Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa
File:                     2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa (raw, json)
Hash identifier:          GSRXyiG5Sq2hVqwGK2aws7VWL14wWmLgvrQnGwW3GjI=
Subject key identifier:   BB:9A:49:39:D6:DB:87:9F:E9:F9:01:13:71:F3:64:54:CF:73:A0:AA
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A8B0B5892765A668BACEC1080
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     11090
IP address blocks:        64.4.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:58:92:76:5a:66:8b:ac:ec:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=e822915a-f124-421b-b947-f652451d65ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:c8:1d:d5:83:bd:42:3b:ab:9d:3f:62:61:
                    57:cf:40:a8:36:57:e3:94:80:d6:23:35:cf:c2:c3:
                    17:24:9c:bc:18:ac:88:d9:d8:b5:39:c5:99:57:2a:
                    8a:fb:3d:4c:e4:e8:0e:fa:21:ed:6b:71:a4:f8:be:
                    79:9f:1c:8e:a9:ea:b0:0b:f4:2d:dd:ae:05:59:a6:
                    07:7b:bd:41:3e:ea:f0:d8:3c:ac:61:44:79:ec:fd:
                    86:4f:59:d7:d3:19:7c:2c:d6:97:b6:5a:70:d8:db:
                    44:ed:08:f2:1e:dc:e0:1d:5b:fe:94:70:91:54:59:
                    8d:9e:27:aa:97:a7:2c:09:00:ef:90:b2:f9:3a:3e:
                    35:c0:8a:77:01:1e:53:c7:65:0f:71:98:7f:26:75:
                    90:99:fb:52:44:e4:5a:26:e6:2d:d8:87:f3:2f:a8:
                    34:51:14:40:84:6e:75:0e:1c:da:a3:53:17:1e:52:
                    0d:d8:ed:9b:6e:82:7b:34:40:a3:44:66:af:53:20:
                    b9:a5:09:66:99:b7:23:50:38:ea:7b:5c:b5:f5:a5:
                    3b:14:69:c5:cb:c7:e7:23:6f:4d:fe:a9:c5:53:1a:
                    a2:dd:9a:20:d5:12:91:c5:11:19:0b:90:fa:bf:ea:
                    5f:f1:a7:c0:8b:24:cc:16:bd:43:52:32:f3:f3:35:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:49:39:D6:DB:87:9F:E9:F9:01:13:71:F3:64:54:CF:73:A0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:1c:c8:4e:bb:e8:3e:c7:74:85:ee:36:b7:bc:f5:2b:89:f5:
         32:fb:fb:ca:e9:8b:86:61:f3:40:cc:c0:e7:8f:01:19:a9:17:
         5d:fe:d9:c1:26:52:cc:4e:a4:e4:6a:80:34:3c:25:28:66:9f:
         a0:a2:cc:f1:06:82:25:c5:9d:9f:32:ff:86:01:bc:c0:ea:3a:
         98:5c:bc:b7:b3:c5:b9:76:f3:ce:18:75:35:e1:00:93:08:67:
         eb:8f:49:37:5a:c5:13:87:75:d0:a8:17:5c:18:f9:6d:43:67:
         6e:b9:d0:9a:3c:6e:c0:8f:e3:30:87:9f:f0:84:a2:a8:f9:4a:
         25:7c:16:45:d7:bb:a0:9e:62:e9:35:09:61:09:33:b8:7f:c3:
         ed:82:4c:e8:19:68:a1:da:52:3e:fa:e3:85:33:aa:78:09:78:
         01:b9:7d:7c:c7:37:ef:28:ef:3c:9a:83:41:33:da:c9:7a:e6:
         fe:60:91:d3:d2:fa:31:de:f7:a3:f3:45:2a:94:55:b7:ab:ee:
         a2:43:d2:d6:c5:62:6c:76:fd:01:81:ec:2f:c1:88:a1:7e:88:
         30:72:cf:fe:7b:69:7d:a7:fd:67:07:b0:25:25:7c:f7:85:33:
         7c:57:8e:2b:8a:34:19:bf:ef:e0:89:48:9a:99:bb:c6:18:3b:
         9c:e8:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:50 2025 by rpki-client