Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
File:                     ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa (raw, json)
Hash identifier:          2bjeVx6akaM8+sLOmzGMWA+g0KBDXJp79VmMHjo3MOo=
Subject key identifier:   B4:80:21:6A:56:57:97:BA:FD:B8:36:37:A4:18:03:8D:6B:39:C9:A9
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F4328584ADECBBB0E60AA45527F81B540
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     19108
IP address blocks:        24.224.36.0/23 maxlen: 24
                          24.224.44.0/24 maxlen: 24
                          24.224.55.0/24 maxlen: 24
                          24.224.56.0/24 maxlen: 24
                          24.224.58.0/23 maxlen: 24
                          24.224.60.0/22 maxlen: 24
                          24.245.72.0/22 maxlen: 24
                          64.234.0.0/23 maxlen: 24
                          64.234.8.0/24 maxlen: 24
                          64.234.16.0/24 maxlen: 24
                          64.234.30.0/23 maxlen: 24
                          64.234.34.0/24 maxlen: 24
                          64.234.47.0/24 maxlen: 24
                          64.234.55.0/24 maxlen: 24
                          64.234.67.0/24 maxlen: 24
                          64.234.68.0/24 maxlen: 24
                          64.234.74.0/24 maxlen: 24
                          64.234.78.0/24 maxlen: 24
                          67.21.185.0/24 maxlen: 24
                          69.59.64.0/24 maxlen: 24
                          69.59.73.0/24 maxlen: 24
                          69.59.82.0/24 maxlen: 24
                          69.59.104.0/24 maxlen: 24
                          208.91.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bb:0e:60:aa:45:52:7f:81:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=5085a84f-f82c-45ab-b78d-aea93a76d4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:80:aa:9b:5c:00:78:ab:31:6e:09:83:76:
                    2d:3f:f8:42:22:ce:9b:f7:9c:b3:99:33:44:f0:ee:
                    83:ab:d1:97:34:73:ec:58:eb:7d:5a:c0:a1:ef:a6:
                    1c:4e:44:07:b9:bd:9e:41:7a:ec:68:7b:2e:73:bc:
                    1e:ca:7c:8c:7d:e7:a9:9a:a9:7d:6d:e4:01:d5:9e:
                    5e:f6:c8:50:e3:7a:26:1a:94:2a:cf:79:22:56:73:
                    3f:37:7a:dc:a2:e5:e7:48:ec:92:7d:12:e0:f0:9c:
                    d0:20:3b:6b:62:53:a6:75:81:54:8c:62:f0:d4:3b:
                    12:9e:28:a6:42:a0:31:45:b5:d7:74:d0:84:0e:08:
                    76:df:7d:1d:e8:eb:a1:47:b7:a5:08:35:06:3e:ac:
                    4f:8c:62:8b:04:a2:af:a2:a3:ce:1a:d9:3d:71:51:
                    b3:b8:3e:f7:c9:38:2f:f5:85:e4:45:a0:2c:95:98:
                    cb:50:ff:b0:22:53:9d:6f:3b:cc:7e:50:ba:25:c9:
                    e6:51:eb:c5:13:e2:38:78:af:f8:21:78:13:0d:fb:
                    70:9e:f8:aa:da:36:ef:d1:8a:05:32:cd:81:c4:94:
                    19:72:0d:84:94:a2:0a:e2:d7:50:80:d0:e6:c9:15:
                    87:b4:b3:08:b9:bb:24:78:98:de:8c:c3:30:59:48:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:80:21:6A:56:57:97:BA:FD:B8:36:37:A4:18:03:8D:6B:39:C9:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/ed27bdcf-9db7-396d-9f50-4784ec12e9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.36.0/23
                  24.224.44.0/24
                  24.224.55.0-24.224.56.255
                  24.224.58.0-24.224.63.255
                  24.245.72.0/22
                  64.234.0.0/23
                  64.234.8.0/24
                  64.234.16.0/24
                  64.234.30.0/23
                  64.234.34.0/24
                  64.234.47.0/24
                  64.234.55.0/24
                  64.234.67.0-64.234.68.255
                  64.234.74.0/24
                  64.234.78.0/24
                  67.21.185.0/24
                  69.59.64.0/24
                  69.59.73.0/24
                  69.59.82.0/24
                  69.59.104.0/24
                  208.91.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:e4:2c:6b:ea:4b:c3:85:42:28:11:57:d4:71:3c:3e:5e:
         65:e2:b5:8c:6f:4a:17:9e:dd:a2:0e:c0:b0:c6:a2:7f:a0:36:
         e7:e8:87:4d:ae:79:df:48:d7:85:5b:f7:49:63:03:f8:cb:c9:
         16:cf:ec:89:ca:9d:c6:01:0e:7a:2c:6e:95:92:1f:19:56:64:
         6c:ea:5a:14:0a:86:fb:c5:86:af:46:72:5a:75:61:72:82:8a:
         58:10:dc:d8:93:be:31:7e:00:10:fc:f1:7f:64:8f:99:02:0f:
         46:25:fa:9e:91:9a:7f:b0:47:ff:2f:5e:87:c8:e6:03:51:b4:
         4a:28:76:28:8f:04:11:2b:65:7f:30:36:f7:82:96:df:35:c4:
         c5:b9:be:83:fc:1a:8e:30:16:76:e5:09:8a:d2:b6:43:3f:ce:
         b2:b8:f5:c2:e6:fe:21:47:a8:55:e6:4e:0e:52:a4:c1:98:1e:
         8f:56:52:3e:13:c6:aa:8e:f6:e2:2a:eb:5b:ab:20:89:9e:79:
         c5:c7:0d:8c:fc:24:33:46:8e:90:5b:22:d0:d8:b9:2a:9c:f2:
         d5:ac:91:df:40:89:11:0c:bf:c5:68:4a:7a:b4:33:2a:5c:dd:
         d2:51:67:92:22:94:3e:ff:f1:bd:4f:84:28:af:8d:9e:ea:82:
         5b:ce:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:57:40 2025 by rpki-client