Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa
File:                     985971cb-7e14-37d0-b1b9-08658f2178b9.roa (raw, json)
Hash identifier:          umGyhzJVVKQxEIRpMSCesYHIGRyWABJp+RNrOZ7KHSU=
Subject key identifier:   75:CE:44:8E:97:F4:71:E5:1B:AB:66:C2:6A:81:6C:1E:65:64:D4:15
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849E654EBC666AEDA7F9FB31A80
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     25764
IP address blocks:        63.140.16.0/20 maxlen: 20
                          74.82.224.0/19 maxlen: 19
                          172.86.128.0/20 maxlen: 20
                          198.71.28.0/22 maxlen: 22
                          208.84.220.0/22 maxlen: 22
                          208.90.160.0/21 maxlen: 21
                          2604:4e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:eb:c6:66:ae:da:7f:9f:b3:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=44905ac5-3a2e-4489-9557-624033a2eb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:c7:11:70:2c:d9:3c:31:a0:11:23:ef:9b:
                    0b:aa:17:05:90:73:c8:a1:69:21:a2:cf:be:45:dd:
                    d9:eb:99:8b:3a:55:87:b0:a3:9c:f5:1e:c3:7f:5a:
                    62:67:07:d2:a8:89:7b:34:a0:10:65:3f:c2:0c:94:
                    fc:0e:70:e8:1e:dd:8f:94:81:c2:ba:fb:5a:25:7c:
                    24:6f:f5:be:eb:a1:87:de:c5:18:b0:de:ad:19:1a:
                    d2:ac:0c:bc:8b:9c:7f:52:60:fc:df:04:d5:c9:69:
                    e2:ca:f1:01:67:21:80:a3:be:04:0d:9a:b9:50:72:
                    cf:d0:8e:07:97:0d:40:59:79:95:88:41:b1:1f:b4:
                    96:69:1c:da:1e:f3:be:b8:8d:ff:00:19:38:78:19:
                    1a:fb:78:1b:64:02:a1:56:e6:4a:b5:d6:e4:f2:0e:
                    ad:71:ef:09:f2:9d:15:f3:5c:5e:b3:42:fc:0b:34:
                    ff:21:a8:0b:12:a4:88:cf:70:9f:b4:27:4d:58:09:
                    e8:74:c9:01:9d:5f:06:31:99:bf:7b:44:9e:4b:6c:
                    fe:7d:69:65:8a:90:9d:d9:30:1f:5b:fe:17:4f:4a:
                    43:67:24:b8:0b:9d:b4:53:a0:ef:68:1b:31:bc:f0:
                    aa:50:90:b8:17:e1:12:01:d8:ce:47:ac:dc:c6:70:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CE:44:8E:97:F4:71:E5:1B:AB:66:C2:6A:81:6C:1E:65:64:D4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/985971cb-7e14-37d0-b1b9-08658f2178b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.16.0/20
                  74.82.224.0/19
                  172.86.128.0/20
                  198.71.28.0/22
                  208.84.220.0/22
                  208.90.160.0/21
                IPv6:
                  2604:4e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:74:09:a8:37:c7:d3:70:ac:94:d4:9b:99:dd:70:25:52:
         46:0d:12:d5:bc:8a:6a:62:b7:77:99:10:27:9a:4e:c9:7e:c6:
         16:3a:dd:9d:5d:fb:5a:88:fa:b4:0b:d3:5a:d2:8c:b7:16:13:
         02:e2:1a:ad:4e:58:c8:c8:d6:18:6a:b6:60:a5:2f:7d:bb:61:
         6d:21:bd:16:9c:a6:3e:9d:75:05:37:0b:b9:c5:40:a0:fc:75:
         89:7c:5e:d5:e8:b7:55:1f:79:dc:64:c0:28:a3:5f:e9:48:b1:
         22:09:fa:6c:b3:a6:d1:25:96:04:db:e8:4e:0d:4d:bd:09:d3:
         87:f7:da:d0:8e:a4:9d:93:33:ee:78:9f:48:59:84:fa:37:27:
         4a:29:65:ec:3b:15:13:ed:7f:b6:6d:4c:d9:d1:e1:5d:a2:19:
         c4:46:26:6d:f3:d2:73:34:82:6e:8a:65:2c:b2:ef:df:f2:f1:
         70:29:b0:02:98:3a:89:30:57:ba:78:e3:51:82:c5:09:af:2e:
         bc:ae:3f:97:5d:bb:28:75:66:0e:45:58:d3:dc:aa:c0:41:7f:
         37:5a:a8:10:17:3b:c7:5a:d7:4d:f3:be:55:4e:02:de:91:29:
         2d:51:d0:7d:a9:2c:41:1d:80:d4:33:a3:5c:91:0d:d7:e4:9e:
         64:be:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:35:43 2025 by rpki-client