Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa
File:                     d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa (raw, json)
Hash identifier:          jlWqeFSetGZdzqphpDjaH2ky58hV/7LPRjnKhqRVTMA=
Subject key identifier:   ED:D5:AF:69:EA:4D:D5:EF:73:FC:D4:1C:76:0E:89:5E:45:B1:12:D4
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584A4F2FAA501EFF00FEB5E1E300
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa
Signing time:             Wed 25 Jun 2025 14:25:40 +0000
ROA not before:           Wed 25 Jun 2025 14:25:40 +0000
ROA not after:            Tue 23 Sep 2025 14:25:40 +0000
asID:                     46293
IP address blocks:        67.199.192.0/20 maxlen: 20
                          67.199.208.0/20 maxlen: 20
                          104.254.184.0/22 maxlen: 22
                          138.43.64.0/19 maxlen: 19
                          192.80.128.0/19 maxlen: 19
                          206.167.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:2f:aa:50:1e:ff:00:fe:b5:e1:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Jun 25 14:25:40 2025 GMT
            Not After : Sep 23 14:25:40 2025 GMT
        Subject: CN=888bbe46-8c0d-478e-8091-c06a5323b84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:ed:f1:17:e4:e2:b0:0f:18:ac:e8:88:32:
                    33:a6:32:b3:98:ee:d4:e2:0d:51:b8:79:3f:56:b0:
                    2e:be:a8:c8:a5:61:51:9f:f7:11:e9:4e:0b:64:72:
                    b1:4f:e2:c0:ea:e7:05:16:4b:60:bc:bb:a0:41:65:
                    e4:e0:ec:b4:25:c1:48:b0:3b:eb:3c:c1:28:14:1d:
                    e8:00:1a:26:1a:86:8b:ea:56:5a:4f:1c:32:70:38:
                    8a:d8:0e:71:1b:17:b8:c9:41:bd:27:77:6c:0d:66:
                    1d:1d:b9:5d:b1:41:6e:89:4c:0a:41:97:07:de:bf:
                    4c:09:21:4d:a8:ed:64:0d:f1:a7:5c:a3:55:15:7f:
                    d8:d4:2b:f9:d7:51:ec:43:12:2b:68:b1:0b:77:18:
                    ec:9a:92:3d:8e:53:a7:76:ee:54:dd:fa:f5:8d:36:
                    39:94:ab:9e:3a:e6:a8:68:76:5b:f6:c9:8a:00:67:
                    e9:9e:81:e4:98:f4:14:5d:41:dc:91:c1:09:25:b9:
                    a4:a7:b6:aa:ab:a6:e0:43:ec:84:a8:fb:d9:17:67:
                    04:5e:0a:ba:d8:e0:19:76:20:96:c8:be:58:91:73:
                    95:af:2f:22:8e:a0:1f:eb:6a:7a:65:5b:66:2a:65:
                    3e:ae:a5:4b:a3:42:5a:85:7a:5c:84:42:25:98:62:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:AF:69:EA:4D:D5:EF:73:FC:D4:1C:76:0E:89:5E:45:B1:12:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/d8cacbf6-f179-31f0-b0f7-1ba6e2a7b2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.192.0/19
                  104.254.184.0/22
                  138.43.64.0/19
                  192.80.128.0/19
                  206.167.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:37:17:d1:af:21:90:5a:2c:9f:97:eb:38:88:64:7f:4f:7e:
         b0:79:f1:1f:b9:60:1f:73:70:81:59:93:3e:40:46:c5:2c:b4:
         ec:42:b3:c1:89:23:b4:ae:ba:e2:8e:04:37:76:c3:bb:1d:89:
         81:b5:04:2b:d6:6c:a6:1b:1e:6d:b1:56:d0:63:68:ee:c1:d9:
         28:7d:f2:ca:6f:ec:25:6b:11:79:76:32:d8:c2:bf:82:f9:95:
         06:7f:9a:7e:1e:59:74:41:7b:bd:ff:96:13:02:0b:38:cc:ec:
         fb:a5:24:6c:43:2d:c7:02:9d:96:e1:fa:0f:27:79:30:0b:09:
         61:f1:e9:16:8e:96:cf:75:7e:ec:70:9a:21:e1:d4:4f:57:77:
         2c:6f:96:2f:23:f4:1a:a6:ee:b3:2d:09:61:b6:d7:49:38:7d:
         79:ab:ea:60:7c:3d:10:bd:e1:53:68:53:37:ff:bf:20:92:95:
         7d:bf:03:11:84:a8:f5:8b:2c:83:f4:f1:d7:66:59:5f:7a:51:
         0e:af:bc:fe:5f:ba:6d:42:25:81:f4:1c:26:6d:95:19:ef:83:
         88:e1:7b:20:42:0c:35:c9:56:f4:e7:fc:c5:03:1a:50:e0:9f:
         7a:70:6d:b7:75:f4:79:2e:7a:67:bd:e9:84:80:03:ea:17:15:
         53:37:4c:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:17:38 2025 by rpki-client