Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
File:                     05d53889-8629-3f75-b779-6895e4c540d0.roa (raw, json)
Hash identifier:          G8M9PYQVRnwSM1JCHYTCWs46bQBU43A2a2P5zPEVDDY=
Subject key identifier:   37:BD:E1:2A:AF:4E:12:C5:C9:27:8E:F5:2E:C6:5F:FC:9B:B8:7A:D7
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584AC8763CB5710A590AF8170180
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     32329
IP address blocks:        52.119.112.0/20 maxlen: 24
                          104.193.168.0/22 maxlen: 24
                          104.244.24.0/22 maxlen: 24
                          148.64.96.0/20 maxlen: 24
                          158.247.68.0/22 maxlen: 24
                          162.217.72.0/22 maxlen: 24
                          162.245.20.0/22 maxlen: 24
                          176.108.136.0/21 maxlen: 24
                          192.195.80.0/22 maxlen: 24
                          199.83.220.0/22 maxlen: 24
                          199.116.72.0/22 maxlen: 24
                          199.188.192.0/22 maxlen: 24
                          199.230.10.0/23 maxlen: 24
                          199.241.200.0/22 maxlen: 24
                          207.53.252.0/22 maxlen: 24
                          208.69.40.0/22 maxlen: 24
                          208.90.212.0/22 maxlen: 24
                          2607:f598::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:3c:b5:71:0a:59:0a:f8:17:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=f830c53e-08b7-417f-b328-4c1b17ef7c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:83:2f:c9:b9:e1:76:76:01:73:0e:20:ba:
                    65:bc:5b:b1:1f:70:36:e1:6c:32:56:c6:33:bf:8c:
                    7f:c8:b5:69:22:c1:8c:af:44:55:e7:b1:3d:1e:00:
                    9c:32:74:ce:da:ef:fe:2e:d3:8a:d0:1b:12:dc:29:
                    0c:1b:b5:a0:fe:a1:e4:e8:6c:7a:46:f5:72:46:20:
                    16:1b:18:97:8c:6d:5b:77:df:f6:e8:53:75:9e:b5:
                    1f:86:c3:e4:8b:6b:9b:0f:8d:24:78:7c:91:fc:47:
                    e0:b7:24:25:c0:ce:45:e8:2c:da:d0:0f:2c:dc:09:
                    8f:ef:48:9c:43:f7:c3:06:37:e7:73:c4:97:02:04:
                    d3:0e:7b:62:b0:8a:21:c0:d3:c4:79:62:76:16:db:
                    81:45:b7:51:dd:38:8b:f3:04:a2:ba:4a:f4:67:38:
                    55:bf:be:79:e9:2a:35:be:dc:ad:70:7c:a3:c7:c5:
                    ac:ba:67:38:95:ab:00:f3:b2:28:be:5b:64:b2:37:
                    9c:cc:16:3c:b1:ac:b5:63:7d:1c:c1:be:42:81:f7:
                    2d:45:7b:4a:ca:87:b2:47:4a:69:68:8b:1d:b0:6d:
                    dc:34:ba:e6:c0:f7:8f:60:d4:c6:67:5c:6b:f9:f1:
                    a3:20:c9:d0:70:f2:da:5a:73:ed:77:f6:56:0a:f9:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BD:E1:2A:AF:4E:12:C5:C9:27:8E:F5:2E:C6:5F:FC:9B:B8:7A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.112.0/20
                  104.193.168.0/22
                  104.244.24.0/22
                  148.64.96.0/20
                  158.247.68.0/22
                  162.217.72.0/22
                  162.245.20.0/22
                  176.108.136.0/21
                  192.195.80.0/22
                  199.83.220.0/22
                  199.116.72.0/22
                  199.188.192.0/22
                  199.230.10.0/23
                  199.241.200.0/22
                  207.53.252.0/22
                  208.69.40.0/22
                  208.90.212.0/22
                IPv6:
                  2607:f598::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:46:14:58:8c:e3:11:21:84:07:40:c2:be:a6:28:0d:3e:d5:
         ed:cc:2d:e1:17:f8:d8:56:22:28:3c:ad:4e:88:36:ff:47:9e:
         f0:cd:36:db:f5:cc:49:cd:7f:f4:ee:33:40:81:f9:5d:01:a3:
         52:88:00:1c:5e:c5:a8:db:2f:d3:58:b1:05:07:79:fa:fc:ce:
         d8:7b:50:48:c3:a1:71:7e:94:8a:57:4f:fb:87:ed:0b:71:f2:
         1e:27:a3:45:f6:27:c0:f9:3b:0f:03:f2:fd:98:ee:41:e5:fa:
         eb:ae:6e:ec:5b:a6:ff:0f:38:fb:18:17:bd:57:40:7c:b7:ef:
         71:67:2f:6c:9b:f4:29:1b:26:d9:09:30:cf:69:b6:b7:d2:cb:
         3b:a3:d4:6f:36:0a:5f:1f:68:f4:2c:65:23:35:e4:4c:8c:d6:
         5d:1e:53:5e:81:b6:71:3c:20:b4:74:14:be:21:c2:76:fa:64:
         f1:76:d7:57:cc:cb:23:49:32:12:36:03:09:b1:8e:db:a3:8b:
         86:a7:cb:99:40:39:b7:15:17:87:13:cd:07:18:7f:d0:1f:c5:
         2d:d3:30:cf:ce:23:9e:ef:92:ff:cb:5f:65:c2:97:81:f7:7d:
         35:7f:d7:c5:65:8b:17:fc:86:ce:36:69:d7:9d:b9:cd:57:22:
         76:4a:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:28 2025 by rpki-client