Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa
File:                     65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa (raw, json)
Hash identifier:          gPZveFgVu7Q92TCnEOc6Uzpe/GontlTBBymm8ePgcDc=
Subject key identifier:   01:6A:E3:F4:95:07:23:CA:91:3E:0E:3F:45:A1:7D:EE:C5:38:0A:84
Certificate issuer:       /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
Certificate serial:       010D0C9F43285849D85F8210633B888E79101600
Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     33083
IP address blocks:        69.166.8.0/23 maxlen: 23
                          192.34.80.0/21 maxlen: 21
                          199.217.104.0/22 maxlen: 22
                          208.89.60.0/22 maxlen: 22
                          2602:ff65::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:82:10:63:3b:88:8e:79:10:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1b2223d3-7cf7-4ff9-873c-7c4fb24d4d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:e6:f1:6a:6a:d0:79:e0:e3:ea:73:be:a0:
                    39:6f:4f:ce:2b:7d:08:88:a8:c7:09:c1:6f:59:92:
                    5b:68:55:ca:9c:69:13:72:fb:b5:4b:a8:3e:f2:20:
                    7b:50:af:9e:ff:56:7b:6f:5e:57:25:17:c9:ba:d3:
                    c2:53:a2:d2:94:4c:14:b3:ae:5d:30:6c:90:14:56:
                    36:76:a8:16:1f:8d:3a:cf:38:c4:89:a6:5a:f4:22:
                    61:c4:f7:6b:a7:bb:35:de:b4:3b:30:14:23:4e:0e:
                    82:76:2d:c2:58:4a:04:28:49:e3:7e:ba:1c:08:66:
                    ab:ac:23:48:64:eb:b6:e4:fb:9d:cb:36:2e:f1:82:
                    7b:7d:15:c0:c8:82:3e:f0:dd:99:16:a2:f4:19:4d:
                    72:0b:f4:62:d6:6b:a7:df:c3:95:8d:21:50:1c:f4:
                    5c:21:b2:78:05:51:f9:db:9e:e2:3f:15:26:3f:b6:
                    05:01:d3:ee:5a:80:1b:99:99:87:57:94:69:af:c7:
                    0b:75:64:1f:eb:e7:ec:c9:4f:93:74:26:d6:60:7f:
                    fd:7c:30:71:ff:8a:c6:f4:36:9f:b4:a1:97:2b:97:
                    ea:94:de:75:76:55:02:d5:81:a0:48:22:6e:2a:31:
                    d0:71:c0:e8:5f:2f:03:1d:11:f2:60:44:2b:7e:58:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:E3:F4:95:07:23:CA:91:3E:0E:3F:45:A1:7D:EE:C5:38:0A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.8.0/23
                  192.34.80.0/21
                  199.217.104.0/22
                  208.89.60.0/22
                IPv6:
                  2602:ff65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:28:e4:14:dd:b4:99:23:05:86:cc:67:b5:70:3f:4d:6b:97:
         e1:3a:b0:8b:f5:b4:1c:9e:3a:46:bd:dc:6d:8d:8d:6c:53:1c:
         64:aa:72:1a:b4:84:ef:e9:80:d2:3d:e2:09:05:42:12:d8:53:
         28:f3:35:80:32:40:44:2c:4e:8d:f9:88:2f:ef:12:e8:66:27:
         f2:b2:f9:3a:43:e7:b6:5c:32:06:f1:78:4d:c6:74:b1:32:be:
         52:88:71:25:60:8b:01:5f:b8:f2:83:e1:1d:25:9a:08:ba:69:
         13:b2:88:36:5e:d1:43:be:47:a0:37:60:69:c4:49:dc:28:b3:
         ae:98:9d:ec:e4:20:99:85:e7:38:40:ba:b1:1f:28:ed:12:69:
         f9:43:80:e9:31:10:9e:9c:a2:e1:8f:87:0a:d8:3a:20:d0:09:
         91:6d:46:6c:41:ff:33:fd:d8:83:00:4f:68:86:1b:4b:6a:9c:
         a7:68:ba:c8:03:a8:53:51:f0:c1:62:0c:a6:fd:0a:6d:01:09:
         7e:0c:7c:e4:bf:6d:f9:0c:a1:82:49:9c:cd:9b:90:32:95:1e:
         7a:51:0c:e2:96:72:36:1b:be:97:f8:01:d4:d4:71:67:21:1d:
         af:09:88:df:89:97:88:44:88:1c:74:2e:b7:c9:94:3d:70:87:
         b0:bd:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:30:51 2025 by rpki-client