Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa
File:                     a21e9270-f842-30f7-ba10-1ecee42f150f.roa (raw, json)
Hash identifier:          vMYibntIaLjqEohdt98jQ2qZf7dh4xm/OG7JZ9NT9T4=
Subject key identifier:   9B:AF:4B:5A:2D:63:8E:D0:90:9F:1A:B4:C6:B1:CB:7F:B4:8B:78:5D
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A6290938F3208251C6820BB00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19871
IP address blocks:        50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:93:8f:32:08:25:1c:68:20:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=02cf2b69-7e6b-41e1-9694-20c77c232da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:59:72:0e:73:45:c1:b8:fa:3e:a2:cc:d9:
                    fd:03:a7:ec:77:01:6c:33:ff:dd:b6:6f:4d:8b:1c:
                    30:41:9b:fc:24:fc:9c:e1:37:42:2f:87:1f:a9:f7:
                    7a:76:db:9e:b8:38:c0:10:7f:7e:63:9e:16:aa:f0:
                    ce:8c:49:de:6e:e4:3b:6d:66:73:74:fa:2d:92:93:
                    e6:f3:5e:e6:7b:92:2d:0b:b2:53:b0:9c:c2:6e:a4:
                    a2:41:a3:48:33:2d:42:a9:44:35:b5:55:7b:27:f4:
                    a1:b4:3a:4e:66:5b:01:2a:f5:1b:1c:21:3d:f7:23:
                    ba:4c:b0:8c:12:8a:d4:f4:f5:d4:19:cf:6c:76:04:
                    89:e6:e3:32:ec:f3:c6:5f:b9:dd:73:84:52:15:0e:
                    d8:a6:f3:f9:40:0a:9f:03:52:78:a1:ef:66:12:cf:
                    0e:4a:1e:9a:5b:3a:23:ac:4d:43:81:2e:87:c3:a3:
                    25:7c:81:9e:99:36:35:0a:bd:52:a9:d2:47:75:0a:
                    a6:52:7a:8e:be:6b:db:76:6e:46:33:d8:89:d4:7f:
                    75:bd:58:03:81:96:97:22:65:f1:d7:8c:04:ff:1a:
                    3d:32:d2:69:c8:c3:4a:d2:d2:96:70:74:15:38:9e:
                    53:4a:01:56:16:47:4f:d0:d4:0a:d3:ce:b8:99:58:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:4B:5A:2D:63:8E:D0:90:9F:1A:B4:C6:B1:CB:7F:B4:8B:78:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/a21e9270-f842-30f7-ba10-1ecee42f150f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:56:f6:e0:bb:ee:ea:b1:7c:fa:b5:fe:b0:23:ff:10:5f:
         97:8a:83:72:d9:e0:6c:49:91:24:3c:07:61:df:ed:0d:3e:22:
         7b:58:b2:1c:ca:1b:0a:90:ba:7d:c8:ef:90:3d:8b:31:67:97:
         9f:8e:6c:79:00:8d:22:51:75:de:39:8c:a9:be:cb:c9:08:9d:
         4a:d2:ae:7a:b8:6a:67:78:6e:15:27:89:45:2b:d0:32:85:aa:
         9f:90:bd:a6:fb:8a:96:5a:d0:50:60:f3:3e:3d:b5:43:b6:a6:
         c3:be:5d:19:58:15:d4:03:f4:8e:d3:32:73:23:1e:cf:1a:b3:
         89:d6:13:b6:b6:1f:06:93:a3:27:91:e8:00:68:f1:c0:5e:3d:
         56:96:f1:0a:30:a1:64:07:db:5c:a0:3e:45:8b:31:9a:47:5b:
         8f:66:12:31:06:71:ce:e0:c8:51:d0:5b:06:71:e2:73:e7:18:
         87:d4:d0:cf:0e:63:29:30:40:69:aa:62:96:8b:a6:13:7d:20:
         f0:b4:bc:2b:38:49:08:23:5e:62:d2:2b:ee:db:60:57:67:1d:
         11:28:17:52:d2:01:c8:b4:11:cc:4d:75:b0:25:d4:bb:12:cf:
         74:19:69:96:fe:ec:8e:2b:88:b2:d2:2c:c1:2c:e9:c7:b7:49:
         a9:5a:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:06:18 2025 by rpki-client