Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b1f45896-55c8-34fb-9611-7031ba0b97f4.roa
File:                     b1f45896-55c8-34fb-9611-7031ba0b97f4.roa (raw, json)
Hash identifier:          bY55YVgaEFXHfEIcQsXc6iOBqXCBDnREUd9JglbA/wg=
Subject key identifier:   FE:05:DD:92:4E:43:DD:72:6E:73:91:D9:47:8B:C7:3D:30:C6:07:11
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A0C05741C12CF7E2E3F7AD9C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b1f45896-55c8-34fb-9611-7031ba0b97f4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397766
IP address blocks:        64.34.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:74:1c:12:cf:7e:2e:3f:7a:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=38ff87ed-679b-44a3-9c50-c09ac0ce4535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:a4:fc:8b:2b:97:1d:38:af:71:a2:cf:61:
                    f1:60:e0:09:04:63:60:05:19:bb:c7:de:79:b5:80:
                    d0:db:b3:99:15:91:b1:23:30:7a:2d:a0:b2:eb:3e:
                    cc:67:1d:60:4c:65:fe:b8:88:f8:eb:80:5d:82:80:
                    10:94:53:a6:00:93:3f:28:df:ad:54:26:ed:6c:80:
                    b5:89:82:01:ac:a6:d8:cb:39:ea:e2:dc:df:54:a2:
                    64:27:b9:1f:cf:0d:71:f6:96:91:c5:21:e7:65:58:
                    1b:35:a3:54:a4:3d:cf:58:61:51:c5:7e:ab:a8:9e:
                    41:26:04:ba:a6:16:7c:d0:4b:ea:29:1f:16:8b:66:
                    f0:85:6d:3a:dd:e3:53:05:7f:0b:4e:5f:69:4e:72:
                    d1:69:09:35:f2:4c:e4:f7:43:a4:2c:62:7e:f6:f6:
                    6c:75:97:73:fa:18:9a:c1:a0:69:e6:7e:94:36:50:
                    e0:fa:b0:a6:b1:de:3a:23:a2:70:2a:53:df:12:c4:
                    70:c5:79:8a:ed:19:79:69:55:5a:14:d4:65:91:63:
                    76:c7:0d:b5:b7:8d:4c:76:1d:05:78:ca:0d:ba:bd:
                    b6:d3:1a:dd:75:00:93:be:0e:96:f8:80:09:bc:54:
                    9e:10:2a:a3:53:1d:03:59:34:33:40:b9:5a:f9:9b:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:DD:92:4E:43:DD:72:6E:73:91:D9:47:8B:C7:3D:30:C6:07:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b1f45896-55c8-34fb-9611-7031ba0b97f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:bb:6d:6d:d4:d2:ba:75:91:90:9c:32:10:93:a9:0b:ef:
         82:b5:bd:b2:e4:3c:59:63:ab:08:e1:59:40:1a:ab:8f:2d:66:
         f1:8f:87:b6:19:47:07:16:31:ab:f9:ea:73:70:eb:0c:98:e4:
         02:dc:78:80:48:38:b5:4a:66:a9:86:75:fc:0d:cc:1d:fc:60:
         19:44:88:2d:36:60:05:8a:db:97:01:d5:29:84:1c:aa:57:1d:
         3b:82:0f:55:bb:59:94:7a:1c:1b:88:36:f6:90:31:3a:54:e9:
         16:9d:e1:b4:a7:31:c7:3d:b3:3b:23:fa:ef:3c:a5:8a:df:70:
         7f:2d:ff:2a:73:51:c0:ae:bc:19:89:0f:c2:10:96:3b:c1:03:
         57:c1:1a:48:13:0d:60:3f:e5:5b:59:96:6f:e7:a1:74:51:ab:
         f6:fd:2c:ab:6e:a4:82:d4:e2:f5:a3:57:d6:3c:e0:ff:3f:4b:
         98:f1:2e:75:ee:73:be:6c:5f:79:2f:dd:42:bc:1a:45:36:9a:
         d3:0f:62:28:7f:a9:42:e3:fb:70:6e:cb:45:6d:33:2d:e1:2e:
         ce:c1:72:d5:29:a4:90:53:6e:0b:ba:4a:76:03:00:c4:93:84:
         1a:f3:e4:49:c2:da:16:45:e3:d7:18:38:3a:b8:70:f6:7f:37:
         9f:76:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:17:12 2025 by rpki-client