Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/1d723c57-8320-387f-b4e0-ed3f6abab233.roa
File:                     1d723c57-8320-387f-b4e0-ed3f6abab233.roa (raw, json)
Hash identifier:          mMgXHI7xDknpjqZx5i79Sl1iSeRbWnydfYMOx0uiM6Q=
Subject key identifier:   24:98:B0:97:22:1F:C1:13:08:B4:56:E2:88:79:38:B5:1C:81:A8:ED
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328584B1F01789639B48C500395AB00
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/1d723c57-8320-387f-b4e0-ed3f6abab233.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16276
IP address blocks:        15.235.0.0/17 maxlen: 17
                          15.235.128.0/17 maxlen: 17
                          51.79.0.0/17 maxlen: 17
                          51.79.128.0/17 maxlen: 17
                          51.161.0.0/17 maxlen: 17
                          51.161.128.0/17 maxlen: 17
                          51.222.0.0/16 maxlen: 16
                          54.39.0.0/16 maxlen: 16
                          66.70.128.0/17 maxlen: 17
                          139.99.0.0/17 maxlen: 17
                          139.99.128.0/17 maxlen: 17
                          142.4.192.0/19 maxlen: 19
                          144.217.0.0/16 maxlen: 16
                          148.113.0.0/18 maxlen: 18
                          148.113.128.0/17 maxlen: 17
                          149.56.0.0/16 maxlen: 16
                          158.69.0.0/16 maxlen: 16
                          167.114.0.0/17 maxlen: 17
                          167.114.128.0/18 maxlen: 18
                          167.114.192.0/19 maxlen: 19
                          167.114.224.0/19 maxlen: 19
                          192.95.0.0/18 maxlen: 18
                          198.27.64.0/18 maxlen: 24
                          198.50.128.0/17 maxlen: 17
                          198.100.144.0/20 maxlen: 20
                          198.245.48.0/20 maxlen: 20
                          2607:5300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:78:96:39:b4:8c:50:03:95:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ba0daffd-d5c7-4cbf-9d12-ce912bbcb403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:ad:99:4d:06:fc:86:2b:db:e4:99:f0:31:
                    94:d7:ec:78:f3:21:c3:42:e9:83:89:8c:9d:7b:2b:
                    8f:fb:c2:0f:f2:2c:eb:a2:76:80:67:80:5a:2f:3c:
                    2c:0e:5f:51:05:13:94:f8:28:cc:d8:85:56:5d:46:
                    40:2e:ee:ce:ea:4e:b9:8d:57:b3:3d:bc:bd:07:f6:
                    b4:05:00:f7:ca:62:40:8a:4c:6a:dd:ec:51:f1:b2:
                    b0:11:d3:49:fa:f8:a9:fb:37:aa:8a:3b:37:cd:c2:
                    73:60:ff:97:16:8c:cc:39:1c:b5:10:2a:90:8e:3d:
                    b3:77:cc:8c:4c:1e:fc:2b:dc:ab:7c:f1:11:de:3b:
                    83:5f:e5:f7:e0:8f:03:2c:d4:02:33:7d:f4:48:4f:
                    42:ae:60:34:7b:1c:54:25:ed:0e:af:8c:5b:91:6c:
                    03:0f:dd:5d:89:e3:bf:cd:20:60:27:6c:51:2a:f6:
                    ac:76:43:f6:be:e5:14:46:77:46:c1:9b:c8:a7:a7:
                    46:95:7f:44:39:3e:49:55:c4:e8:1e:e0:b2:e8:7a:
                    7a:2c:95:d4:9d:33:7b:ea:92:fa:a3:09:db:be:08:
                    9e:83:20:dd:e7:db:ef:14:a0:4e:24:22:f4:3c:03:
                    99:9b:ab:43:df:4c:04:f1:a4:a3:08:93:f6:d2:ff:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:B0:97:22:1F:C1:13:08:B4:56:E2:88:79:38:B5:1C:81:A8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/1d723c57-8320-387f-b4e0-ed3f6abab233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.235.0.0/16
                  51.79.0.0/16
                  51.161.0.0/16
                  51.222.0.0/16
                  54.39.0.0/16
                  66.70.128.0/17
                  139.99.0.0/16
                  142.4.192.0/19
                  144.217.0.0/16
                  148.113.0.0/18
                  148.113.128.0/17
                  149.56.0.0/16
                  158.69.0.0/16
                  167.114.0.0/16
                  192.95.0.0/18
                  198.27.64.0/18
                  198.50.128.0/17
                  198.100.144.0/20
                  198.245.48.0/20
                IPv6:
                  2607:5300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:f1:cc:69:e2:e6:e5:e2:b1:17:1f:4c:c6:8d:e8:ee:bc:
         17:60:d7:36:f6:3d:b5:2d:ce:b7:0f:d1:ae:4e:41:00:f9:cd:
         35:76:0f:54:78:76:0b:3e:18:d0:f1:53:36:b0:3f:96:08:4e:
         88:49:e4:a2:9b:4b:bc:55:cd:04:c4:a4:ec:8f:8d:bf:2b:11:
         ec:ea:27:10:5e:5e:b6:52:8a:56:32:b8:3c:50:06:b1:7a:1e:
         96:92:cf:13:8a:aa:00:13:b7:f9:33:b5:c0:75:c3:81:42:d7:
         d5:df:4e:26:20:fb:2a:f5:34:48:38:3b:b2:14:ba:b7:66:07:
         b9:a4:ae:c9:38:df:79:21:9f:4b:2d:9f:2a:79:27:5e:b2:12:
         20:75:48:79:c1:69:b3:4c:90:79:5b:b9:70:d5:fd:5d:4b:77:
         3c:0b:76:36:06:cb:7a:98:7a:26:72:12:fe:95:9f:9c:af:33:
         63:7c:47:9a:4e:96:ff:7e:86:31:da:92:e9:4f:b0:da:31:5e:
         8c:b6:72:4d:ad:08:65:fe:cb:75:66:95:82:f0:65:44:f8:44:
         ed:82:c7:ac:74:4f:a4:20:69:d2:b4:b8:85:b8:92:91:75:d3:
         dd:e7:c6:e6:2f:fd:65:b2:04:f9:c3:3f:d4:17:30:19:be:b5:
         3e:ac:92:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:13 2025 by rpki-client