Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
File:                     48d0fc30-2a27-38a2-8e44-7a14c574b839.roa (raw, json)
Hash identifier:          AVw0sc7CVdvcVtksoZ3jzEgWRKCqKbq37rPIoY/Llc4=
Subject key identifier:   FA:71:59:BF:5B:F3:FD:61:94:F4:9A:68:5D:D8:B7:91:72:20:2D:AB
Certificate issuer:       /CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
Certificate serial:       010D0C9F4328584A7085F6F1F48FC3A1AFB5DAC0
Authority key identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     64238
IP address blocks:        64.191.0.0/23 maxlen: 24
                          2620:ff:c000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f6:f1:f4:8f:c3:a1:af:b5:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=787d8921-1ff9-40d4-b7e6-4db1d8080ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:26:df:2c:ff:90:a2:af:ba:b0:f7:a5:3b:
                    41:e3:2b:83:93:8c:30:14:ea:c8:d6:06:04:46:8a:
                    d2:08:fc:a3:b3:57:85:c3:fd:56:dd:ea:5e:f6:d7:
                    05:60:17:e0:1f:8a:d1:25:c3:d8:74:fd:73:8e:d8:
                    f8:98:66:19:91:ea:70:a6:a3:c6:1f:ed:d9:bd:00:
                    c1:f6:73:d9:fe:ed:53:5d:89:4c:14:cd:b4:1a:68:
                    7b:09:96:60:40:42:81:97:06:0d:b9:9a:df:36:4e:
                    4c:31:06:bf:37:9b:b8:ac:c0:97:c3:45:5f:3f:2c:
                    b3:dd:19:88:d3:05:da:92:d1:cd:da:fa:50:00:e7:
                    5e:21:ac:ae:33:4e:12:9f:1c:78:5b:de:6f:cc:31:
                    5b:1c:3d:6a:cc:0c:29:6c:c0:e1:d8:ae:b8:d8:a9:
                    07:3a:f0:d9:fe:bd:52:ed:8e:2c:1b:33:7d:bc:a0:
                    a4:b3:67:f1:0e:d3:59:86:e8:d2:83:9d:28:d8:f7:
                    3a:97:ee:ee:3e:e9:a4:e5:36:98:14:cc:5d:b1:1b:
                    b9:5e:51:7e:92:61:3d:bd:b2:7f:c8:22:6c:5f:6d:
                    ea:f9:67:5a:bd:54:ec:99:98:68:9b:a6:e5:0d:75:
                    01:af:da:44:75:ec:c5:c9:cb:ef:81:27:d8:fd:9e:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:59:BF:5B:F3:FD:61:94:F4:9A:68:5D:D8:B7:91:72:20:2D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/48d0fc30-2a27-38a2-8e44-7a14c574b839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.0.0/23
                IPv6:
                  2620:ff:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:ae:0d:17:4b:0d:97:5d:47:2e:71:e2:dd:10:51:83:ea:
         5f:72:5b:f9:07:4c:e2:71:46:8b:68:47:95:54:05:4f:8b:3b:
         01:cc:5d:33:77:50:b9:63:16:fc:fa:68:09:61:33:dc:c6:3d:
         e8:28:16:c2:8b:d0:87:17:35:70:55:31:c5:94:fe:3a:bb:2e:
         d6:1a:4f:49:5e:2b:04:2d:55:f6:10:85:ba:84:73:7c:a1:2b:
         e8:ea:51:06:95:ba:09:de:9d:3d:53:dd:4c:ca:38:60:a2:28:
         e6:7b:1a:2f:68:8a:da:d9:49:db:b4:c3:15:9c:55:6e:98:c2:
         5f:de:41:25:ac:e4:99:d8:4e:49:70:85:df:87:e6:60:a0:6c:
         2f:ba:41:35:6a:74:0b:2d:27:2c:39:cf:08:4d:4b:fb:50:99:
         b3:d4:e9:0d:2e:87:c7:91:4a:d1:ee:e3:0a:a0:f2:75:89:d6:
         ba:01:55:58:1a:3a:d7:71:ea:d7:b0:d6:20:72:81:45:c7:83:
         19:79:33:8c:bd:19:75:ee:31:07:d0:e6:d3:f8:6d:80:23:7f:
         86:0a:4e:a6:78:9a:be:ee:8d:f9:c6:01:f5:d6:8f:10:ff:b8:
         6a:7d:03:2f:67:d1:db:1f:92:94:7b:60:81:b9:cc:83:b0:8c:
         ec:30:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:22 2025 by rpki-client