Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
File:                     5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa (raw, json)
Hash identifier:          C2MmeR2dygi8nL0Kb8h3y96dzmx4KG3uCjZsJsXL8oc=
Subject key identifier:   91:8C:40:40:B2:CF:E2:75:0E:F4:B4:3D:4A:F6:66:55:76:63:F1:32
Certificate issuer:       /CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
Certificate serial:       010D0C9F4328584A3B7AF8E23A34537AB6F61FC0
Authority key identifier: BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     30264
IP address blocks:        66.211.16.0/20 maxlen: 24
                          76.9.160.0/20 maxlen: 24
                          138.43.210.0/23 maxlen: 24
                          138.43.212.0/22 maxlen: 24
                          138.43.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f8:e2:3a:34:53:7a:b6:f6:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d05aba-95ac-4d7d-9f9e-6d566f71ecee
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=710eaa6a-8a64-4faf-b6fe-0420f4679b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:ee:de:a4:a0:de:4a:cf:86:59:03:78:7b:
                    b4:0b:0e:c5:b0:ae:ea:01:ba:7c:ad:90:d8:0b:54:
                    5c:3a:a6:28:e2:ac:30:ae:08:1f:a5:37:e6:f7:c1:
                    fd:fc:c3:10:98:e1:b6:ff:d0:9e:ed:6e:3b:ed:e3:
                    7d:33:fb:41:96:38:d6:e6:a9:a4:3d:de:48:de:26:
                    eb:6c:10:f3:71:71:11:ed:5f:0b:c5:f1:88:75:6f:
                    dd:58:c4:11:0c:37:84:76:09:14:b8:32:ac:c0:dd:
                    45:6b:7f:54:15:5a:c2:68:e2:64:33:57:dd:b7:85:
                    ee:b7:77:e5:dd:56:e7:8d:4f:7d:39:09:9e:f1:a8:
                    fb:37:66:03:6e:21:e6:c5:e1:4c:d0:d3:7e:0d:15:
                    f3:11:2f:e8:a5:43:ba:fc:c6:d3:60:cb:a5:f4:89:
                    19:a6:5f:a4:fc:ee:fc:c8:f9:2f:a8:a3:34:74:df:
                    6c:80:aa:ce:77:27:86:4d:a8:9a:e2:07:1c:77:fa:
                    0a:a1:de:ba:aa:73:25:1c:cd:10:14:9e:59:d0:04:
                    c5:ca:fb:60:af:29:99:e0:b3:1a:ff:63:90:84:42:
                    36:86:eb:f8:e8:94:24:e8:41:bd:24:23:cc:d5:fe:
                    6c:47:fd:01:71:19:ed:89:0b:73:e3:56:ff:c3:27:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:40:40:B2:CF:E2:75:0E:F4:B4:3D:4A:F6:66:55:76:63:F1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/5707df91-bb7a-3dba-ae59-c5d39f3a0924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.crl

            X509v3 Authority Key Identifier:
                keyid:BC:38:ED:DF:D4:EE:26:FD:1F:80:B9:28:E6:5D:39:86:95:98:1F:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5d05aba-95ac-4d7d-9f9e-6d566f71ecee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.16.0/20
                  76.9.160.0/20
                  138.43.210.0-138.43.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:33:6f:df:dd:9c:0c:93:7a:a2:0c:1b:5b:56:c3:4f:9e:
         29:15:c6:2c:4b:2b:74:04:d4:df:d0:45:db:09:b5:d4:6b:b4:
         28:9d:0e:a7:06:c3:30:fa:bb:60:58:3f:a6:b3:f9:44:21:5e:
         22:76:b4:52:22:0b:d4:1e:60:5b:ae:49:69:e2:43:d1:5f:40:
         4f:46:7f:94:7e:9c:e8:c0:5c:19:6f:de:07:e5:03:f5:90:7f:
         bf:dc:69:74:40:4f:4d:e0:ee:c3:95:a8:38:c6:28:d6:d5:2f:
         b1:aa:1a:48:6a:b6:5e:46:60:65:ea:10:0b:00:f1:a6:46:14:
         59:18:22:c4:a1:26:75:c8:9f:8a:a7:dd:8a:75:ff:47:ee:26:
         ce:eb:89:54:1c:36:ab:aa:78:25:b7:46:87:b5:0a:8f:69:3e:
         06:90:f7:b8:5d:46:66:8e:58:d4:bd:3e:fc:f1:6a:80:d9:ba:
         9b:73:75:c0:2d:8b:94:36:bd:78:78:86:67:50:72:5d:54:c2:
         8f:11:40:3c:25:ab:98:ee:3b:5e:a2:fd:76:32:95:b4:e6:6c:
         bd:09:e0:0c:ac:df:5b:10:07:49:3a:69:6a:32:ed:3d:a8:ec:
         76:c6:4d:f0:67:0f:1b:f1:98:15:6f:97:b4:de:d2:f7:e7:18:
         8f:59:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:22:20 2025 by rpki-client