ce:6c:f2:c2:d0:c3:4a:b2:
                    86:33:f2:90:a0:71:ec:41:a5:36:e4:eb:9a:fe:ff:
                    e7:92:8b:a1:e7:85:72:c2:be:76:9d:a9:2f:14:ca:
                    6b:3b:0b:af:43:5d:bf:c5:a7:46:14:35:24:40:89:
                    c3:0c:f5:7d:0b:29:c3:7e:b3:8d:8f:af:2c:72:e0:
                    2a:8a:87:a6:4a:af:35:b1:8f:d3:d9:4a:c7:03:2e:
                    e7:42:89:a1:ae:4f:39:8d:fa:14:f7:78:db:2d:ab:
                    a8:51:e7:0f:49:31:3f:7f:6f:f3:8b:5f:89:03:23:
                    fc:47:81:f1:c8:2c:9f:0b:1b:27:53:0c:0e:a0:60:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:F4:A9:0B:A8:30:08:39:3E:5E:79:13:24:B9:9C:0F:BB:20:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:39:28:b6:db:09:74:eb:9f:51:b3:4f:4f:93:56:67:06:
         83:4c:be:f4:ae:8e:30:7d:38:72:11:cf:09:33:a6:80:93:6b:
         f9:1b:8a:44:68:64:16:86:aa:c9:50:77:f4:81:c3:fd:60:f9:
         58:ac:e2:ab:5b:a8:2f:64:a6:d8:c6:fe:aa:d4:75:76:29:ab:
         c9:c4:dd:44:7a:92:4f:1d:96:7d:29:f9:5d:67:20:8c:84:87:
         b3:d1:41:91:c1:f8:88:71:a8:28:bd:c5:d3:a7:e5:12:6d:85:
         d1:93:46:85:ce:7c:54:34:5f:34:34:c2:d0:f2:11:41:c3:1f:
         c5:e2:01:b6:1d:ee:da:80:1c:93:9a:45:59:7c:be:b7:a7:41:
         a5:b1:70:8a:1f:87:bb:5b:fa:7e:69:1f:d4:39:0e:8d:0f:07:
         67:cd:57:f7:c3:19:71:3d:49:58:56:48:e3:7b:35:04:24:84:
         72:79:ba:2d:59:f0:98:d9:77:da:22:ee:7a:24:26:a7:ed:f7:
         04:bf:25:4c:1a:c3:2b:60:40:4d:f9:fc:e9:e7:bb:7c:ee:ce:
         0a:22:12:3a:5b:49:ea:f8:ea:a3:48:d0:a3:d9:46:10:7e:64:
         6d:87:02:d3:90:4c:2f:33:f1:bc:93:cd:88:7e:00:e3:fa:07:
         5f:b4:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:39:28 2025 by rpki-client