Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa
File:                     5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa (raw, json)
Hash identifier:          JWqRw4DZZP5/L5R5UNej+yVAhxP5DQFrCcxJQr8C6tA=
Subject key identifier:   1C:7E:6D:4A:AB:A5:06:1A:2D:37:DC:D0:90:57:61:F6:26:8E:2C:4D
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F4328584A5B95B207798739469B0E0C00
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     64200
IP address blocks:        67.21.34.0/23 maxlen: 24
                          192.154.192.0/21 maxlen: 24
                          192.154.208.0/22 maxlen: 24
                          192.154.212.0/24 maxlen: 24
                          192.154.215.0/24 maxlen: 24
                          192.154.216.0/21 maxlen: 24
                          192.154.232.0/21 maxlen: 24
                          192.154.240.0/24 maxlen: 24
                          192.154.242.0/23 maxlen: 24
                          192.154.244.0/22 maxlen: 24
                          192.154.249.0/24 maxlen: 24
                          192.154.251.0/24 maxlen: 24
                          192.154.252.0/24 maxlen: 24
                          199.188.88.0/21 maxlen: 24
                          2604:8180::/31 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:b2:07:79:87:39:46:9b:0e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=a1fb2d62-f09b-4a70-8f2e-407c147b1279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:fd:26:74:cb:a6:59:c4:26:4f:67:a1:fe:
                    4b:b9:db:65:d1:17:f3:9b:28:e6:e9:04:03:86:4c:
                    97:63:7c:a3:00:d3:7f:42:c2:66:23:6e:c2:a8:c5:
                    e7:00:a1:6f:22:9e:e9:2f:07:a4:19:05:99:89:5c:
                    54:c5:8f:d2:65:07:41:3d:ea:93:d8:c3:72:87:b0:
                    94:a4:81:87:75:63:4b:b1:50:62:ad:b4:72:b0:14:
                    05:89:24:ea:1c:c0:8f:73:c3:77:b7:aa:fe:b8:a0:
                    ac:6b:b5:f1:01:1a:01:1e:40:43:bb:44:c2:7e:40:
                    7b:18:ce:81:04:14:46:95:97:ac:ec:03:28:06:70:
                    ce:67:fe:26:99:7a:cc:cb:e5:98:55:d3:cf:6a:f7:
                    0e:dd:01:7f:02:9d:90:da:2c:17:2e:9a:13:5e:fe:
                    1c:81:cb:88:ca:fc:8b:cf:43:fd:39:1b:e2:6a:d7:
                    97:00:97:60:d6:db:2b:6c:5b:75:e7:20:f5:ca:7d:
                    d2:e5:be:91:03:ee:ef:7b:58:e9:c1:f6:fd:2a:4f:
                    2d:21:91:92:2b:11:5c:47:4b:a9:fc:20:5e:06:12:
                    69:b4:1d:62:e5:dd:c8:81:61:10:92:6c:87:9d:b1:
                    d2:d3:be:91:66:9d:4a:3a:44:f4:e4:ec:d2:ba:93:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:6D:4A:AB:A5:06:1A:2D:37:DC:D0:90:57:61:F6:26:8E:2C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.21.34.0/23
                  192.154.192.0/21
                  192.154.208.0-192.154.212.255
                  192.154.215.0-192.154.223.255
                  192.154.232.0-192.154.240.255
                  192.154.242.0-192.154.247.255
                  192.154.249.0/24
                  192.154.251.0-192.154.252.255
                  199.188.88.0/21
                IPv6:
                  2604:8180::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:dc:7f:e2:50:23:3a:5d:91:f4:b2:8b:96:62:e9:cb:51:
         4e:de:f3:df:a0:79:6f:34:1f:7a:ff:1b:43:d1:e7:54:41:37:
         bd:c2:db:6e:39:36:be:64:06:59:d1:3b:16:c1:50:19:a1:c5:
         f3:ee:ab:61:ac:fa:be:fa:d1:bd:f0:db:78:10:0b:bf:3b:21:
         d7:4c:21:f2:50:4d:bd:10:26:6c:c9:7a:34:2e:f7:5d:43:54:
         1f:59:36:e2:a6:4f:f9:31:65:ae:fb:51:23:b3:1a:4b:a1:5a:
         a5:24:a4:67:aa:eb:e0:4b:38:03:2f:9e:06:e9:a7:c3:67:b5:
         54:b1:2e:9e:67:dd:e4:1b:27:71:d3:72:22:ef:f5:3d:f4:65:
         53:4b:19:1e:a3:59:d6:e6:bd:11:07:49:8b:1a:a7:b0:de:92:
         49:52:75:58:49:11:fb:4a:96:0a:a4:3a:40:08:d8:dc:76:7a:
         b4:c3:5c:ef:0a:db:e8:fa:3f:8d:80:e5:59:e7:b9:27:62:20:
         53:5a:49:9c:ca:75:9b:b4:d6:d6:d8:44:f3:66:c2:e0:62:5e:
         c1:ff:12:f1:1d:c0:b2:6e:91:10:34:3a:5a:f0:87:d1:b4:e1:
         54:30:01:d3:c3:be:2e:91:24:0f:32:4c:38:ef:ac:ec:8a:13:
         0c:57:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:46 2025 by rpki-client