Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
File:                     97476721-9327-3375-b808-56cd84523564.roa (raw, json)
Hash identifier:          mJlXuNZ1oagRhfuGarRsHZQkTLkwpqRuQ6lGTRPdjIc=
Subject key identifier:   62:76:37:0D:56:76:2E:5B:95:97:46:EE:95:A7:61:2B:8F:C7:83:2B
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F4328584AB91B8CC01AF0ED29BF74B1B0
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        64.190.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8c:c0:1a:f0:ed:29:bf:74:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d6069104-3d10-41fc-acfd-92a52a91d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:d2:cd:42:0d:46:24:06:4c:ba:ec:52:aa:
                    d4:af:ab:4d:98:f0:26:bd:d1:b0:71:2a:da:d6:cc:
                    f5:93:8e:93:d7:7b:e2:5e:c0:08:0a:e0:04:9f:7b:
                    d6:05:e7:18:a9:94:fd:98:e1:1a:e3:a9:b6:cc:7f:
                    b4:75:9c:30:a1:32:28:2e:82:53:1f:54:a2:fc:3e:
                    bb:5f:6e:73:2f:b2:0b:0a:ce:4c:f9:a7:6d:4b:16:
                    1b:8a:25:0e:b8:45:52:1c:7b:c1:1e:4f:36:22:3b:
                    78:24:5e:5a:a2:ef:a6:09:25:31:b7:0f:4a:a8:3b:
                    e2:df:53:09:80:e9:7a:86:47:3b:aa:2f:32:6e:f7:
                    07:54:e7:02:97:4d:e0:0e:79:90:90:fe:32:db:58:
                    03:94:c9:62:d7:76:ac:a7:08:be:b7:5d:f5:39:73:
                    45:2e:06:f6:dd:ff:5c:cb:52:1a:b9:c6:0c:61:79:
                    55:d6:f2:75:a8:ef:2d:c6:ef:be:a0:56:8c:8b:43:
                    43:18:ea:36:c0:46:50:c3:f5:ea:a0:dc:13:b3:13:
                    57:5e:c6:f9:6b:7b:fd:d7:75:5d:54:f5:84:68:d7:
                    2b:01:78:a7:63:95:e9:c7:f5:4b:6b:71:0a:64:22:
                    dc:0e:f0:3d:45:bb:21:ae:8b:8c:a6:e1:b7:91:67:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:37:0D:56:76:2E:5B:95:97:46:EE:95:A7:61:2B:8F:C7:83:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:60:18:3b:50:24:12:a3:5b:b6:d7:62:48:0f:d1:75:32:db:
         c6:52:e4:03:52:e4:7d:15:63:29:4f:61:f2:d5:3c:e4:a0:d9:
         75:24:64:32:8c:62:7b:cf:e5:76:a2:cf:b5:8d:fc:f1:55:c7:
         f8:40:55:32:75:d7:14:ce:b5:5f:42:9a:8e:2e:86:94:20:7b:
         26:3f:0f:89:97:8a:5d:bd:3c:e6:88:3f:68:c6:2f:67:ca:2c:
         8a:79:cd:52:6a:91:4d:7c:b2:ac:b0:ff:b6:2c:75:84:ef:7d:
         0d:be:5b:a3:68:a1:60:7b:4a:b7:c5:d8:18:65:22:78:76:82:
         c8:cb:4e:86:fd:19:a2:f9:7d:b7:c7:05:cd:30:d2:36:14:d6:
         dc:5f:d0:7e:64:28:70:3b:39:0c:22:17:30:c1:f9:0d:9b:e6:
         d6:da:60:ca:90:db:93:d6:d0:e5:6b:ef:40:00:33:6b:4d:c9:
         af:7d:45:3f:15:ac:19:b4:d3:1f:65:2c:4f:5b:27:bf:ce:2e:
         16:e0:67:ea:73:96:da:68:94:ff:a7:e9:e6:a5:6c:40:7f:ba:
         1a:e1:05:52:e5:82:2f:91:bc:23:d2:f6:92:88:fc:3c:27:1b:
         ae:51:da:a3:b4:d0:23:1a:f6:47:85:49:17:61:bf:33:59:50:
         94:61:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:56:14 2025 by rpki-client