Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
File:                     9917fb74-f32d-3244-a63d-665f177752b1.roa (raw, json)
Hash identifier:          LjWYSOuZvq/zzqJP8SZuJkiOlPW7Xcxihh6bTt2K1a0=
Subject key identifier:   D2:87:19:7F:25:F4:77:99:D3:97:AC:C8:0C:91:FC:5A:26:A5:7D:60
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F4328584AD87E9710A7C93D0DEB7218C0
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     14230
IP address blocks:        67.221.32.0/22 maxlen: 24
                          67.221.36.0/23 maxlen: 24
                          69.194.7.0/24 maxlen: 24
                          97.64.76.0/24 maxlen: 24
                          97.64.93.0/24 maxlen: 24
                          97.64.100.0/22 maxlen: 24
                          204.11.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:7e:97:10:a7:c9:3d:0d:eb:72:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=75cc2931-26a1-4816-800c-995700c05976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:07:e3:c2:47:5e:3c:02:ba:88:0b:64:89:
                    c9:21:fb:a0:78:1e:4c:af:6a:f7:96:0a:2c:e9:23:
                    30:e7:8d:89:37:7e:ce:a7:a7:09:e1:22:7f:f4:e2:
                    2f:0b:1e:11:73:79:63:28:b6:78:4c:b8:26:f2:2b:
                    a1:77:f3:cf:08:54:85:cb:84:f1:73:8c:7a:db:32:
                    fd:d6:b0:ac:a4:2a:16:5d:44:c4:f6:b3:66:f7:46:
                    ba:7d:da:f7:1b:a0:96:4f:58:5c:a5:23:bd:5e:b0:
                    3d:00:82:2a:12:dc:48:09:e0:63:4c:eb:85:06:ff:
                    e3:4d:f3:4a:61:3f:5f:ce:34:9f:c0:2a:bf:91:ed:
                    c7:e6:35:cb:59:ec:bd:96:0f:85:e6:60:d5:4e:c6:
                    6e:5a:fa:99:5e:d8:bd:db:6e:07:92:04:00:3b:ad:
                    84:99:22:5e:b1:15:63:6a:65:e0:59:20:6b:73:96:
                    58:4a:b7:f4:1a:21:a0:d2:8a:eb:21:fc:3d:ca:68:
                    f0:fb:b9:b1:ee:94:80:38:7d:7e:aa:90:7c:05:20:
                    7c:6f:70:e9:69:ae:3f:7f:7c:86:5c:d3:82:1c:25:
                    b6:50:3b:55:96:62:94:96:0a:5c:58:26:9a:27:4a:
                    cc:21:77:82:1e:c1:9e:f5:c8:43:bd:de:c4:55:f8:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:19:7F:25:F4:77:99:D3:97:AC:C8:0C:91:FC:5A:26:A5:7D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.32.0-67.221.37.255
                  69.194.7.0/24
                  97.64.76.0/24
                  97.64.93.0/24
                  97.64.100.0/22
                  204.11.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:33:5f:35:75:5c:78:56:5e:73:5c:f4:9e:ac:db:d5:c2:
         60:db:5f:d5:b6:c2:f2:67:b6:f2:b9:39:e5:ec:1d:be:d5:fb:
         cc:c1:f6:a6:e8:a0:bc:22:e0:1c:23:59:89:e2:98:fb:79:6a:
         71:5b:cd:b8:80:b4:5a:48:82:9a:39:33:a9:5a:5c:89:66:f4:
         4d:02:6c:14:d0:e5:25:2e:59:f7:b0:1e:32:f1:ba:39:8e:45:
         2d:da:8b:ce:0c:26:c7:c0:5e:2b:4c:e6:4b:fc:3e:5b:ba:24:
         9f:74:98:cd:64:3f:dc:f0:6a:45:32:95:f2:a7:e9:f5:75:6a:
         2c:4a:01:c3:ff:e7:dd:87:33:9d:00:f3:05:94:d6:2e:12:2f:
         2d:87:e4:7e:e8:12:05:c0:bc:ab:4e:bd:f4:63:95:96:12:23:
         5e:10:17:5a:ee:b9:f9:1c:cf:7e:60:5a:83:b2:32:a7:3e:3c:
         4d:07:1e:c1:9a:2b:ab:ea:49:a0:76:2d:62:aa:e8:0b:7e:c0:
         ca:e8:62:9e:ff:43:dc:4c:8c:92:30:ce:d3:07:ff:9d:e9:ad:
         22:0f:12:f6:96:6f:29:4d:ee:d7:3f:f8:af:ff:1d:e8:d6:fd:
         7f:c2:98:10:bd:d2:d7:d1:e0:0a:d0:a1:42:f4:ae:a3:c7:55:
         36:55:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:28 2025 by rpki-client