Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
File:                     cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json)
Hash identifier:          2p04psYLgDBxklgWgpnqfYo1jWalI6XSpZMZMv06djA=
Subject key identifier:   66:DC:75:E5:6B:33:8D:C9:9B:FA:4A:81:FD:E7:A0:1D:E2:51:77:0E
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584A71B64593D3B716310847AAA0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     21928
IP address blocks:        24.221.0.0/16 maxlen: 24
                          52.144.16.0/21 maxlen: 24
                          75.122.0.0/15 maxlen: 24
                          104.152.20.0/22 maxlen: 24
                          173.4.0.0/14 maxlen: 24
                          174.141.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:b6:45:93:d3:b7:16:31:08:47:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=4d6d78db-28b8-4957-81e8-d9be487c7188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:93:53:5f:86:d2:77:7a:4f:aa:ec:23:4f:
                    15:42:b8:6a:17:21:30:cc:df:be:98:c3:79:29:2c:
                    24:2c:24:72:89:5a:08:4c:87:56:2f:d3:2d:84:71:
                    f6:4c:5f:28:7c:a9:9c:74:f7:52:25:d3:24:06:89:
                    df:84:62:11:69:13:7d:36:e0:2d:37:45:aa:83:72:
                    f6:b9:fb:a6:05:6d:a3:29:5d:44:d5:06:c6:94:c0:
                    c0:db:dc:f0:4c:85:f3:6d:8b:c7:3c:e3:9b:48:f3:
                    ef:fe:fb:35:8d:35:3c:90:68:e8:bc:66:6b:73:16:
                    5c:23:9c:35:9f:5a:23:8f:83:ff:a4:03:03:78:ea:
                    95:64:09:f7:df:7c:21:dd:bc:96:e4:12:2e:46:84:
                    d8:4f:8a:f1:8c:f4:a2:8a:45:7d:3b:2c:eb:e2:48:
                    2e:92:43:f3:b1:da:38:c9:03:ac:31:4c:11:aa:0e:
                    1d:95:97:56:49:e5:d8:9e:55:e7:02:24:c5:21:ef:
                    61:70:e6:0b:45:8c:fb:ef:0c:9f:d8:c4:7d:f0:2a:
                    da:23:75:0d:c6:d3:f4:75:11:1d:79:2c:2b:03:91:
                    d4:d0:63:d4:4c:80:57:86:70:c7:3a:40:72:2f:cf:
                    67:00:b1:3b:f5:29:14:54:a4:88:25:7a:7f:9a:cc:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:75:E5:6B:33:8D:C9:9B:FA:4A:81:FD:E7:A0:1D:E2:51:77:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.221.0.0/16
                  52.144.16.0/21
                  75.122.0.0/15
                  104.152.20.0/22
                  173.4.0.0/14
                  174.141.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:ce:a4:7b:95:11:af:97:ee:13:7a:7d:9f:92:32:87:c8:
         6a:7d:16:63:05:37:e0:30:c9:fc:6c:2f:35:2b:36:02:4b:ab:
         ce:ec:7b:b9:ca:0b:45:2d:1b:6f:08:79:04:1b:69:95:31:94:
         e3:c8:b5:09:0a:e2:a3:ce:60:99:f9:52:12:49:ca:8a:d0:ef:
         27:a7:c6:7c:58:0f:34:44:c6:87:4c:d6:fb:a2:ed:da:9f:c0:
         ff:b1:f7:18:9b:ed:3e:a7:3f:8b:32:48:70:c3:f1:89:39:ca:
         2c:52:e5:69:a9:de:18:aa:53:c8:7f:fe:49:19:a2:72:6b:9a:
         d7:68:d4:d7:6a:a0:02:b8:c4:14:d8:d2:86:6c:a2:de:dd:c9:
         b7:42:99:8b:44:15:f3:78:2e:3b:b3:96:a1:09:46:fd:a7:62:
         76:19:d8:d0:89:41:48:61:cb:1e:7d:78:d0:d9:7f:0a:82:3f:
         1a:a1:d8:cd:70:57:71:53:ef:1a:3d:2d:2a:96:84:50:d4:dd:
         dd:c4:94:78:6a:52:74:ef:fb:e1:c6:72:a6:c8:9f:b2:8c:a6:
         ea:a5:d4:54:c4:55:34:7c:2d:9b:60:1c:46:21:2d:15:a5:c7:
         72:50:3e:2b:c5:d3:52:82:0f:81:3f:f5:9f:25:f3:c2:61:39:
         77:e6:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:02:50 2025 by rpki-client