Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa
File:                     1fcf229c-b078-3003-9e60-edcf78e752b2.roa (raw, json)
Hash identifier:          XVYnXk6KyfOWvAsmms52DjDdGQOOlKsQTt+oE07TVcM=
Subject key identifier:   DF:05:5A:B1:9A:89:AA:AD:63:50:3B:99:CD:0D:72:C3:B7:77:D0:FB
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849EA8514A844EF3B9540785DC0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     14061
IP address blocks:        64.226.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:14:a8:44:ef:3b:95:40:78:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=394b758e-1e70-43ff-8feb-6f7fd7d58fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:da:22:cb:fb:bb:69:22:c9:79:1f:f8:5c:
                    e2:8c:48:cb:a3:b4:4f:32:7f:cf:1d:d3:23:4d:ce:
                    0d:ff:75:2c:7b:3c:fe:c0:48:38:34:dd:52:b1:82:
                    86:4a:56:6e:5c:68:5a:d8:0f:49:06:96:16:85:41:
                    bb:22:2b:00:27:09:e0:79:1c:1c:46:95:fd:4a:9a:
                    79:21:3c:9c:f1:87:2a:72:5a:a4:17:70:50:43:dc:
                    9f:da:e3:07:97:1a:38:cd:bc:22:23:31:29:20:0f:
                    10:6e:c6:23:14:78:02:42:88:1e:4f:fc:95:31:d5:
                    2b:1d:0e:db:0b:21:9d:0c:e3:20:33:4e:6b:18:7f:
                    23:b2:c7:d5:d7:1b:93:42:ba:26:6b:1b:1d:ca:b8:
                    86:79:b1:5a:97:da:e7:ac:89:71:a2:e7:7d:65:05:
                    f1:e2:86:a6:fe:d5:b0:b0:f5:88:f8:25:3e:6b:73:
                    a8:9d:9c:23:ae:1c:86:bd:80:17:cd:c8:29:a6:5c:
                    73:9d:40:c8:3d:83:7f:25:44:c7:6c:f0:30:59:82:
                    69:44:6e:ff:9b:4d:ce:a0:62:0c:23:9f:76:c4:22:
                    f1:d7:69:66:cf:03:f3:f5:11:ec:c5:87:f1:95:63:
                    6f:65:0b:73:b9:9a:86:19:0e:69:9d:2a:2e:63:32:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:05:5A:B1:9A:89:AA:AD:63:50:3B:99:CD:0D:72:C3:B7:77:D0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:43:ce:37:ea:22:e3:5e:b2:ff:05:6e:f5:e6:cd:1e:ec:a5:
         18:be:99:5e:b5:13:fd:7d:9f:0c:0f:f0:58:70:13:30:8c:f8:
         8c:7d:be:6c:70:b0:04:56:e7:e4:5f:bc:d3:4a:4c:2b:bf:61:
         a6:45:fb:90:3d:29:d9:c3:88:02:36:58:25:d7:65:f9:3a:08:
         af:23:8f:e5:35:82:42:36:42:98:a5:69:39:58:f1:7a:5f:fd:
         ca:b4:f9:96:2c:68:03:5d:af:3b:8a:95:a5:69:63:55:23:6b:
         48:9d:99:cd:b0:95:24:ae:85:cd:c1:05:ca:07:44:fe:7d:9f:
         24:b5:8e:17:ff:46:db:f5:80:ce:ea:f1:aa:e7:f3:f1:34:53:
         8f:24:ba:fb:e3:e8:94:e9:b3:54:7a:83:62:b9:a3:06:94:46:
         81:9a:53:8b:22:c6:b8:42:2f:2e:4d:a2:b7:43:f0:62:c4:e1:
         ad:43:97:b5:a5:ce:3e:3c:a9:51:0f:d1:fa:a3:bd:1e:52:23:
         e4:0c:4b:f1:56:9a:26:ef:cd:35:f5:5c:de:fe:36:c1:06:ee:
         49:96:f8:38:c6:17:26:71:8d:d2:b1:73:01:87:9a:07:4a:d2:
         e0:7d:7a:f8:83:4c:27:a4:b8:a3:5b:35:ae:c2:5c:24:b9:17:
         d8:f7:91:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:15 2025 by rpki-client