Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
File:                     33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json)
Hash identifier:          ysD2XKu2K5OBW/obBFEtxi9KMcBN7hkCYjvxfiYhQJA=
Subject key identifier:   5F:95:03:52:B0:55:FB:05:EE:60:18:4C:08:36:F4:25:99:8C:2E:05
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584AE46126B108C38CA5A36A0600
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     400981
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:26:b1:08:c3:8c:a5:a3:6a:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=705a57b3-1ef8-48fa-a6a4-589d3119ce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:fe:f5:e6:c0:a3:f6:d1:fc:df:3b:b6:88:
                    b0:4b:74:77:33:8e:a1:f6:26:ab:76:03:22:b6:2e:
                    3b:08:42:4f:f9:56:54:43:3b:01:d4:0c:90:48:3e:
                    95:ba:81:a2:91:7a:73:1d:43:55:db:7d:76:ec:a5:
                    29:24:bb:ad:58:ac:73:f0:39:ef:99:e4:a6:a4:a2:
                    20:ba:e3:b7:bf:63:91:3c:b3:9e:3c:98:7a:0f:c9:
                    ee:ce:e8:2d:57:68:53:9a:60:06:3c:92:ff:ec:d3:
                    6c:f6:93:8c:f0:02:6d:be:72:54:47:d7:d4:2b:75:
                    b3:f3:08:3b:e4:a9:c0:2b:61:23:3b:2b:ce:ca:c7:
                    96:0a:4f:b6:08:28:6d:f7:91:63:31:2b:18:2e:22:
                    df:ac:00:6d:4f:df:73:d8:20:27:e7:28:92:67:40:
                    b7:c1:33:45:70:c4:5e:e5:36:ec:d0:3c:f2:cc:6c:
                    b0:1c:41:29:ec:9c:3f:01:a8:2f:ba:cc:ad:1c:05:
                    44:ac:ae:c0:94:63:3f:dd:a7:33:ef:94:00:57:f3:
                    ee:ce:3e:9c:69:35:76:48:ee:ed:49:c0:99:4f:5b:
                    88:42:e5:95:86:ed:0e:13:80:99:42:96:75:9d:59:
                    39:11:35:02:62:da:ac:8d:44:cb:e4:20:f5:3c:72:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:03:52:B0:55:FB:05:EE:60:18:4C:08:36:F4:25:99:8C:2E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:11:39:f0:35:72:dc:e9:34:b5:8d:0c:58:fb:d0:69:bd:
         0b:10:ec:3d:77:c6:34:6b:9d:cf:f2:78:f3:55:21:6b:27:fa:
         5d:e3:b1:85:60:62:dd:13:e1:ec:87:07:c2:f7:f3:4f:5c:4b:
         50:b5:a4:38:06:7a:d6:37:8f:c3:b2:75:c8:a0:e6:2e:ff:24:
         f1:10:25:1c:9b:9b:18:5a:17:79:6f:fa:5c:19:fa:dd:b1:c9:
         d2:6a:bb:b3:0b:94:cf:ea:1a:ea:b7:7d:97:69:80:27:58:a5:
         1d:65:70:76:4e:24:3d:02:74:cb:95:65:8d:c1:3b:14:90:c2:
         6f:2f:01:28:ca:46:0a:13:71:1c:bb:83:a7:cb:29:3e:ef:18:
         e5:18:18:4f:48:c9:bb:1e:6e:97:c3:9f:f4:12:4e:8a:ba:b7:
         ea:ec:37:1d:4f:59:c6:83:9b:f8:17:ea:f2:75:cb:b9:fd:d9:
         69:de:a5:89:ff:af:c4:4e:e7:19:cb:2f:f0:f0:e5:8f:52:1d:
         68:7d:f1:f5:45:28:9c:d7:8c:91:48:34:a6:02:97:15:52:77:
         0d:8c:a8:e3:26:08:3c:4b:29:fa:a2:b2:9e:d8:01:62:ff:eb:
         0e:15:84:38:ce:09:54:2d:24:eb:8a:99:05:cd:79:f7:61:e5:
         c4:db:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:12 2025 by rpki-client