Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa
File:                     c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa (raw, json)
Hash identifier:          FbvsP/0mHcg5GwoeZKoGXt8nMHFQPDpmV4ZqS0bi12M=
Subject key identifier:   F6:73:6D:D1:19:1D:A2:84:83:C5:71:C5:C4:7B:12:E0:67:95:89:BA
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584AD87CF659B3C47EC219EC3000
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14230
IP address blocks:        64.39.231.0/24 maxlen: 24
                          72.50.224.0/19 maxlen: 24
                          74.112.0.0/21 maxlen: 24
                          198.167.176.0/20 maxlen: 24
                          199.104.8.0/24 maxlen: 24
                          199.104.10.0/24 maxlen: 24
                          199.104.24.0/21 maxlen: 24
                          204.13.158.0/24 maxlen: 24
                          204.228.192.0/18 maxlen: 24
                          206.80.96.0/19 maxlen: 24
                          206.207.75.0/24 maxlen: 24
                          206.207.76.0/22 maxlen: 24
                          206.207.80.0/20 maxlen: 24
                          206.207.96.0/19 maxlen: 24
                          208.73.52.0/22 maxlen: 24
                          208.74.88.0/21 maxlen: 24
                          208.81.148.0/22 maxlen: 24
                          208.101.240.0/20 maxlen: 24
                          209.19.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:7c:f6:59:b3:c4:7e:c2:19:ec:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=87c4de12-8bb7-47bc-b274-082e60568e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:5d:48:62:f5:e1:54:44:33:5b:23:0b:ef:
                    56:6c:55:6b:0a:fa:cd:db:3d:ff:a1:16:93:1d:87:
                    c6:fc:16:df:4b:48:87:f3:70:8d:58:a5:eb:6d:22:
                    3e:4c:2e:d4:82:9c:9d:1e:48:20:63:b1:1d:f8:22:
                    23:fb:cc:45:cb:c9:1e:ac:fc:25:fb:00:af:b9:7a:
                    8f:4e:b2:5a:f7:4e:ac:97:55:2d:cf:d8:3f:e5:73:
                    ef:e3:da:0c:17:38:d4:53:6c:c0:55:90:08:c6:d8:
                    64:4c:8b:f9:2b:7d:29:85:2b:ce:34:18:f4:ae:cc:
                    1f:b6:27:f1:e8:ed:48:4c:36:9f:b4:3c:c3:cd:80:
                    a1:50:f3:7a:a2:72:35:a9:62:b2:b3:64:34:cd:70:
                    d9:f5:dc:3a:80:67:b6:cc:dd:c4:47:5d:59:3b:ae:
                    59:1a:8e:49:5e:2e:5a:48:c3:6d:40:62:96:54:79:
                    ff:ae:94:16:bb:7a:a4:73:17:ab:57:84:1b:40:1b:
                    10:bb:89:27:d5:cc:16:23:1b:e6:78:3e:59:2c:58:
                    1b:11:2d:ab:51:9f:70:e5:ef:bb:ea:8e:3b:37:e3:
                    65:95:6c:3d:bf:ee:24:a0:51:92:40:06:35:82:cf:
                    5e:ab:62:4a:60:e7:6f:24:46:27:7a:0b:fb:8e:ab:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:73:6D:D1:19:1D:A2:84:83:C5:71:C5:C4:7B:12:E0:67:95:89:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.231.0/24
                  72.50.224.0/19
                  74.112.0.0/21
                  198.167.176.0/20
                  199.104.8.0/24
                  199.104.10.0/24
                  199.104.24.0/21
                  204.13.158.0/24
                  204.228.192.0/18
                  206.80.96.0/19
                  206.207.75.0-206.207.127.255
                  208.73.52.0/22
                  208.74.88.0/21
                  208.81.148.0/22
                  208.101.240.0/20
                  209.19.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:bb:c9:37:6f:f2:2a:de:05:47:20:33:9f:df:86:ea:50:
         64:be:70:2d:e8:ff:28:22:59:f4:97:af:d7:6c:d9:73:6d:e0:
         88:e4:bb:8a:63:db:0e:d9:de:3d:d5:65:98:7d:86:41:43:24:
         fc:54:a1:f4:9d:94:8b:c6:98:bb:e4:26:bb:0a:c7:83:45:a8:
         20:65:ab:88:f5:a5:8b:45:39:0e:9c:af:c1:73:4c:c9:fb:ae:
         ef:80:e8:2f:90:af:a6:83:13:b4:63:f3:5b:1e:1a:f9:5d:f4:
         e4:44:f0:53:e5:85:0d:23:de:d8:2d:b1:41:bf:f2:f0:1f:1b:
         19:ef:ec:74:c6:87:0f:31:06:c6:0a:eb:69:6b:d1:0d:97:ee:
         b9:1d:b7:a9:66:75:49:43:9f:bf:4a:45:46:a6:2d:7b:76:70:
         e2:e6:46:97:18:0b:5b:48:47:fe:62:e1:46:15:ef:da:13:ce:
         f2:d6:5f:d4:ed:b1:90:7c:cb:9d:b8:0d:56:a9:b0:19:a7:eb:
         6b:9f:f1:3c:84:29:c7:6a:ea:c2:ce:05:33:0e:0c:ff:48:30:
         56:74:97:6f:f3:b6:f0:ac:0c:d8:cf:02:c0:1f:5c:93:30:dc:
         91:ba:91:61:c3:7b:f3:4f:15:ba:e8:8e:00:57:34:67:1f:65:
         bb:b9:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:02 2025 by rpki-client