Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa
File:                     632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa (raw, json)
Hash identifier:          cJrb6Wqf8uyWkicL443prvPrIadgUiMIAR0ZAX3yaUc=
Subject key identifier:   C8:69:FB:8C:E4:BC:C7:5E:DD:69:EF:26:CF:7B:65:71:98:D2:3F:A3
Certificate issuer:       /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial:       010D0C9F4328584A5FFC6A5A79134C6CE3D1B080
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     19237
IP address blocks:        64.6.96.0/20 maxlen: 20
                          64.57.64.0/19 maxlen: 19
                          64.255.0.0/18 maxlen: 18
                          66.37.0.0/19 maxlen: 19
                          204.10.137.0/24 maxlen: 24
                          204.10.138.0/23 maxlen: 23
                          204.10.140.0/22 maxlen: 22
                          216.17.96.0/20 maxlen: 20
                          216.239.129.0/24 maxlen: 24
                          216.239.130.0/23 maxlen: 23
                          216.239.132.0/22 maxlen: 22
                          216.239.136.0/21 maxlen: 21
                          2607:fe90::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:fc:6a:5a:79:13:4c:6c:e3:d1:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=fdf83450-e619-4297-9a7b-059a004f2873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:51:1c:ce:90:47:56:70:42:19:a4:24:a4:
                    89:db:18:83:90:e7:8c:12:81:e9:76:2a:d9:8b:ad:
                    06:11:d4:e8:e1:07:90:41:f1:b5:24:09:17:03:31:
                    d1:da:7b:cf:1f:93:10:e9:a3:ab:0d:94:2a:c4:55:
                    e7:a8:3f:cd:1a:cf:70:91:4a:b0:b0:48:76:a6:e2:
                    00:2d:9b:c6:40:da:ae:e5:d6:05:18:5c:11:ae:40:
                    9e:8b:94:0f:bb:3d:67:43:55:6b:50:f1:e3:24:20:
                    38:e9:ea:95:93:44:6f:6d:d0:7d:5a:c4:3a:29:20:
                    95:ae:ce:fe:36:c1:80:e4:5d:99:b1:aa:5a:03:c8:
                    61:ac:5a:8c:59:84:c0:15:06:57:f8:2c:d1:e1:1d:
                    3e:37:f3:e9:c0:71:c2:dc:98:c7:aa:ad:c8:d2:fe:
                    c2:97:7c:63:71:4a:aa:4c:4e:63:9a:8d:cd:54:65:
                    c0:b6:6f:d4:aa:ad:8d:b3:d2:86:cf:aa:86:af:a1:
                    ef:88:73:cd:24:a0:9f:90:df:ac:5e:7b:9a:db:84:
                    71:42:6a:64:5a:f6:e1:9c:b0:ef:4c:f0:2d:21:3b:
                    9a:cb:a1:af:20:a9:34:44:00:77:53:46:72:cb:e2:
                    b3:ef:6b:01:dc:d9:81:7f:c9:5c:7e:ce:af:b6:9b:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:FB:8C:E4:BC:C7:5E:DD:69:EF:26:CF:7B:65:71:98:D2:3F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.96.0/20
                  64.57.64.0/19
                  64.255.0.0/18
                  66.37.0.0/19
                  204.10.137.0-204.10.143.255
                  216.17.96.0/20
                  216.239.129.0-216.239.143.255
                IPv6:
                  2607:fe90::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:ac:57:f4:74:9b:46:ee:6b:de:42:c8:6e:7f:2e:ec:68:
         25:93:3e:05:6a:8e:c1:27:d5:b8:5e:0f:55:58:2b:63:5e:49:
         4e:fd:07:fb:a5:0a:f9:16:01:48:f1:12:d6:4a:31:94:3b:d2:
         af:92:c9:5c:ba:12:06:5e:c6:17:b5:b3:2f:54:5c:5e:ba:b4:
         d1:ba:75:b9:42:a0:a2:4c:2e:97:34:05:7e:7a:79:18:2f:f5:
         f5:ae:68:00:43:dd:ae:60:7d:29:c7:a6:73:f6:76:01:9c:6a:
         48:f9:f1:67:5a:c7:01:a0:57:9e:ea:ab:e0:48:89:da:06:49:
         74:f8:23:16:ab:a8:c6:5c:3f:50:82:3f:bf:d8:a6:41:b1:f0:
         49:ce:55:69:1a:5c:e1:10:38:43:d8:29:c4:8d:8f:ab:c1:ca:
         30:f5:08:fb:45:c0:d5:72:f5:d6:42:fc:d0:16:7f:1d:45:9b:
         d3:69:56:a3:83:72:12:6a:56:b3:74:26:3a:0f:e4:79:b5:db:
         ce:56:83:ab:61:fe:fc:2a:ee:28:53:1d:58:e5:74:56:7a:89:
         47:6c:80:e4:4e:3b:62:30:f9:73:23:dd:fb:d4:88:39:2c:1a:
         b2:32:f9:1f:32:fa:eb:d9:9a:a1:6e:49:c8:04:61:4b:46:ea:
         75:4d:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:31:19 2025 by rpki-client