Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dccb461d-8af2-3e5d-b68d-193bfef2ead1.roa
File:                     dccb461d-8af2-3e5d-b68d-193bfef2ead1.roa (raw, json)
Hash identifier:          nU1gUekQcOGKj9fHvlFcA16Huzj/A4J5OurDV5T5ZPY=
Subject key identifier:   0C:5D:9E:4C:50:59:51:1F:86:76:EB:50:05:2F:88:3E:35:C4:05:D6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A7FE0A8CCF9A14102C99A0A40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dccb461d-8af2-3e5d-b68d-193bfef2ead1.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     32312
IP address blocks:        64.58.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:a8:cc:f9:a1:41:02:c9:9a:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=811cf966-6afb-4c78-bdbe-b6d0d4bcea98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:25:2f:f3:b3:b0:e2:9e:87:5b:0c:96:75:
                    06:8d:cd:61:9d:3b:4b:27:78:5e:e8:24:a1:cf:47:
                    be:e0:11:ff:01:5d:ff:55:71:de:10:3a:56:14:04:
                    95:97:8e:46:d2:e0:38:75:3f:89:d7:38:b7:0b:bb:
                    8e:9b:9f:0c:05:c7:e6:62:fa:a4:75:8e:aa:25:d8:
                    e2:b0:e2:f3:4b:02:93:23:f1:44:0d:2d:07:92:6c:
                    b1:72:02:af:94:b1:ac:ab:e6:fd:f7:f9:37:b2:ea:
                    29:14:c9:d5:c5:a3:85:92:4c:ec:78:e8:e5:6c:28:
                    ad:26:38:16:93:ff:4c:f4:e3:ad:7d:11:2d:76:cc:
                    4a:67:91:a0:4a:52:cf:f8:1a:8c:5c:6d:a7:fb:f3:
                    d3:40:bb:ce:76:47:31:d4:29:a9:56:ba:06:1b:3f:
                    4c:82:05:a2:67:34:9b:61:6a:1d:cf:50:7e:7b:07:
                    82:8b:7a:20:20:46:b2:df:b0:3d:ae:0f:f2:7b:d6:
                    28:f2:b9:dd:85:29:b1:c9:3b:97:50:ea:36:b9:e3:
                    ea:d5:b5:e0:cc:20:d7:9e:5e:0d:36:85:c1:86:ff:
                    a8:ba:ec:c3:19:14:30:29:96:e0:03:f5:e7:e1:3d:
                    6a:5a:5c:09:e1:21:94:97:79:40:d6:b1:f6:7a:67:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5D:9E:4C:50:59:51:1F:86:76:EB:50:05:2F:88:3E:35:C4:05:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dccb461d-8af2-3e5d-b68d-193bfef2ead1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:a7:48:c7:ba:25:51:35:0a:43:5b:90:82:98:eb:60:9f:
         4c:69:6a:54:02:2f:6b:39:d0:e4:0e:fe:28:38:39:15:7a:be:
         dd:c3:a8:a2:e7:6d:8e:f2:cf:91:95:ca:06:58:3f:c9:d1:06:
         3b:bb:cc:a2:c6:b8:f4:72:24:d0:ea:82:c3:cb:74:d0:24:e7:
         45:94:6e:cd:4f:a3:a5:ed:8a:0c:87:f7:52:74:e9:dc:e9:af:
         c6:41:ea:d0:02:4b:11:95:35:91:ca:ff:18:b7:dc:66:dd:a6:
         fa:29:ce:4e:90:57:fb:94:59:a7:71:cc:8e:88:b0:c7:10:97:
         df:4e:87:3c:a5:47:44:53:e2:90:59:46:3e:e6:a7:09:1f:ad:
         2c:ee:94:6b:f5:1b:81:ca:ab:57:0e:c1:e0:a5:6d:1d:dc:5e:
         db:61:ef:ba:03:fb:ca:8f:bd:55:0c:59:8c:59:e1:f5:9f:14:
         1d:77:c3:87:bb:6b:f4:f9:30:79:1b:ac:54:a0:8d:32:98:fd:
         d3:e9:5d:86:ab:d6:75:12:a3:e7:7a:d4:fd:3d:0f:26:d1:45:
         33:01:74:96:7c:96:93:11:f3:de:45:a8:8b:bb:fe:ab:71:31:
         ed:d7:0f:30:fc:f2:85:a2:74:9f:d0:25:8c:e5:47:3e:37:96:
         3b:34:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:34 2025 by rpki-client