Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c6d5a7a8-2808-32e2-a942-c59e804fea1b.roa
File:                     c6d5a7a8-2808-32e2-a942-c59e804fea1b.roa (raw, json)
Hash identifier:          gzB+vY5MQLJWpK3Zu7lmLuO9UCzgBc6z7ZhfKtSGjCo=
Subject key identifier:   54:D0:1A:7A:39:07:F5:87:09:D9:AE:55:82:E0:49:90:C8:C1:3E:1A
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584A17E8B8A1F62A886796FC5EB0
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c6d5a7a8-2808-32e2-a942-c59e804fea1b.roa
Signing time:             Thu 05 Jun 2025 19:13:16 +0000
ROA not before:           Thu 05 Jun 2025 19:13:16 +0000
ROA not after:            Wed 03 Sep 2025 19:13:16 +0000
asID:                     16276
IP address blocks:        164.153.184.0/23 maxlen: 32
                          164.153.188.0/22 maxlen: 32
                          164.153.224.0/24 maxlen: 32
                          164.153.225.0/24 maxlen: 32
                          164.153.226.0/24 maxlen: 32
                          164.153.227.0/24 maxlen: 32
                          164.153.228.0/24 maxlen: 32
                          164.153.229.0/24 maxlen: 32
                          164.153.230.0/24 maxlen: 32
                          164.153.231.0/24 maxlen: 32
                          204.138.52.0/24 maxlen: 32
                          204.138.53.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:e8:b8:a1:f6:2a:88:67:96:fc:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Jun  5 19:13:16 2025 GMT
            Not After : Sep  3 19:13:16 2025 GMT
        Subject: CN=9bcb0306-4b25-4ef3-8ca4-5e64d6531660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:0a:4d:0a:3b:23:a5:4f:07:1f:97:4f:1e:
                    ae:fc:14:cc:d8:8b:5c:e0:61:f9:93:f9:ea:ae:0c:
                    bc:99:1d:4f:2b:63:db:03:81:99:18:c6:3d:1b:8c:
                    83:90:ec:21:8f:8a:61:27:7c:56:7b:f0:e2:85:47:
                    79:a0:46:4c:ec:32:23:ca:a5:19:59:ba:76:1d:7a:
                    ed:6b:0a:87:f5:b2:17:21:25:6a:6a:d4:c7:d8:45:
                    c2:60:25:5e:39:3e:af:e7:51:77:45:1f:0c:08:41:
                    82:fc:2d:9f:ae:64:19:2f:45:74:8c:c0:2d:81:1a:
                    e5:77:cf:27:3c:4f:5d:6d:25:f1:20:22:2e:a9:09:
                    8b:c7:ba:74:fd:4b:0e:7c:5c:8b:41:7e:42:ef:7f:
                    35:1e:69:07:52:1b:62:90:8b:10:2c:49:94:2d:23:
                    0b:3f:69:7f:d9:6c:6a:76:07:a5:b5:63:91:e7:f8:
                    18:e2:89:20:b1:8c:31:58:0d:0d:46:b5:da:f9:12:
                    5c:c5:6c:80:3c:3d:9c:53:2c:2f:f2:5d:c3:22:2b:
                    e9:fe:b3:be:10:eb:20:47:c1:3e:b8:4b:75:41:b1:
                    9b:6e:06:a3:f9:3b:c0:df:bb:b1:63:24:f5:f8:ac:
                    7a:ca:eb:01:95:b6:c8:ad:d5:2f:c9:e9:d2:80:91:
                    5e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:1A:7A:39:07:F5:87:09:D9:AE:55:82:E0:49:90:C8:C1:3E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c6d5a7a8-2808-32e2-a942-c59e804fea1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.184.0/23
                  164.153.188.0/22
                  164.153.224.0/21
                  204.138.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:17:17:f2:20:f0:73:a8:d9:ce:82:42:36:2f:99:15:50:
         70:85:4d:88:55:48:b6:5c:d9:22:79:eb:75:38:d4:de:22:86:
         1f:ea:7a:38:4f:14:39:aa:74:bd:b3:a6:d3:43:ab:ea:02:61:
         50:f2:09:00:78:e7:ff:aa:62:27:25:09:4d:96:27:5e:d7:7c:
         bb:ad:c1:eb:b0:c0:66:03:d9:5f:6d:53:55:e1:a0:63:b5:d3:
         60:dc:fc:d7:11:86:0b:ea:47:6c:85:8e:2a:40:3e:8c:fa:16:
         04:ba:2d:f0:d4:86:f2:60:5c:75:51:f7:06:7d:8b:8a:b1:d7:
         8b:2c:7a:2d:ed:12:1d:fe:02:b8:d6:d7:8e:f3:24:c2:e7:12:
         5e:06:d7:04:27:a6:74:5f:09:15:5d:b8:fe:3a:18:fe:83:1d:
         50:8e:96:26:b0:67:06:da:96:06:3d:8f:c1:6f:86:74:22:f7:
         aa:97:02:f4:be:c1:a8:25:e4:49:85:a5:a2:6e:2b:49:ed:39:
         f6:c3:29:4e:98:eb:40:36:a4:26:60:46:ed:47:ad:28:da:99:
         42:3c:1d:1c:ee:52:91:5f:25:b3:f4:99:3b:25:a6:5a:a5:11:
         89:cb:3f:df:d0:66:8e:af:ff:44:26:76:76:14:6a:98:1c:93:
         5f:78:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:50 2025 by rpki-client