Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa
File:                     0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (raw, json)
Hash identifier:          yiw8BJSUS04O5MtV/wbVB9vG8DzqbzVFPZD0NZZ/DkM=
Subject key identifier:   67:66:79:5D:CD:63:EE:BD:D5:3E:9C:D1:17:17:A6:14:DA:34:E4:F9
Certificate issuer:       /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
Certificate serial:       010D0C9F4328584A7944CF92ADFCA82378E76500
Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa
Signing time:             Tue 06 May 2025 20:00:21 +0000
ROA not before:           Tue 06 May 2025 20:00:21 +0000
ROA not after:            Mon 04 Aug 2025 20:00:21 +0000
asID:                     19684
IP address blocks:        23.174.152.0/24 maxlen: 24
                          23.174.153.0/24 maxlen: 24
                          69.67.164.0/22 maxlen: 22
                          69.67.164.0/23 maxlen: 23
                          69.67.166.0/23 maxlen: 23
                          162.254.224.0/21 maxlen: 21
                          207.29.192.0/21 maxlen: 21
                          207.29.192.0/23 maxlen: 23
                          207.29.194.0/23 maxlen: 23
                          207.29.196.0/23 maxlen: 23
                          207.29.198.0/23 maxlen: 23
                          2607:9540::/32 maxlen: 32
                          2607:9540::/44 maxlen: 44
                          2607:9540:10::/44 maxlen: 44
                          2607:9540:20::/44 maxlen: 44
                          2607:9540:30::/44 maxlen: 44
                          2607:9540:40::/44 maxlen: 44
                          2607:9540:50::/44 maxlen: 44
                          2607:9540:60::/44 maxlen: 44
                          2607:9540:70::/44 maxlen: 44
                          2607:9540:40f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:44:cf:92:ad:fc:a8:23:78:e7:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
        Validity
            Not Before: May  6 20:00:21 2025 GMT
            Not After : Aug  4 20:00:21 2025 GMT
        Subject: CN=e82442ad-0afa-4a2d-9d48-cb066d04118a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:30:4b:00:4c:9e:77:ae:7f:19:84:cb:61:
                    f0:77:a1:3c:67:b0:1b:17:f3:e1:c4:84:7e:17:e2:
                    f8:5c:1e:83:a3:74:ad:ae:7b:8b:b5:fa:1a:ca:dc:
                    a5:0a:59:93:be:98:4f:da:c4:87:95:82:0e:df:bf:
                    1a:05:cf:40:47:b4:4c:80:e2:6c:ac:6e:0c:a1:07:
                    8d:35:41:86:67:3f:21:78:8c:4f:53:99:93:98:ac:
                    52:4d:43:97:31:f6:0d:25:41:68:bb:33:4c:a0:1e:
                    55:80:42:9f:7f:7b:1e:a9:5b:7f:25:22:93:d4:21:
                    c1:13:83:6a:cd:b9:ee:e6:fb:c3:6a:f6:5d:76:13:
                    eb:77:23:c8:f4:c9:f1:7c:ad:fe:6e:c1:d4:55:27:
                    00:cb:fd:c4:49:05:08:c3:32:9a:68:75:2d:4d:3c:
                    8d:42:bf:ae:0b:c6:d0:ba:c7:8c:09:e7:91:e5:75:
                    53:70:dd:89:bf:b5:52:c1:4c:45:e7:e7:0a:67:9a:
                    28:33:60:97:1b:23:e5:ca:2d:30:f1:69:ea:4c:7e:
                    78:4b:89:8d:a3:02:ab:c4:a4:3d:70:20:33:17:7b:
                    21:da:7b:cf:8c:d0:17:56:78:89:ac:aa:f6:1b:5c:
                    7c:2b:41:22:89:16:cb:16:31:51:3c:92:84:05:da:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:79:5D:CD:63:EE:BD:D5:3E:9C:D1:17:17:A6:14:DA:34:E4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl

            X509v3 Authority Key Identifier:
                keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.152.0/23
                  69.67.164.0/22
                  162.254.224.0/21
                  207.29.192.0/21
                IPv6:
                  2607:9540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:bd:16:46:f3:2e:15:91:24:5f:cc:8a:d4:b4:72:20:5a:
         39:5e:95:02:71:c9:69:80:bb:3a:61:b4:c1:fa:09:a3:73:a6:
         94:11:de:3f:9e:9d:38:0a:02:51:2b:e9:2b:a0:a2:ba:68:3d:
         e5:9d:c5:28:d2:b9:bb:54:6d:1f:85:44:c4:81:cf:b4:0d:14:
         2f:22:55:23:47:7d:76:b5:0a:10:85:e7:8e:e6:ba:87:74:db:
         06:dc:fa:1c:e4:48:60:40:60:0c:79:91:0a:07:a9:03:47:ee:
         b3:49:e0:d4:dc:0a:dd:30:fa:64:ca:92:12:b3:55:be:fe:1a:
         2e:27:f8:59:2c:d3:35:c2:2c:d2:b2:ba:29:75:63:25:53:f8:
         2f:72:25:ef:b2:0f:c3:a5:cc:18:c2:a8:a8:f4:03:44:ee:19:
         f6:77:88:6c:c9:8b:34:02:9d:26:b9:9e:2e:ea:c1:25:e1:4e:
         6f:e4:9c:92:7c:7d:73:af:5a:d1:4a:35:94:61:9a:15:79:a2:
         9d:46:c3:6e:a6:f5:ee:a8:c0:6b:f3:78:01:69:6c:bf:ef:78:
         0e:2a:00:34:77:71:4d:da:df:7f:4f:7d:1a:89:2f:bf:ab:76:
         33:b8:24:94:02:b0:8e:63:d6:ea:53:32:11:57:60:12:91:87:
         44:e1:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 21:51:41 2025 by rpki-client