Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
File:                     4545cdb9-209d-3cc9-9074-490c2687d75d.roa (raw, json)
Hash identifier:          zwiAaVZalNZ5ImczLu1+iLBlsWsFZmAaPZI6X8egxBg=
Subject key identifier:   DE:93:7B:C5:6F:84:3D:11:CE:3C:61:61:F6:84:8B:BA:6A:50:59:62
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F4328584AC87639B061F6614D7BF4D1C0
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     3663
IP address blocks:        50.116.128.0/18 maxlen: 24
                          63.135.128.0/19 maxlen: 24
                          64.246.240.0/20 maxlen: 24
                          70.40.224.0/19 maxlen: 24
                          74.213.208.0/20 maxlen: 24
                          96.126.0.0/18 maxlen: 24
                          108.167.192.0/18 maxlen: 24
                          142.11.0.0/18 maxlen: 24
                          173.254.128.0/19 maxlen: 24
                          173.254.160.0/20 maxlen: 24
                          184.95.64.0/18 maxlen: 24
                          192.173.192.0/18 maxlen: 24
                          198.190.64.0/18 maxlen: 24
                          199.115.224.0/22 maxlen: 24
                          206.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:39:b0:61:f6:61:4d:7b:f4:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=cd300e44-cbb8-4986-9f0c-28564ff3bd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:20:9e:c5:21:14:87:d7:12:7a:0d:78:b8:
                    ec:ea:d7:7e:b4:c3:a8:ee:3c:63:5d:80:bd:23:b6:
                    61:d4:7f:e2:4b:a0:48:cd:7c:20:dd:6f:47:68:96:
                    0d:86:c8:24:9a:8b:e3:ea:b8:50:74:5f:cb:8f:13:
                    c7:f9:6d:9b:88:37:7e:bd:dd:36:c4:9a:76:b6:1f:
                    84:15:3d:1e:11:25:c2:93:88:e9:d7:07:fe:be:fd:
                    c4:44:45:29:9d:40:14:00:28:7c:df:6a:84:56:3b:
                    2e:d1:fa:e9:32:88:cc:28:85:68:52:e1:c3:2f:ea:
                    8f:b8:02:d2:d3:e8:fc:9b:98:13:ca:0c:83:a8:80:
                    0c:4f:2b:49:db:8f:a2:54:cb:0e:d9:c8:89:12:1f:
                    83:f3:df:7d:d5:6f:90:52:e2:ee:95:ef:05:6c:8e:
                    6f:1b:35:21:2d:17:7f:ec:cc:cd:80:b9:5c:7a:72:
                    a7:68:6d:a0:39:68:d0:c0:cf:57:5a:8c:c2:86:16:
                    72:4e:61:6f:61:21:e4:af:19:3e:ac:f0:ef:7d:4a:
                    e7:cb:8b:64:33:a7:09:e1:bd:bd:cb:c5:51:75:65:
                    a4:9a:f1:9e:44:0a:2b:7e:a5:34:e6:b5:8e:34:88:
                    1a:22:00:48:c2:76:ac:fa:eb:84:5c:82:f4:f8:15:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:93:7B:C5:6F:84:3D:11:CE:3C:61:61:F6:84:8B:BA:6A:50:59:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.128.0/18
                  63.135.128.0/19
                  64.246.240.0/20
                  70.40.224.0/19
                  74.213.208.0/20
                  96.126.0.0/18
                  108.167.192.0/18
                  142.11.0.0/18
                  173.254.128.0-173.254.175.255
                  184.95.64.0/18
                  192.173.192.0/18
                  198.190.64.0/18
                  199.115.224.0/22
                  206.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:50:91:75:c3:39:2e:41:0a:15:65:2f:29:98:6a:38:89:
         9f:f8:d9:9b:f8:74:1c:23:48:eb:96:5c:f8:09:21:f7:1d:56:
         69:f1:31:ce:99:7d:1a:23:79:8b:c8:52:85:0d:ff:d2:99:fa:
         bb:bf:a7:01:a3:5e:c2:ee:38:b5:36:16:6c:ae:e5:f3:a6:c8:
         48:01:3a:5f:8e:9a:7f:49:56:c3:36:24:c3:d1:1c:6d:ca:31:
         8e:7a:79:5f:ea:0f:2b:a7:f6:e3:95:cb:ec:34:21:2d:3d:be:
         c4:22:17:8d:3b:59:bf:42:9e:61:79:6b:0b:3a:b7:7c:a9:ab:
         2a:46:33:ab:c9:dd:f0:60:c7:f8:f1:c6:d5:ca:24:c6:ff:ab:
         b1:22:de:7c:e6:35:27:03:05:0e:2f:80:dd:ae:1e:c9:55:d2:
         4a:53:c2:a0:00:e2:e2:d8:16:60:b6:f9:67:74:90:6c:ec:f9:
         c5:ba:ad:57:16:79:9f:be:fe:a2:6d:98:5d:12:fe:72:c6:ab:
         a5:79:d6:3d:68:84:22:de:13:a6:32:15:14:08:2f:f9:11:2a:
         05:16:51:e3:90:53:2a:50:12:20:b5:34:91:a3:0e:dd:60:65:
         ab:e2:ef:33:1e:3d:7b:b8:0c:aa:43:25:f4:7c:7f:a9:6e:87:
         e9:62:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:34:57 2025 by rpki-client