Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e60f62f-bc91-344e-8a0a-01f8e3b40310.roa
File:                     6e60f62f-bc91-344e-8a0a-01f8e3b40310.roa (raw, json)
Hash identifier:          ENe0ia8eOoZ+tKCK9YJlc6mkwQ5oHoLz+DSQmue8pc4=
Subject key identifier:   C6:A8:E8:00:B5:5D:90:7D:A4:BF:4A:9A:94:84:D6:F2:68:0E:CB:48
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8BF043DEEBF22293A380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e60f62f-bc91-344e-8a0a-01f8e3b40310.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        65.94.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8b:f0:43:de:eb:f2:22:93:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b89c11ea-9d4d-458a-bcef-d768c5fe8777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:fd:45:3b:86:02:72:00:46:08:7d:e2:c7:
                    73:29:e5:b6:5d:08:b9:6a:c2:d8:39:63:ce:d6:56:
                    25:e9:0d:03:f3:71:ee:27:f7:7b:b9:66:5a:11:f9:
                    98:65:5a:86:47:09:05:8b:b7:45:73:5e:f9:ef:48:
                    3f:80:a2:94:dc:27:a3:f0:97:b9:7c:ad:62:91:37:
                    76:eb:d5:2f:0a:38:f8:33:28:2e:64:3c:ab:de:fd:
                    ae:0a:59:cb:ab:db:9e:ae:af:8a:f9:f7:e6:25:d8:
                    46:54:a4:33:9a:3c:17:30:1f:9e:59:9e:90:d4:17:
                    e0:b4:ec:4b:31:f5:b1:d2:be:b4:aa:d7:da:76:bd:
                    bc:44:f2:48:f7:78:55:42:8c:26:a3:b4:45:5b:e7:
                    55:9b:b2:02:1c:e7:e2:85:dc:e6:25:99:cc:dd:a4:
                    0e:6c:7a:01:aa:e5:61:5d:f4:d3:ae:30:14:20:7a:
                    1c:9f:ba:59:16:87:8c:49:03:3c:dd:01:75:8a:5b:
                    ea:c4:7f:7b:1e:df:78:02:8c:72:ac:5c:c9:e8:28:
                    4e:94:7d:38:1f:cf:af:01:29:40:34:ca:03:e7:a5:
                    96:71:5f:25:96:9c:16:da:3c:31:be:65:b8:7d:e1:
                    86:76:b9:12:05:8d:ca:f3:33:77:4f:81:26:3f:ac:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:E8:00:B5:5D:90:7D:A4:BF:4A:9A:94:84:D6:F2:68:0E:CB:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e60f62f-bc91-344e-8a0a-01f8e3b40310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:dc:d4:75:85:31:38:d8:ff:73:b5:d7:19:5b:ea:c1:eb:
         44:ca:eb:be:87:17:2e:a6:a6:1e:87:d3:4f:a5:72:6a:5c:f2:
         c0:b5:5f:42:f6:c5:f2:35:5c:ca:ef:e2:33:e6:10:a3:6c:11:
         0a:2a:e3:62:e4:90:ac:89:c2:ce:76:a9:4b:15:23:f3:28:f5:
         7e:d6:ae:9c:be:21:4f:1f:af:41:e0:5f:b7:21:96:0f:e7:28:
         44:86:97:cd:e0:b8:cc:b0:71:7d:e8:30:b8:66:a6:c2:d8:71:
         66:60:f9:24:9d:10:a2:6e:f7:cb:33:25:17:e7:df:c0:33:c1:
         f7:ad:6c:09:ec:4d:28:78:d2:19:b6:ce:be:22:42:4e:2f:d5:
         32:c2:85:5b:0a:bd:bd:02:a9:c2:bd:ab:e1:9c:7a:a0:ae:0c:
         30:7d:c4:4d:af:f6:86:1c:95:dc:a4:c0:42:3d:81:94:4a:01:
         3d:77:e1:c3:2c:71:b8:db:d5:07:8e:22:e8:42:08:40:c0:36:
         9f:1d:05:eb:e5:9e:b6:cb:60:aa:6a:07:a2:bb:c8:81:e3:07:
         62:f4:33:f4:7f:74:80:08:40:31:bf:ba:f2:c6:7d:59:08:fb:
         1b:9c:c7:8c:46:79:9f:08:5d:42:65:6f:a2:d2:a7:80:52:3b:
         8a:8e:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:31:43 2025 by rpki-client