Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
File:                     5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa (raw, json)
Hash identifier:          m69UkNtoXX6cdNG4Ur+PKCfqbeDZrdcYFZSYradqeEE=
Subject key identifier:   F1:2A:4D:74:73:ED:4A:7C:B4:2A:55:E8:29:F6:9F:13:E0:36:DB:07
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849D594D68C0FB94C1B90B916B8
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     21859
IP address blocks:        23.91.96.0/20 maxlen: 24
                          23.236.96.0/20 maxlen: 24
                          23.236.112.0/20 maxlen: 24
                          23.248.160.0/19 maxlen: 24
                          23.251.96.0/19 maxlen: 24
                          45.40.48.0/20 maxlen: 24
                          45.43.32.0/19 maxlen: 24
                          45.43.59.0/24 maxlen: 24
                          65.255.32.0/20 maxlen: 24
                          69.28.48.0/20 maxlen: 24
                          104.218.160.0/21 maxlen: 24
                          104.254.112.0/21 maxlen: 24
                          107.150.96.0/19 maxlen: 24
                          107.150.113.0/24 maxlen: 24
                          107.151.128.0/18 maxlen: 24
                          107.155.0.0/18 maxlen: 24
                          128.1.0.0/16 maxlen: 24
                          128.1.42.0/24 maxlen: 24
                          128.14.0.0/16 maxlen: 24
                          162.221.4.0/22 maxlen: 24
                          162.221.192.0/21 maxlen: 24
                          169.197.96.0/19 maxlen: 24
                          172.81.120.0/21 maxlen: 24
                          172.96.112.0/20 maxlen: 24
                          192.254.80.0/20 maxlen: 24
                          199.91.72.0/22 maxlen: 24
                          199.190.44.0/22 maxlen: 24
                          199.245.56.0/21 maxlen: 24
                          208.81.200.0/22 maxlen: 24
                          209.177.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:8c:0f:b9:4c:1b:90:b9:16:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=77105080-bd78-44ea-a179-f806244242de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:3c:85:01:05:20:f8:d3:cd:39:96:a3:dd:
                    4b:c1:d9:58:07:33:b6:17:fd:77:98:17:e7:26:5a:
                    85:f8:f2:4b:ef:7d:d9:7b:2e:d2:b7:1c:e6:84:69:
                    bc:31:2f:7e:e2:0b:3a:40:a4:0e:82:c3:ac:c7:d8:
                    69:d1:9f:01:17:f8:0f:44:b2:d8:0e:02:76:a3:a8:
                    c4:a6:54:c9:fb:3e:26:5b:0c:fc:72:9a:8b:e6:5a:
                    7d:ad:f9:eb:f5:9f:f9:27:21:fc:6c:4b:af:e7:1a:
                    8b:51:e7:f4:63:5a:06:a7:09:16:fb:b6:fb:ee:81:
                    68:32:66:4c:6a:97:17:1b:ad:ad:8f:a3:c6:2c:26:
                    1d:fd:97:c9:2a:b5:f9:bb:0b:89:4e:7f:47:bc:21:
                    87:50:8f:c1:8a:c8:4f:36:a2:89:65:4f:c3:25:d4:
                    0b:3e:eb:76:e8:cb:da:42:60:51:bc:51:b6:ee:af:
                    81:8c:ef:86:73:5e:84:63:ee:35:6c:80:af:24:09:
                    9e:cd:5d:a2:63:df:b5:3b:78:d3:d0:0c:c4:ad:85:
                    29:1c:8e:ea:ed:b1:84:fd:16:2d:fa:23:c6:43:33:
                    9f:17:01:6b:a3:1c:6a:03:d7:ed:cc:52:3d:e2:82:
                    19:7d:73:03:95:42:81:02:91:f0:79:e1:3c:b8:b0:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:4D:74:73:ED:4A:7C:B4:2A:55:E8:29:F6:9F:13:E0:36:DB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5dcb2bbc-de72-3c43-ac94-c549600f1f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.96.0/20
                  23.236.96.0/19
                  23.248.160.0/19
                  23.251.96.0/19
                  45.40.48.0/20
                  45.43.32.0/19
                  65.255.32.0/20
                  69.28.48.0/20
                  104.218.160.0/21
                  104.254.112.0/21
                  107.150.96.0/19
                  107.151.128.0/18
                  107.155.0.0/18
                  128.1.0.0/16
                  128.14.0.0/16
                  162.221.4.0/22
                  162.221.192.0/21
                  169.197.96.0/19
                  172.81.120.0/21
                  172.96.112.0/20
                  192.254.80.0/20
                  199.91.72.0/22
                  199.190.44.0/22
                  199.245.56.0/21
                  208.81.200.0/22
                  209.177.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:72:cc:d5:ed:c3:cf:39:0a:0f:60:69:b7:68:ae:c4:aa:
         91:04:84:cd:54:63:0b:d7:15:6d:b0:6d:ae:12:d1:84:21:d9:
         82:e9:dd:22:19:80:23:6e:16:11:ae:78:93:ef:05:b8:59:59:
         57:e2:f5:0f:0e:bf:32:a1:a7:ed:f9:8e:76:3a:08:79:ff:d8:
         a6:2e:e7:ba:ae:44:46:d6:57:af:4c:dc:8d:4b:1b:39:de:e0:
         fc:66:e5:b7:e4:f0:d8:73:5a:8f:0a:13:28:98:04:a4:0d:f1:
         9a:ad:2e:5d:26:61:47:87:f2:f5:75:48:18:9e:20:f3:c9:70:
         d1:db:d4:26:49:d5:f6:66:21:c1:a2:14:65:3f:e7:7d:87:ee:
         23:cb:ff:6e:ba:e8:58:da:2b:b7:70:50:33:4d:50:ce:56:0c:
         ba:2e:eb:5c:ae:e5:70:22:fc:83:72:95:7a:fa:b9:23:b4:5f:
         e8:47:31:c0:11:83:4a:8a:3c:59:e9:4c:e8:e4:86:5b:1e:58:
         81:fb:8f:9f:cf:af:c4:b4:c6:c2:7c:18:b9:0e:5c:aa:de:8d:
         e1:1a:a1:3b:fc:eb:10:94:32:29:91:ba:4d:44:93:e3:8a:c3:
         18:dd:03:82:3e:f5:18:ad:cc:9c:07:6c:bb:c4:78:b3:29:99:
         78:34:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:39 2025 by rpki-client