Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
File:                     1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa (raw, json)
Hash identifier:          LZaU8wNCQnQ+zF6IvA83FDwnpZ63Op6JBnEbSr8uvJw=
Subject key identifier:   20:F4:92:76:F5:06:DB:CA:21:34:05:F6:DD:99:A9:66:A1:4E:AB:50
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584A4F05C6AF69CAD114492E3000
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     46261
IP address blocks:        23.190.80.0/21 maxlen: 32
                          45.43.192.0/19 maxlen: 32
                          64.187.224.0/20 maxlen: 32
                          104.153.80.0/22 maxlen: 32
                          104.166.64.0/19 maxlen: 32
                          104.247.192.0/19 maxlen: 32
                          107.161.112.0/20 maxlen: 32
                          137.83.79.0/24 maxlen: 32
                          144.208.91.0/24 maxlen: 32
                          160.202.64.0/18 maxlen: 32
                          162.210.36.0/22 maxlen: 32
                          162.217.172.0/22 maxlen: 32
                          162.219.24.0/21 maxlen: 32
                          162.223.28.0/22 maxlen: 32
                          162.244.132.0/22 maxlen: 32
                          162.248.208.0/21 maxlen: 32
                          170.75.144.0/20 maxlen: 32
                          172.82.128.0/18 maxlen: 32
                          199.101.96.0/21 maxlen: 32
                          199.233.232.0/21 maxlen: 32
                          216.115.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:af:69:ca:d1:14:49:2e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=ac947375-2de3-41b8-a871-7d81a97da365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:4c:56:ed:7f:4d:d3:24:fb:b8:0f:09:d3:
                    3d:7d:1b:c1:21:fb:f5:bd:da:9e:b0:9f:5a:41:e8:
                    12:c4:51:6d:ab:d6:55:82:c9:fd:72:ac:a3:65:82:
                    49:ba:bb:3e:13:0f:e4:0e:f0:39:e5:cb:0d:40:a1:
                    f7:4e:aa:5b:39:71:d6:fc:ba:b8:fd:04:44:1f:06:
                    8b:f5:1e:7e:5f:56:65:19:55:60:4a:77:7d:26:2c:
                    51:e6:00:f4:4b:45:ba:3c:c7:b7:9e:93:a5:77:b5:
                    f4:8f:2b:36:ef:bb:a1:8e:18:21:2e:e4:55:8f:73:
                    c0:b5:74:e7:5c:99:25:c0:4a:e6:5d:df:68:3d:fa:
                    f7:ae:e2:35:3d:62:b6:b9:38:c2:3d:f7:ba:71:dd:
                    b0:12:0f:c7:38:bc:33:f9:3d:38:e7:9f:3c:b2:6c:
                    ab:61:c2:7b:2e:42:44:a0:f9:c6:00:68:00:14:3a:
                    86:95:75:55:3f:60:49:b2:6b:be:33:de:69:04:d6:
                    e6:29:29:27:51:ee:e9:52:66:23:61:a9:ec:4f:3b:
                    ef:1f:6f:c1:25:db:6c:0b:43:c7:42:29:30:72:07:
                    67:f6:08:11:b6:1c:50:85:73:cf:41:7a:d8:e8:e8:
                    a6:7f:ef:87:c8:84:f4:86:46:ad:53:ee:ac:44:42:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:92:76:F5:06:DB:CA:21:34:05:F6:DD:99:A9:66:A1:4E:AB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.80.0/21
                  45.43.192.0/19
                  64.187.224.0/20
                  104.153.80.0/22
                  104.166.64.0/19
                  104.247.192.0/19
                  107.161.112.0/20
                  137.83.79.0/24
                  144.208.91.0/24
                  160.202.64.0/18
                  162.210.36.0/22
                  162.217.172.0/22
                  162.219.24.0/21
                  162.223.28.0/22
                  162.244.132.0/22
                  162.248.208.0/21
                  170.75.144.0/20
                  172.82.128.0/18
                  199.101.96.0/21
                  199.233.232.0/21
                  216.115.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:c2:12:fd:f5:cf:f0:fa:93:5b:5b:92:6a:92:63:e4:94:
         97:0e:d4:2a:f7:5f:7b:47:15:3b:00:cb:b3:16:92:c1:2d:70:
         26:6d:9f:0f:d2:53:dd:53:ce:40:31:b4:52:20:ac:f7:99:49:
         98:7d:ca:de:b3:25:aa:8f:c6:d4:5a:57:e0:51:b0:2b:d0:2f:
         31:07:a0:91:b2:b4:c0:bf:5a:c9:20:a7:8e:9f:73:86:b9:1a:
         a8:c1:87:0e:9a:14:13:9b:86:20:95:e9:57:cd:81:de:81:b9:
         1f:6a:13:db:77:9c:1f:0b:40:d1:40:9d:cf:1f:74:66:e4:ea:
         59:6f:b2:3e:f1:32:30:bf:3e:c4:56:f3:4f:bd:f4:96:4e:1e:
         12:19:aa:e9:0f:8f:91:8c:68:12:63:ad:9d:bd:e9:f5:88:af:
         58:2b:1c:37:ce:3f:c4:bc:d7:c0:43:48:0d:0e:5b:81:3d:5f:
         b6:dc:f6:49:8e:29:a5:43:e1:7a:02:e0:b5:60:0c:12:9c:3d:
         19:08:8c:e1:a7:d2:e9:f9:8c:07:67:c6:80:55:02:be:79:ba:
         26:6b:e7:a9:f5:e5:c3:4e:80:b9:6e:ec:34:6e:84:55:19:9f:
         95:12:1d:e2:83:34:87:e6:c6:e4:b2:77:18:4c:80:c4:96:9f:
         be:ee:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:28:12 2025 by rpki-client