Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
File:                     0c238eb0-5671-3c71-9597-92d5851254f0.roa (raw, json)
Hash identifier:          p/s30CCIewhZ1b4UlI4PaZlRZlix2sMx5DOk084cHuc=
Subject key identifier:   6C:E1:E8:9C:D3:D4:D6:5E:51:D6:64:13:FA:4E:D6:76:0B:5F:CC:F4
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A8B0B57BCEBB0E7A9A66D4500
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     11090
IP address blocks:        64.4.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:57:bc:eb:b0:e7:a9:a6:6d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=44a0e3b3-9c14-4ec6-80c9-7e51cb93ce12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:c0:1c:6f:b5:b1:69:58:2e:38:6b:d0:3f:
                    a3:61:3d:06:4f:96:54:dd:ae:7e:b4:42:09:84:10:
                    82:a0:a3:09:e2:6d:9d:6b:1a:9b:5b:44:7d:12:b0:
                    14:e8:21:ea:0b:00:2c:52:78:d1:b0:4f:97:fb:ff:
                    8c:62:cc:0a:db:2d:53:cb:24:78:27:dc:25:ba:1d:
                    18:dd:ff:38:17:47:9e:3d:2c:d5:45:70:7f:8e:e1:
                    64:b0:44:55:2c:96:31:41:71:42:57:6e:dc:29:21:
                    6e:b4:07:7f:cb:1c:4e:41:7b:9c:02:91:0d:13:27:
                    d9:f0:cd:c5:9c:37:e2:05:37:9b:16:a7:b3:c0:b3:
                    c9:b4:10:ed:c6:17:be:a2:44:37:bb:fb:f1:a2:58:
                    14:43:dd:79:fc:dc:a5:dc:79:72:54:d5:df:0c:13:
                    4c:dd:da:4f:42:19:98:d5:57:04:cd:60:db:41:dc:
                    fa:84:3f:71:aa:4c:a5:76:1a:c2:6e:69:a8:f8:3d:
                    cb:49:6c:de:ce:30:a2:05:26:a6:86:cd:72:c8:da:
                    14:49:a8:66:d3:b9:a6:7c:8c:2c:30:c4:6d:dc:c1:
                    82:2e:26:7e:30:ca:e1:54:af:8f:ea:d0:c0:68:01:
                    bb:ff:f9:29:16:1c:9f:7f:31:6d:c3:7c:a1:d3:b1:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:E8:9C:D3:D4:D6:5E:51:D6:64:13:FA:4E:D6:76:0B:5F:CC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/0c238eb0-5671-3c71-9597-92d5851254f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8a:99:cb:08:30:3f:c0:6c:76:9e:f5:bc:d1:be:b4:62:16:
         ad:ad:88:bb:f0:6f:9d:2a:eb:47:5d:a2:b1:4e:ae:68:bb:71:
         13:61:11:5d:55:d3:4b:60:46:aa:00:f1:8e:be:db:a2:4d:2c:
         58:21:33:6c:81:1a:1b:e6:18:bd:92:a5:86:16:cb:f9:43:32:
         e8:80:68:54:66:0b:8b:dd:0a:bf:21:8c:ed:2a:d1:6c:c3:b7:
         18:1a:64:05:f0:bd:3e:9b:a8:ab:f0:2e:44:c3:fe:37:97:eb:
         65:b7:5b:ea:77:1c:4f:9e:5e:59:20:21:db:b5:09:53:fa:59:
         45:bf:af:17:50:96:0e:a1:8a:c3:27:d2:97:4c:40:07:7a:27:
         f5:bd:89:83:b5:5a:55:d7:5a:95:a1:3e:45:93:c0:ad:74:85:
         7e:75:2e:40:6e:40:20:1a:13:09:e2:5a:4a:54:fd:fb:d7:e9:
         b8:e1:0e:a2:32:81:b2:e5:14:06:97:4c:e6:f7:f5:7d:8f:4a:
         cd:0d:b8:39:e2:ba:37:22:12:44:fe:56:a0:a7:ae:6e:7b:c5:
         98:a1:30:cd:44:5d:83:1b:96:b8:b6:c4:91:14:73:90:51:16:
         9b:cc:7a:ad:32:be:52:5c:0e:f0:c9:5a:8e:d7:34:c6:6b:03:
         3e:27:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:44 2025 by rpki-client