Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
File:                     9ab84c57-3305-30ff-b583-4bb0023c64b2.roa (raw, json)
Hash identifier:          gAI7CDi46IA1iSWo5g+mrGW6EBthp2xzgPdD7bWgJiI=
Subject key identifier:   B7:EB:00:AE:D9:C5:FE:51:33:32:AD:E2:57:6D:36:0C:71:6B:24:C9
Certificate issuer:       /CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
Certificate serial:       010D0C9F43285849D85F92D05F1893900F1090E0
Authority key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     53949
IP address blocks:        162.213.172.0/22 maxlen: 24
                          173.225.144.0/20 maxlen: 24
                          192.119.134.0/24 maxlen: 24
                          198.98.208.0/20 maxlen: 24
                          206.198.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:92:d0:5f:18:93:90:0f:10:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3a0da1a8-3342-4f04-ab83-7a8a539f0112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:14:4b:01:96:7f:b6:02:34:47:9f:33:b4:
                    9f:7f:2e:fa:49:56:de:73:19:ba:5b:33:46:da:de:
                    7e:c7:f8:f9:be:9b:b0:00:21:90:6c:40:70:27:ab:
                    76:82:49:d1:bc:9e:a3:85:00:e2:b5:bd:85:ba:5d:
                    c0:61:2c:93:32:3d:41:61:05:e8:1d:21:4b:26:32:
                    8a:fd:10:fa:12:28:49:9f:60:7c:48:7e:5a:31:2e:
                    ba:0d:7b:4e:72:0f:a9:60:a2:47:21:27:09:3a:45:
                    bc:8c:c4:80:2e:e8:b0:92:fe:ba:81:61:75:d0:5b:
                    7f:0d:02:c0:37:1a:ef:2a:5c:83:6f:03:cb:e2:37:
                    36:90:9d:fc:ff:59:b1:04:15:8f:f3:12:fa:e6:a1:
                    f3:04:09:b9:2d:ee:86:60:b8:16:ef:c3:79:f2:c6:
                    7a:4d:89:85:d2:11:3b:45:35:cc:34:77:30:c0:70:
                    14:c9:ff:11:02:f2:dc:59:29:00:2f:c5:6e:4d:a0:
                    15:aa:c3:b7:db:8c:49:a4:94:73:b3:7a:f2:a6:bb:
                    ad:4e:16:00:4f:fd:03:f2:fc:d8:e1:02:d4:b5:2f:
                    d8:5f:70:f9:f2:75:8c:38:99:3d:54:fe:84:22:45:
                    1e:11:1f:a5:f4:26:c9:e3:5e:4d:a1:7b:18:1e:5b:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:00:AE:D9:C5:FE:51:33:32:AD:E2:57:6D:36:0C:71:6B:24:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl

            X509v3 Authority Key Identifier:
                keyid:68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.172.0/22
                  173.225.144.0/20
                  192.119.134.0/24
                  198.98.208.0/20
                  206.198.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:df:b4:30:20:65:dd:67:0d:0d:0a:bb:00:f7:f9:e9:4b:a9:
         58:0b:97:27:d2:5d:c0:4c:ff:7a:a5:64:8f:85:ce:50:75:f6:
         05:8d:6c:97:af:56:9f:90:71:a4:be:bc:26:7a:87:09:14:db:
         c7:ba:1b:90:ac:25:7c:bf:ac:0e:d2:c0:b6:f1:1e:fd:8a:2c:
         98:9a:a0:5c:e8:84:94:92:43:dc:2f:e8:32:ec:9f:52:33:e1:
         5b:3a:0f:2d:2a:5c:08:49:e0:34:d9:e1:f0:75:92:3d:53:1f:
         a5:8a:f3:32:10:1a:71:f7:9b:32:28:4d:ae:46:f0:f3:2e:1f:
         93:92:9a:60:80:5e:0c:c6:15:77:97:91:14:4b:4d:07:bb:13:
         91:7e:99:e1:7e:7b:ba:bf:57:79:c8:a6:bf:b5:ee:a4:18:67:
         9e:32:87:1a:85:bd:2a:2d:5d:89:7c:cb:fc:c6:2f:07:39:91:
         d3:26:ed:eb:66:ba:0c:63:c7:20:af:dd:d1:32:17:3b:66:bf:
         09:29:57:d5:4e:c0:34:1b:6d:0a:2e:ba:d2:2f:88:48:1e:e5:
         2b:26:a3:65:d6:60:c7:66:09:14:51:aa:33:60:2a:86:5f:ed:
         64:ae:1f:8f:a6:9c:36:e3:9f:02:cd:7c:b5:b6:6a:36:31:a0:
         3e:26:f1:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:26:48 2025 by rpki-client