Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
File:                     7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa (raw, json)
Hash identifier:          vzpV7ACn62BpTUwFBeNEJtVH2fXj5f+hQptSe4uRNzo=
Subject key identifier:   5D:AA:AA:45:3B:E6:B2:9C:E2:BB:2D:DF:4A:5F:62:A9:6C:B0:4A:5F
Certificate issuer:       /CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
Certificate serial:       010D0C9F4328584A41105DDFC97C0AC9BF3BA080
Authority key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     40864
IP address blocks:        74.116.156.0/22 maxlen: 22
                          209.142.84.0/22 maxlen: 22
                          209.209.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5d:df:c9:7c:0a:c9:bf:3b:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=03b7ddf1-eb36-4e2a-98c2-6d21de3e9892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:59:13:62:24:90:0a:28:2e:c1:02:12:81:
                    2f:a2:ed:e8:ad:46:0f:d0:ee:ab:4e:26:c1:71:52:
                    d4:7b:f3:86:6a:2f:e6:91:66:81:6b:ce:be:ba:cd:
                    bf:73:8d:ca:5a:88:d2:b0:14:81:7d:89:2e:d7:2f:
                    49:e4:b1:79:e7:5b:40:8d:1a:92:1b:3f:0a:5a:ac:
                    23:f3:9b:1b:0d:0d:ce:4c:d0:0b:07:26:34:f2:52:
                    12:d6:ae:39:56:54:b1:57:fd:65:b8:f9:f8:ed:66:
                    cb:06:26:77:60:2f:39:ab:3e:36:fc:e3:83:c0:ac:
                    55:f4:90:13:14:49:89:ba:81:53:25:a0:96:12:08:
                    f3:ab:ff:23:b2:b7:77:0f:99:0b:1b:d9:6e:c5:19:
                    be:0a:51:c6:01:33:7c:1b:f2:a0:a7:67:11:71:ea:
                    17:63:7b:3d:1f:5a:5c:fc:79:c8:97:6b:5e:87:39:
                    b2:44:03:c0:f1:9f:d7:65:9d:09:be:3e:22:7e:e7:
                    da:d0:12:cd:ad:de:04:a7:47:70:39:d5:44:7d:dc:
                    d9:26:d3:9c:65:51:78:8c:74:cb:6e:bd:63:b8:f6:
                    7f:ff:c1:83:46:7d:03:ff:ac:1d:53:8e:73:b7:d3:
                    f8:5d:bd:6a:12:1d:9b:0b:56:7d:a2:a2:72:ca:84:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AA:AA:45:3B:E6:B2:9C:E2:BB:2D:DF:4A:5F:62:A9:6C:B0:4A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl

            X509v3 Authority Key Identifier:
                keyid:FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.156.0/22
                  209.142.84.0/22
                  209.209.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:ee:41:d2:38:03:cc:e6:64:38:88:63:94:59:6b:80:37:
         78:0f:11:8c:0c:d5:bc:cf:7f:a1:8f:bf:6f:c6:d4:5f:5a:31:
         0e:12:65:5a:f3:e5:c0:66:ec:82:b3:14:12:53:4a:51:a7:65:
         4e:93:6d:47:d5:34:3e:6b:65:2b:da:cb:8f:d8:1b:1c:ab:e5:
         c5:f2:2e:3d:56:db:7d:22:1a:92:9c:1f:e6:14:b9:5b:e9:88:
         37:49:8b:3a:eb:87:69:a0:0e:cd:19:f8:5c:2a:4f:0e:56:c0:
         b4:26:4d:a5:d8:18:c1:16:1a:49:63:a1:c3:43:a8:36:3a:f5:
         36:d2:ca:bc:5e:e6:ed:68:19:17:b2:a6:de:25:3f:d9:82:52:
         2c:a4:f8:94:75:34:04:08:94:1c:bc:bb:62:16:3a:d1:33:f9:
         9b:b8:56:dd:82:80:63:76:ec:18:6d:0e:2c:be:3b:53:fc:73:
         df:35:47:43:30:69:6d:ee:bd:8e:c7:14:38:f9:59:7a:b0:92:
         87:d3:9e:76:79:74:4f:e6:00:5f:bc:da:68:7e:7e:01:df:32:
         31:30:74:df:07:3c:a2:af:4a:f0:59:ea:f6:4a:b5:39:aa:bc:
         24:4d:f6:e8:dc:7a:1e:b3:c8:fb:0b:26:13:0b:1a:3d:c3:11:
         4f:ae:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:30:35 2025 by rpki-client