Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
File:                     f56d3816-15da-338f-94ed-ce0338ad89a9.roa (raw, json)
Hash identifier:          lxkgNSoY8nMuGNNln0jPi3LD97bfoEKYJaelR0eKDc0=
Subject key identifier:   F1:28:08:CE:3B:0C:4B:09:18:67:D9:87:C8:C1:6F:A1:78:31:AB:E5
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584AE0311EFBBBBBD677CE905900
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     30083
IP address blocks:        50.30.32.0/20 maxlen: 24
                          69.64.32.0/19 maxlen: 24
                          148.72.128.0/24 maxlen: 24
                          148.72.130.0/23 maxlen: 24
                          148.72.132.0/23 maxlen: 24
                          148.72.136.0/21 maxlen: 24
                          148.72.149.0/24 maxlen: 24
                          148.72.152.0/23 maxlen: 24
                          148.72.164.0/22 maxlen: 24
                          148.72.168.0/21 maxlen: 24
                          148.72.176.0/23 maxlen: 24
                          162.211.120.0/21 maxlen: 24
                          173.201.32.0/20 maxlen: 24
                          173.224.112.0/20 maxlen: 24
                          192.155.96.0/20 maxlen: 24
                          199.189.84.0/22 maxlen: 24
                          199.217.112.0/21 maxlen: 24
                          207.38.80.0/21 maxlen: 24
                          207.38.88.0/23 maxlen: 24
                          207.38.92.0/22 maxlen: 24
                          209.126.96.0/19 maxlen: 24
                          209.239.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1e:fb:bb:bb:d6:77:ce:90:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=7594ff0c-2080-4a1e-8f0f-0457c3e50f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:49:4c:65:91:01:02:cc:58:ac:b0:38:8c:
                    26:7e:6a:f7:1c:b5:16:ca:b0:da:e2:08:21:25:ed:
                    9e:15:58:db:f3:3a:92:fe:21:80:b3:23:f8:91:cc:
                    a6:78:9a:42:10:13:bf:e9:9d:b1:72:5c:e9:67:3a:
                    81:de:ff:65:80:71:45:23:0a:bd:74:3d:9a:e8:36:
                    8a:74:72:ff:06:08:3a:67:77:7e:c7:36:20:f4:c4:
                    32:52:74:54:d7:43:d4:16:27:b1:da:fa:0a:f8:66:
                    e6:ec:80:6f:e8:af:e6:da:a4:83:aa:c4:3e:c0:3f:
                    51:e1:ce:b4:ed:fe:f4:eb:22:3a:ef:c6:4f:f1:2f:
                    6a:cd:90:2b:f9:5b:55:4e:8f:c6:3c:cf:71:bb:3a:
                    e0:95:2e:6a:bc:3b:71:05:6f:50:97:4f:ce:1d:64:
                    ce:fa:10:43:6d:33:b8:a1:33:65:36:0c:8e:be:05:
                    5d:b4:bb:56:73:a9:20:ca:7c:4a:48:11:52:68:8b:
                    78:54:67:8d:cd:92:a1:10:25:e5:41:56:14:b6:d6:
                    0c:2f:6e:de:9e:c1:c8:ed:e4:60:90:6d:11:ef:95:
                    a8:d6:64:08:f5:fc:03:b4:1a:d1:40:57:9a:2b:d7:
                    65:23:6c:27:21:57:73:6f:c0:14:99:be:75:fb:0f:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:08:CE:3B:0C:4B:09:18:67:D9:87:C8:C1:6F:A1:78:31:AB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/f56d3816-15da-338f-94ed-ce0338ad89a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.30.32.0/20
                  69.64.32.0/19
                  148.72.128.0/24
                  148.72.130.0-148.72.133.255
                  148.72.136.0/21
                  148.72.149.0/24
                  148.72.152.0/23
                  148.72.164.0-148.72.177.255
                  162.211.120.0/21
                  173.201.32.0/20
                  173.224.112.0/20
                  192.155.96.0/20
                  199.189.84.0/22
                  199.217.112.0/21
                  207.38.80.0-207.38.89.255
                  207.38.92.0/22
                  209.126.96.0/19
                  209.239.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:dd:65:c0:83:3f:70:ba:14:ab:6f:19:2a:18:7b:4d:15:
         ae:64:35:d2:6f:5f:e8:b5:48:a9:aa:c5:7e:8d:99:ca:ae:7a:
         60:db:c9:be:41:cb:b2:a7:c3:0b:e4:bc:1b:10:27:a1:05:09:
         7d:89:28:19:8e:53:5f:fd:21:e1:17:b3:47:d9:57:1c:80:19:
         61:6e:a0:90:33:fd:24:6d:33:95:f6:a5:76:54:ab:c7:e5:b7:
         88:45:db:37:b0:02:fb:39:64:43:e6:5a:db:a3:b0:92:94:82:
         ae:df:22:4a:52:86:1b:a6:43:ce:2b:0b:ba:3a:47:28:9c:60:
         c0:f0:21:54:b2:66:3e:a1:72:0a:c2:2b:f9:08:95:67:cc:df:
         0c:45:50:b3:b3:5b:7d:e9:7c:30:37:78:fc:d6:2c:8e:8c:9f:
         7b:a5:b9:7e:73:3a:39:fc:e4:02:15:8c:5f:dc:38:04:f9:9f:
         7e:2a:0f:bd:45:19:8e:92:89:7b:73:32:ed:df:33:9a:8d:a6:
         24:22:aa:2f:1f:c1:2a:35:82:85:a0:5f:64:5a:ce:95:78:5d:
         58:a3:9b:2d:3c:67:4e:bb:3d:ca:bf:ea:b1:d6:c0:fd:bf:d4:
         c7:01:d1:af:d7:e1:ac:d2:20:f1:91:9b:90:7b:47:98:36:75:
         33:fc:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:54 2025 by rpki-client