Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
File:                     f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa (raw, json)
Hash identifier:          IoY6X044Udms4pxb2seMV3FivLDGzGgZ08UJOOgoXwY=
Subject key identifier:   CD:D8:F7:8E:65:DA:BE:6A:70:2E:B5:51:AA:8A:FD:3D:E3:BE:0E:B8
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584B2761720A2B66F4A3C61B3470
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     210110
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:72:0a:2b:66:f4:a3:c6:1b:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=3ba1db40-5fb8-44e8-8c81-29851cc1339f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:ec:5c:c6:05:09:4b:15:d0:1c:4c:00:01:
                    82:81:17:b5:2f:1d:6a:c2:ed:69:28:77:6a:f9:62:
                    0c:15:3b:43:ff:1b:f3:56:cd:5f:c3:92:7e:d9:4c:
                    5a:73:e6:aa:bd:de:79:18:57:78:42:c4:dc:a6:fb:
                    9c:4e:16:3f:c3:7d:15:f5:f0:ff:d0:38:ae:ad:fd:
                    ae:2b:74:b7:7c:f6:54:dc:14:81:19:6c:33:3e:5c:
                    3d:2b:11:50:ff:f0:61:25:76:64:3d:f5:0f:37:d2:
                    0e:3d:be:5a:dd:13:39:d3:70:d1:92:a2:cd:d5:ac:
                    b1:03:a6:f8:ea:0b:e0:58:96:33:0b:d9:c9:db:9d:
                    3f:ca:a5:7c:97:43:72:51:95:d0:d2:40:76:ca:12:
                    c9:59:e6:04:47:2a:c3:6e:e2:99:4c:f9:40:7d:60:
                    27:dd:74:82:83:48:02:3c:72:b7:6c:f0:74:0b:6d:
                    96:84:7e:18:65:07:71:c1:43:a0:41:be:ce:6f:16:
                    a5:52:26:51:e8:fc:44:87:91:91:1f:fa:62:b2:fb:
                    71:a6:5e:cf:e0:e0:a7:18:be:db:ab:3c:9b:98:26:
                    d1:1e:7a:6a:80:85:b2:10:5d:d0:4b:94:71:ae:3a:
                    c6:31:c3:0f:df:55:7f:74:cf:1d:74:f8:f1:77:3d:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:F7:8E:65:DA:BE:6A:70:2E:B5:51:AA:8A:FD:3D:E3:BE:0E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/f62e1ae2-fffb-33be-9ebd-7473b8066eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e7:5e:4d:de:b1:c1:54:13:94:cc:fa:a3:52:0f:8e:e5:a8:
         2e:04:b1:07:b3:f4:b7:96:1c:55:d9:0b:80:8f:45:ed:30:66:
         d9:2b:24:88:e2:bf:ad:35:cc:24:a2:5f:02:21:4a:a6:6b:70:
         9f:12:be:d4:63:74:3f:4c:4e:04:e8:53:1d:73:20:8a:4a:ff:
         07:29:9a:ab:5c:87:bd:78:91:d8:15:b3:c7:c0:61:9c:41:7d:
         27:96:21:c7:e6:0b:c5:19:53:35:27:69:1e:4d:4f:51:ce:6e:
         8a:ac:f2:2a:05:37:ea:ef:77:65:ae:6e:54:6d:87:cb:29:bb:
         01:7e:83:c9:55:c1:79:a8:cb:6d:74:b2:c5:c2:e3:3b:4e:08:
         0f:1b:19:9f:63:c0:a5:17:f5:cf:c5:97:92:31:66:1b:cc:0c:
         83:79:8d:64:29:4b:59:de:de:ac:b2:25:d0:93:2d:d4:5e:72:
         6c:a1:e8:dc:0b:1c:ae:f3:a3:e0:95:b4:87:7e:2c:ae:da:a1:
         49:37:45:b2:2e:1c:7e:bd:1a:08:65:7a:8e:3d:e7:06:68:7a:
         3a:80:79:31:59:3b:42:7f:05:93:82:9b:44:6b:4b:87:e1:f5:
         77:9e:5f:89:1a:5c:a9:3e:42:38:52:21:60:91:a4:be:bd:0b:
         e4:5d:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:20:15 2025 by rpki-client