Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8ebdd3af-5f3b-3d86-b34c-21eedeb16edb.roa
File:                     8ebdd3af-5f3b-3d86-b34c-21eedeb16edb.roa (raw, json)
Hash identifier:          V7EqWbye7PD/h7wKR+/QDVkf9v/UXellSbIZLvjR0JU=
Subject key identifier:   F8:DC:4F:58:23:42:D3:7B:7F:F4:FB:F1:AF:AF:11:8E:45:C0:02:95
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849D594EA8393D6DAD1D833AB00
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8ebdd3af-5f3b-3d86-b34c-21eedeb16edb.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     17133
IP address blocks:        64.13.0.0/17 maxlen: 24
                          2606:300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ea:83:93:d6:da:d1:d8:33:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=8a2f42f7-37b8-448d-b9cf-371300b7c827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:1c:4f:05:22:bb:88:41:99:ef:bd:65:f0:
                    64:eb:ac:d3:fd:e3:20:e2:5d:cf:4c:f2:1d:59:52:
                    e1:02:32:cd:0e:ee:66:ef:6b:62:52:aa:64:88:cd:
                    c7:76:a9:ad:b0:70:04:00:06:2c:7e:32:74:e8:a3:
                    17:df:b3:30:3f:5e:51:e0:bb:6f:97:69:a6:02:fb:
                    ab:8b:ee:43:97:6b:e7:ba:e7:be:1d:06:a5:93:af:
                    ce:ce:7a:48:36:00:7e:b6:75:e6:bf:ea:44:4d:3e:
                    0c:f0:4a:c3:7e:d9:62:04:39:1c:b9:60:ff:d9:a4:
                    b9:27:52:76:da:43:88:d6:69:bd:f1:4c:27:e2:55:
                    a4:93:0e:38:48:4d:15:e2:7b:99:e7:3e:30:9e:19:
                    17:f7:53:0b:ab:47:5c:87:33:8d:4b:a2:11:d2:71:
                    cd:e5:24:cc:2b:07:1e:f5:41:8c:d7:b8:f5:e3:87:
                    66:7d:d2:27:73:c0:3f:1e:a2:f7:6c:3b:6b:23:67:
                    3c:4f:8d:8b:32:63:79:1c:08:19:72:0e:7f:d9:6e:
                    37:52:7d:21:35:8f:0a:04:8c:d5:17:03:08:79:b9:
                    f5:38:73:ba:1a:8a:c4:8c:0d:50:c4:ed:a5:4e:e5:
                    f8:d9:80:f9:88:94:b2:77:96:51:16:11:75:16:34:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DC:4F:58:23:42:D3:7B:7F:F4:FB:F1:AF:AF:11:8E:45:C0:02:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8ebdd3af-5f3b-3d86-b34c-21eedeb16edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.0.0/17
                IPv6:
                  2606:300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:90:42:98:24:67:22:90:51:03:4e:e1:a6:d9:d4:40:9f:59:
         9a:6b:a5:b9:6b:46:55:9c:73:33:20:b6:92:1e:06:71:08:66:
         0d:09:f3:14:a5:c0:5c:65:2c:76:61:ae:aa:b9:32:92:d0:cb:
         11:df:7e:d2:9e:82:51:84:8e:16:ea:e3:9b:db:92:bc:5a:84:
         09:51:e7:03:5e:9c:f0:39:29:c3:bf:8c:23:87:7e:70:91:8f:
         9b:a5:e0:91:9a:39:4b:7f:43:81:e2:6d:b1:50:14:f1:e0:7e:
         7d:7e:a2:cb:34:43:20:b9:18:5a:2a:6c:f2:d3:a7:9f:12:fd:
         34:8b:ac:a5:86:f1:5a:eb:fe:81:e2:8a:f4:5b:a2:5b:eb:9c:
         13:a3:ba:ef:cd:4c:3a:1b:c0:5f:ca:cb:20:77:a3:b4:34:7e:
         98:d0:ef:a6:dd:c0:74:85:64:df:0a:88:31:ea:22:b7:33:4f:
         ba:13:3c:0b:19:51:ac:0c:fd:16:7b:a7:09:fd:61:07:7e:c3:
         0b:c8:57:99:6e:8a:2d:03:cc:16:02:e8:37:33:33:40:c8:5e:
         75:78:21:05:b4:6b:6c:79:6d:03:39:23:49:9c:74:92:0e:6d:
         6e:cd:8b:0e:c7:8c:62:01:93:ce:f0:b3:1a:aa:99:42:cf:34:
         3f:d0:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:52:46 2025 by rpki-client