Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/b284e85b-b9dc-3cf2-99dc-e5304672f39b.roa
File:                     b284e85b-b9dc-3cf2-99dc-e5304672f39b.roa (raw, json)
Hash identifier:          3CjDxfcRHvd62WNODgT04ZrhTBfNEyCyFBmM7rx3yoY=
Subject key identifier:   20:CF:E9:5E:88:84:54:49:C0:05:1B:3D:48:FA:67:62:1F:57:99:05
Certificate issuer:       /CN=01e76461-567a-47c1-a387-9b9f7415be5f
Certificate serial:       010D0C9F4328584A3964F56F8A2AED68DA250280
Authority key identifier: DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/b284e85b-b9dc-3cf2-99dc-e5304672f39b.roa
Signing time:             Tue 17 Jun 2025 19:05:15 +0000
ROA not before:           Tue 17 Jun 2025 19:05:15 +0000
ROA not after:            Mon 15 Sep 2025 19:05:15 +0000
asID:                     21833
IP address blocks:        170.232.0.0/20 maxlen: 24
                          170.232.16.0/20 maxlen: 24
                          170.232.32.0/20 maxlen: 24
                          208.98.64.0/20 maxlen: 24
                          208.98.80.0/20 maxlen: 24
                          208.98.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:64:f5:6f:8a:2a:ed:68:da:25:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e76461-567a-47c1-a387-9b9f7415be5f
        Validity
            Not Before: Jun 17 19:05:15 2025 GMT
            Not After : Sep 15 19:05:15 2025 GMT
        Subject: CN=5ca323b1-78df-4739-acaa-b3a639e631c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:20:c8:bd:0a:53:60:3b:42:d9:2f:2d:64:
                    12:bb:42:64:3e:43:ec:14:bd:06:db:b1:9c:8a:48:
                    b9:d6:c6:01:ba:4f:05:71:b9:8e:3e:e3:a9:51:53:
                    8e:5c:7c:19:5c:ae:fb:a0:65:0c:1e:16:75:ec:22:
                    45:87:2a:96:ad:44:e1:d0:28:30:c9:a2:e6:c6:02:
                    52:e9:05:dc:3f:ca:c4:5f:a2:c8:d8:6a:56:fd:7e:
                    f1:6b:19:86:09:52:f2:f8:1a:21:ce:fe:fd:f8:fc:
                    15:95:0a:08:3a:03:c3:46:00:86:7d:bb:57:bf:90:
                    e9:be:60:19:c4:2b:33:aa:b1:6b:26:a8:27:1b:67:
                    4c:89:46:26:78:64:04:dc:51:41:c4:0b:c8:25:9e:
                    13:6b:44:04:a0:eb:d4:b9:70:a5:e8:84:33:3d:f9:
                    f5:9d:63:bc:d9:c1:9c:e3:d1:ae:8b:28:4f:9d:40:
                    03:f1:b7:53:4d:5b:1f:ce:95:36:65:24:bf:ee:f0:
                    06:c6:62:39:94:23:28:89:37:f6:8f:97:8f:23:21:
                    05:ab:f7:03:54:2c:24:11:da:1f:25:c5:24:9a:d4:
                    07:0b:4a:2c:78:f7:c2:e9:36:e4:af:ef:1b:07:be:
                    40:31:6a:29:e3:ef:36:a4:91:76:7c:dd:a5:4e:9e:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:E9:5E:88:84:54:49:C0:05:1B:3D:48:FA:67:62:1F:57:99:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/b284e85b-b9dc-3cf2-99dc-e5304672f39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.232.0.0-170.232.47.255
                  208.98.64.0-208.98.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:ee:f5:26:14:44:d7:aa:eb:27:fd:85:c0:bf:e4:84:35:
         a5:e8:c4:b4:0b:40:26:d9:fe:b6:30:f0:d8:2b:14:29:02:a0:
         2b:88:fb:10:22:53:e5:fb:57:78:ac:a5:04:63:01:93:85:e4:
         b3:22:56:96:12:61:db:6c:29:00:12:c8:96:b9:57:06:34:cc:
         e4:fe:48:04:88:4e:f6:72:08:82:b2:6c:4c:3a:6b:dd:6c:bd:
         cf:26:6a:14:1c:7a:3c:d4:d1:91:76:87:d5:1a:9a:5b:9b:1e:
         92:74:47:13:ea:ce:de:2a:92:b9:0a:86:30:8f:a8:04:82:9c:
         e5:61:fa:a5:17:93:b0:74:48:55:40:d1:8b:78:9c:a0:66:31:
         e7:26:26:ad:52:9e:9c:94:e0:fe:1b:35:db:3d:ee:8d:ef:36:
         95:61:7e:df:e9:22:25:98:89:c4:00:bd:a0:f0:2e:d5:0e:35:
         bf:a8:25:cd:92:d0:a9:a5:93:9f:cd:5f:d0:80:27:c4:3c:68:
         77:f1:cb:d0:b9:e2:a4:48:cc:a0:e3:78:44:32:d2:7b:00:14:
         51:29:18:0a:9c:e1:37:70:74:7e:4c:7e:57:5c:f2:0a:f2:bd:
         b8:f2:4f:7b:2d:32:96:42:31:c5:e7:c5:44:c9:a2:0c:aa:3d:
         41:4b:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:48:41 2025 by rpki-client