Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
File:                     547db2f7-b235-3247-a2f5-f5afd418ff69.roa (raw, json)
Hash identifier:          HamczgI9Q+ABc7sNUr3ug5wrZ/pr9thKNc04iLXPKwk=
Subject key identifier:   27:EB:67:8A:D6:2D:0C:AB:95:BE:06:E7:26:55:54:92:3C:5B:CD:90
Certificate issuer:       /CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
Certificate serial:       010D0C9F4328584A2E891BC6CA864BDCBD183000
Authority key identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa
Signing time:             Fri 13 Jun 2025 21:44:12 +0000
ROA not before:           Fri 13 Jun 2025 21:44:12 +0000
ROA not after:            Thu 11 Sep 2025 21:44:12 +0000
asID:                     30027
IP address blocks:        68.232.48.0/20 maxlen: 24
                          192.160.54.0/24 maxlen: 24
                          207.195.128.0/19 maxlen: 24
                          208.84.76.0/22 maxlen: 24
                          216.144.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:89:1b:c6:ca:86:4b:dc:bd:18:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
        Validity
            Not Before: Jun 13 21:44:12 2025 GMT
            Not After : Sep 11 21:44:12 2025 GMT
        Subject: CN=57c1a5e9-bcc3-4ac1-86e1-09f728af5a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:87:19:4d:6b:2a:09:45:b3:75:65:4c:94:
                    d8:66:7e:ae:f5:b3:b1:51:4c:44:07:75:a7:14:7e:
                    84:a4:8e:a1:41:22:16:b2:28:04:6d:e2:b5:2b:89:
                    1a:7b:0d:00:00:7c:ef:64:c2:8f:5c:02:ed:9a:6f:
                    2d:63:10:19:b5:1c:a9:e2:bf:bc:e4:51:ae:b2:f3:
                    a8:fb:a1:93:66:3f:88:06:2b:d8:88:58:d5:2c:a7:
                    bf:92:16:a1:45:d4:03:21:b9:36:a4:b2:14:04:e6:
                    f2:59:e9:77:58:0b:0a:b5:16:bc:74:15:35:fa:14:
                    33:c9:4c:e2:3d:61:f0:00:51:80:23:8b:83:fe:47:
                    67:ca:25:db:9b:28:6c:5c:23:cc:9a:ea:5f:8b:79:
                    d7:3e:f0:72:ce:0f:80:92:9e:00:fb:f9:0c:2f:68:
                    d5:d7:c0:84:5b:1f:8a:9e:b0:8b:00:52:f3:80:db:
                    d6:4e:44:51:e9:db:33:c5:6c:a5:75:14:57:dc:bd:
                    e7:d5:31:ad:17:90:89:e6:85:7e:c7:4e:3e:96:65:
                    1a:ec:c4:02:63:1f:72:c9:a6:81:1b:d8:d8:b3:bf:
                    7a:c0:51:e8:27:2e:92:60:e3:a5:7f:eb:43:eb:e2:
                    05:eb:89:03:f5:81:bc:ef:9f:cd:36:a6:e0:9d:da:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:67:8A:D6:2D:0C:AB:95:BE:06:E7:26:55:54:92:3C:5B:CD:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/547db2f7-b235-3247-a2f5-f5afd418ff69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl

            X509v3 Authority Key Identifier:
                keyid:B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.48.0/20
                  192.160.54.0/24
                  207.195.128.0/19
                  208.84.76.0/22
                  216.144.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:50:d6:98:1f:2e:c5:fe:c9:ef:73:41:c5:52:4e:bb:89:b2:
         62:0f:58:6e:f1:3e:03:97:04:3d:67:b7:b4:da:cb:63:d0:6c:
         89:77:4d:c9:56:4b:4d:24:57:93:2e:4b:2e:63:bc:9b:16:ad:
         29:ff:00:d9:70:cf:0c:3f:01:60:6a:de:66:e5:d5:67:9b:b5:
         15:2a:df:96:31:47:37:74:7d:51:ee:ba:32:11:4e:71:87:b6:
         dd:ff:9e:35:32:87:06:58:35:8e:9d:48:4b:df:b9:5e:39:3e:
         ca:c8:90:64:c7:c3:6c:0e:55:13:70:2a:9d:29:07:03:53:17:
         4f:5e:67:6b:ef:54:ca:70:7e:63:b5:f4:e8:ff:3d:99:8e:fc:
         73:f7:9b:ce:69:62:bc:12:ad:4a:7d:56:fd:0c:a1:1a:b5:82:
         42:f6:c5:83:36:93:4f:75:99:65:34:98:d7:97:15:d3:30:af:
         9d:25:b9:9b:d2:0c:00:68:0f:a0:5b:49:25:3b:a0:ff:f4:5e:
         77:84:26:35:b0:28:bf:8a:f5:06:46:51:7f:d6:04:71:0b:f8:
         9a:2e:75:53:2c:da:49:ba:7d:15:fa:fc:50:8f:d5:56:19:f9:
         68:69:fc:5e:fa:4f:a9:51:53:94:92:25:9d:97:22:01:fe:7e:
         5e:33:88:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 19:45:47 2025 by rpki-client