Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
File:                     47d3484f-4726-3190-8c44-831e3dafc9f7.roa (raw, json)
Hash identifier:          44//r6gVzpcqrThdmW6NDg0p/CUb2+7BDxXSed654JI=
Subject key identifier:   1A:E5:D6:69:D0:BC:CF:7D:6B:DF:26:BE:90:16:28:9B:D4:2E:4E:D7
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584A3E45A0D8D98E5D74C5E6C120
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     6233
IP address blocks:        74.211.120.0/22 maxlen: 22
                          74.211.124.0/22 maxlen: 22
                          98.142.132.0/22 maxlen: 22
                          150.242.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a0:d8:d9:8e:5d:74:c5:e6:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=363d42ee-75d1-4a71-ab6d-4e7c69644bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:04:f1:2e:8f:d9:ac:4c:0f:97:68:d4:1c:
                    0c:c0:1a:14:e2:db:42:9f:dd:e1:e0:b5:38:19:32:
                    c6:78:33:ec:ee:0f:a0:e2:ea:f5:15:80:fe:34:0d:
                    b7:d2:17:08:71:41:20:5d:a8:a1:a1:46:ac:7c:19:
                    fd:f5:20:1d:06:b6:8c:ad:0f:57:01:6c:f1:5e:14:
                    b6:05:e6:0a:aa:2f:37:fd:70:a7:e3:9e:8b:ad:dc:
                    0d:a3:b4:d6:9a:8a:4d:fd:9d:44:b9:0d:14:00:a4:
                    73:0d:c0:d2:f5:a5:21:72:86:13:1c:fe:9e:25:98:
                    8b:ed:10:f4:1d:67:bb:98:42:0b:84:6b:fd:2b:fe:
                    2a:0e:da:af:ad:ee:15:be:82:34:1c:fa:70:ff:ff:
                    6b:d1:83:fe:f5:3e:cc:ad:45:f8:2f:61:e7:78:7d:
                    06:fc:a7:3d:2e:c0:b4:c6:d4:1f:a2:08:31:98:40:
                    67:aa:4d:f3:e2:1a:96:1c:ca:1a:6a:df:56:c7:8c:
                    a4:94:6b:5b:93:51:9d:41:2b:10:8d:3b:4c:ae:14:
                    92:e3:70:dc:ea:63:78:27:e5:a3:3a:5e:c0:02:9e:
                    d1:c1:b0:a9:c7:fc:85:db:56:78:e7:b1:d8:b2:fb:
                    c9:ab:e5:d9:f4:e6:73:69:cd:97:53:e9:41:f3:3a:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:D6:69:D0:BC:CF:7D:6B:DF:26:BE:90:16:28:9B:D4:2E:4E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/47d3484f-4726-3190-8c44-831e3dafc9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.211.120.0/21
                  98.142.132.0/22
                  150.242.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:42:df:35:0a:b2:93:d5:41:5b:b9:60:fe:2b:12:2d:6e:7a:
         2e:06:5d:fe:2e:73:7b:4a:97:b7:a2:95:cd:e8:3b:54:4a:77:
         7f:ab:8d:fd:7b:6d:cb:37:1f:c1:3f:1d:be:ab:ac:5c:4f:5a:
         3e:d1:48:66:50:4c:19:5f:0f:4e:29:93:39:ce:cf:58:0b:3c:
         80:44:ad:b7:aa:27:da:8e:56:61:df:69:05:02:63:fd:9a:e9:
         1d:fd:2d:b2:fd:87:54:e5:a9:25:92:36:04:7c:fb:91:cf:59:
         b5:ab:41:db:cf:68:32:37:da:87:43:c0:09:e8:4f:44:41:b8:
         5f:e4:26:cd:f2:c5:0c:80:c0:99:7b:ea:68:64:8c:55:fd:44:
         be:4f:de:bc:14:2b:37:f4:6d:48:19:96:e8:70:06:89:1e:12:
         a6:95:bf:48:02:8b:29:c7:f5:8e:3d:0e:49:bb:13:7f:96:d6:
         0b:e7:6a:36:b2:b9:1b:78:51:16:65:00:94:6f:f5:74:cd:1c:
         3d:75:67:8f:6f:a8:3a:1c:38:f8:10:ea:76:12:61:f9:8f:3e:
         35:9f:33:97:22:cb:39:32:c8:3b:f2:07:16:44:83:f2:1c:b7:
         d1:46:dd:d0:75:89:63:8f:1e:d8:f8:34:c1:3d:3d:13:2e:70:
         96:fe:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:14:16 2025 by rpki-client