Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/11e18d98-1fe3-3ac1-a9f1-ca3727613d10.roa
File:                     11e18d98-1fe3-3ac1-a9f1-ca3727613d10.roa (raw, json)
Hash identifier:          ioo2jHG6QQauKd4pMOQnFdl3mDAqEGnNTKCoHTYNQdE=
Subject key identifier:   9B:81:FC:9E:3A:4D:34:B7:19:2B:F4:8B:6E:EC:27:82:2D:84:6A:05
Certificate issuer:       /CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
Certificate serial:       010D0C9F4328584AB7B6243FD67A934A409E6320
Authority key identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/11e18d98-1fe3-3ac1-a9f1-ca3727613d10.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     32582
IP address blocks:        64.49.48.0/23 maxlen: 23
                          208.99.56.0/23 maxlen: 23
                          2602:fc3c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:24:3f:d6:7a:93:4a:40:9e:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=d4ba88a1-d5d7-4463-a497-7e4b81c779fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:e4:e3:73:be:c6:25:86:f3:bb:f1:9d:44:
                    94:9d:43:d2:c7:f7:8b:1b:16:a1:79:d3:e9:92:c0:
                    8c:31:fe:b9:30:3a:fc:ef:0a:33:00:ef:de:4d:88:
                    71:ca:f5:87:9d:47:5c:b6:f8:e6:65:8b:d9:c7:15:
                    3b:3b:38:dd:97:1f:4a:17:68:dd:e5:a1:39:9d:9e:
                    9f:a4:ab:2c:b2:91:eb:52:ef:33:c7:d5:2a:db:ca:
                    9b:9d:d8:e9:d3:4e:68:b8:61:75:5f:f9:69:d4:d2:
                    1c:46:75:5b:cd:59:14:a4:9d:6b:78:6e:a3:b6:a9:
                    17:b5:43:df:72:96:dd:3b:62:f2:56:c4:93:58:ea:
                    ce:f9:8f:4c:23:3e:07:51:c6:a8:7d:3b:c4:c8:8b:
                    95:84:00:be:e3:62:ee:b8:ab:21:8d:58:b7:d0:d1:
                    0e:4b:a2:7c:da:31:94:de:04:94:d3:bb:02:68:6f:
                    e4:ca:aa:c0:a6:14:c9:2d:02:4c:73:d4:52:a3:d3:
                    30:08:9d:f2:ad:db:9d:42:59:c3:f8:9c:ff:1a:6c:
                    51:bc:dd:b2:a0:f5:0e:c4:ff:8e:1c:44:bb:12:21:
                    7a:cb:d1:1c:ec:c3:50:1b:38:a7:18:e9:c6:50:af:
                    9d:2c:fd:44:6f:c0:b9:67:6c:8d:0b:13:11:fd:f9:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:FC:9E:3A:4D:34:B7:19:2B:F4:8B:6E:EC:27:82:2D:84:6A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/11e18d98-1fe3-3ac1-a9f1-ca3727613d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.48.0/23
                  208.99.56.0/23
                IPv6:
                  2602:fc3c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:b2:c0:77:c1:86:9d:1b:13:b3:99:77:b4:9b:aa:95:b4:
         b5:44:62:0d:56:cf:3c:df:c8:d9:47:78:ac:b6:bc:f3:dc:88:
         ef:ef:e6:66:f5:f8:cd:39:65:37:b2:35:f3:a1:97:93:64:4f:
         42:b8:f5:0a:7a:6d:fb:07:f8:6b:29:ae:ca:7f:b5:5b:ad:f1:
         0e:49:d3:de:b0:60:db:1c:d3:c9:4f:5e:7a:28:81:74:9b:a4:
         b4:66:ad:62:a7:21:80:4c:c0:c0:b0:a3:ff:b3:35:cb:27:63:
         86:9d:61:f7:35:83:af:bc:4f:94:8d:37:1c:cb:5d:d3:56:17:
         2b:c2:27:7b:93:0d:1a:15:ea:5e:d7:7c:d0:85:bd:ed:e1:ea:
         bc:57:c3:ac:b5:7c:7a:0e:16:de:24:98:57:48:09:24:fb:fe:
         62:96:37:a3:10:9d:8c:12:68:2f:fd:b1:d7:4c:a6:e7:0e:29:
         69:a0:a9:fa:e1:4e:b5:ef:a7:9b:2e:fd:91:4e:f0:ca:46:d3:
         e1:f0:bc:be:eb:01:ff:81:a6:4f:8b:d5:64:f0:29:87:c4:6f:
         20:cb:eb:e8:1e:33:32:42:a4:1a:e9:e1:7b:64:fd:08:ec:5c:
         7d:89:c6:7c:22:3f:f1:69:df:71:65:8d:1f:db:82:5e:45:aa:
         88:9b:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:50 2025 by rpki-client